Privacy Policy

What Information Do We Collect?

Information you provide

We collect personal information you voluntarily provide when you register or interact with our Services. This includes:

• Email addresses
• Passwords
• Usernames

Sensitive information. We do not process sensitive information.

Payment data. We do not collect or store payment information directly. All in-app purchases are processed by Apple (App Store) or Google (Google Play). See the Apple Privacy Policy and Google Privacy Policy.

Application data. We may collect mobile device information (device ID, model, OS version, IP address) and, with your permission, send push notifications. You can opt out via your device settings.

Information collected automatically

When you use our Services, we automatically collect certain technical information that does not directly identify you:

• Log & usage data — IP address, browser type, pages viewed, timestamps, crash reports
• Device data — hardware model, OS, app version, ISP/carrier
• Location data — approximate location based on IP address. You may disable this in device settings, though some features may be affected

Sign in with Apple & Google

You may choose to sign in using Sign in with Apple or Google Sign In. When you do, Apple or Google shares your name and email address with us solely to create and identify your account. We do not receive your Apple ID password or Google account password at any time.

What we receive and why

• Email address — used as your account identifier and for account-related communications only.
• Display name — used as your in-app display name. You can update it at any time in your profile settings.
• Authentication token — a short-lived cryptographic token provided by Apple or Google that proves your identity. We do not store it beyond the current session.

We do not use your Apple or Google identity for advertising, analytics profiling, or any purpose other than authenticating you and maintaining your account.

Sign in with Apple — Hide My Email

If you choose Apple's "Hide My Email" option, Apple provides us with a private relay email address unique to you (e.g. randomstring@privaterelay.appleid.com). We will use this relay address only to send account-related communications. You can disable the relay at any time in Apple ID Settings → Password & Security → Apps Using Apple ID, which will stop email delivery to your TrackVest account.

Revoking access

You may revoke TrackVest's access to your Apple or Google account at any time:

• Apple: Settings → [your name] → Password & Security → Apps Using Apple ID → TrackVest → Stop Using Apple ID.
• Google: myaccount.google.com → Security → Third-party apps with account access → TrackVest → Remove Access.

Revoking access does not automatically delete your TrackVest account. To delete your account and all associated data, use the account deletion option in the app's Settings screen or contact support@trackvest.app.

Third-party privacy policies

Apple and Google's handling of your data during the sign-in process is governed by their respective privacy policies: Apple Privacy Policy and Google Privacy Policy. We are not responsible for their data practices.

How Do We Process Your Information?

We process your personal information to provide, improve, and administer our Services, communicate with you, and comply with law. Specific purposes include:

• Account creation & authentication — so you can log in and keep your account in working order
• Service delivery — to provide the features you request
• Support — to respond to your inquiries and resolve issues
• Administrative communications — product updates, policy changes
• Fraud prevention & security — to keep the platform safe
• Usage analytics — to understand how features are used and improve them

What Legal Bases Do We Rely On?

EU / UK users (GDPR). We rely on: Consent (withdrawable at any time), Contract performance, Legitimate interests (analytics, fraud prevention, UX improvement), Legal obligations, and Vital interests where applicable.

Canada. We rely on express or implied consent. In exceptional cases permitted by law, we may process your data without consent (e.g. fraud detection, legal compliance).

When and With Whom Do We Share Your Data?

We only share data with third-party service providers who operate under data processing agreements with us:

• User Authentication: Supabase
• Cloud Computing: Railway

We may also share data in connection with a merger, acquisition, or sale of company assets, where you will be notified in advance.

International Transfers

Our servers are located in the United States. If you are in the EEA, UK, or Switzerland, your data may be transferred to countries with different data protection standards. We mitigate this through the European Commission's Standard Contractual Clauses. Copies are available upon request.

How Long Do We Keep Your Information?

We retain your personal information for as long as your account is active, or as required by law. When we no longer have a legitimate need to process your data, we delete or anonymise it. Data stored in backup archives is isolated and deleted as soon as technically feasible.

How Do We Keep Your Information Safe?

We implement appropriate technical and organisational security measures. However, no internet transmission or storage system is 100% secure — we cannot guarantee that unauthorised third parties will never be able to circumvent our security. You should only access our Services within a secure environment.

Do We Collect Information from Minors?

We do not knowingly collect data from or market to children under 18. If you become aware of any data collected from a minor, please contact us at support@trackvest.app and we will promptly delete it.

What Are Your Privacy Rights?

Depending on your location (EEA, UK, Switzerland, Canada, or certain US states), you may have the right to:

• Access and obtain a copy of your personal information
• Correct inaccuracies
• Request erasure
• Restrict or object to processing
• Data portability
• Not be subject to solely automated decision-making
• Withdraw consent at any time

EEA/UK residents may also lodge a complaint with their national data protection authority. Swiss residents may contact the FDPIC.

Account deletion

Upon requesting account termination, we will immediately deactivate your account and permanently delete all personally identifiable information, including contact details, credentials, and user-generated content. Portfolio data may be retained in anonymised, non-identifiable form for aggregate analytics only. This process is immediate and irreversible.

To exercise any right, email support@trackvest.app.

Controls for Do-Not-Track Features

No uniform DNT standard has been finalised. We do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this notice accordingly. California law requires us to disclose this.

US Residents — Specific Privacy Rights

Residents of California, Colorado, Connecticut, and other covered states may have additional rights to access, correct, delete, and opt out of certain processing of their personal data.

Categories of data collected (last 12 months)

All categories are retained for as long as the user has an account with us.

Your rights

• Right to know whether we are processing your data
• Right to access your data
• Right to correct inaccuracies
• Right to request deletion
• Right to obtain a copy of data you previously shared
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising or sale of personal data

To exercise rights or appeal a decision, email support@trackvest.app. California "Shine the Light": California residents may request information about disclosures to third parties for direct marketing. We do not make such disclosures.

Market Price Disclaimers

Market price estimates and portfolio valuations provided by TrackVest are for informational purposes only and do not constitute financial, investment, or professional advice. Price data is sourced from third-party providers and public market sources. Actual market values may vary significantly. Users should conduct their own research and consult qualified professionals before making financial decisions. We are not liable for any losses or damages arising from reliance on price estimates or valuations.

Do We Update This Notice?

Yes. We may update this Privacy Notice from time to time and will indicate the revised date at the top. Material changes will be communicated by prominent notice or direct notification. We encourage you to review this notice periodically.

How Can You Contact Us?

How Can You Review, Update, or Delete Your Data?

Based on applicable law, you may have the right to request access to, correction of, or deletion of your personal information. To submit a request, email support@trackvest.app.