Privacy Policy

Who is responsible for your data

The data controller is Borys Połczyński (kontakt: borygoo45@gmail.com). Write to that address in any matter concerning your data — we reply within 30 days.

What we collect

Only what you provide yourself or what the account cannot work without:

• Email address and password (stored encrypted) — for signing in. When you sign in with Google we receive your email address and account name.
• Your portfolio data: transactions from the reports you upload, instrument names, amounts, watched companies and app settings.
• Payment status (whether and until when you have Premium).
• Technical request data: IP address, time, device type — kept in server logs for security and troubleshooting.
• Product events: which Premium features you open — without portfolio contents, so we know what to build next.
• A referral code, if you enter one: which creator referred you and when. The creator only receives aggregate numbers from us (how many accounts and payments came from their code) — never your email address or portfolio data.

Why, and on what legal basis

Account and portfolio data are processed to perform the service agreement (Art. 6(1)(b) GDPR). Logs and security measures rely on our legitimate interest (Art. 6(1)(f)). Accounting records for purchases are kept because tax law requires it (Art. 6(1)(c)).

We do not carry out profiling with legal effects, nor automated decision-making about you.

What we do NOT do

• We do not sell or rent your data.
• We do not connect to your brokerage account and have no access to your money — portfolio data comes only from the reports you upload.
• We do not execute transactions on your behalf.
• We embed no third-party advertising or tracking pixels.

Who processes data on our behalf

We use services the app could not run without. They are processors bound by data processing agreements:

• Supabase — accounts, sign-in and database (servers in the European Union).
• Railway — application hosting.
• Google — only if you choose to sign in with Google.
• Market data providers — they receive the instrument symbol, never your personal data or position sizes.
• Language models used for analysis — they receive the text of a news item or a company report, not your account data.

How long we keep it

Account data is kept for as long as the account exists. When you delete the account we erase it together with the portfolio — immediately and irreversibly. Technical logs expire after 90 days. Accounting records are kept for 5 years because the law requires it.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it and object. You may also lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

You can delete your account with all its data yourself, without writing to us: in the app, the “More” tab → “Delete account”. It also works in the browser.

Browser storage and cookies

We use no cookies for tracking or advertising. In the browser we store only what the app needs to run, in the local storage of your device:

• the signed-in session token — otherwise every refresh would sign you out,
• view settings: chosen background, last tab, server address.

Children

The service is not intended for people under 16 and we do not knowingly collect their data.

Changes

Last updated: 9 października 2026. We announce material changes in the app before they take effect.