Privacy Policy

1. What we store

Your account details: name, email address, a securely hashed password (or your Google sign-in identity), and two-factor settings if you turn them on.

What you enter: portfolios, CDS account numbers, trades, dividends, corporate actions, alerts and settings.

Subscription records: your plan and its dates. No payment is taken in the app, so we hold no card or bank details.

2. How we use it

Only to run the service for you: to calculate your holdings and returns, send the emails you ask for (verification, password reset, alerts, weekly digest), manage your plan, and keep the service secure. We do not sell your data or use it for advertising.

3. Who processes it for us

Vercel (hosting), Neon (database), our email delivery provider (account and alert emails), and Google, only if you choose to sign in with Google. Each processes data only to provide its part of the service.

4. Cookies

We use a session cookie to keep you signed in and remember your theme choice. We use no advertising or cross-site tracking cookies.

5. How long we keep it

Your data is kept while your account exists. When you ask us to delete your account, we delete your data within 30 days, except records the law requires us to keep.

6. Your rights

Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, you may ask to see, correct or delete the personal data we hold about you. Contact us using the details on the Contact page.

7. Changes

If we change this policy we will update the date at the top of this page, and tell you by email about any significant change.