Privacy Policy

• Account information: when you create an account we collect your email address, an optional username you may set, and, if you sign up with email, an encrypted form of your password. If you use Sign in with Apple, we receive the identifier Apple provides and the email you choose to share.
• Payment information: when you purchase a subscription on our website, your payment is processed by our payment processor, Stripe. We receive limited transaction details (such as plan, amount, status, and your billing email); we do not collect or store your full card number.
• Device / notification tokens: if you enable alerts, we store a push notification token so we can deliver Buy / Watch / Hold / Sell zone alerts.
• Free valuation requests: when you ask for a free valuation we store your email address, the ticker you chose, the date, your IP address, and the exact consent wording you agreed to. We keep this so we can honour the one-free- valuation limit and prove your consent, as Canadian anti-spam law requires. We keep it until you ask us to delete it. Email us to request deletion. We share your address with Resend, our email provider, and we use Cloudflare Turnstile to block automated abuse.
• Support chat: when you use the chat bubble on our website we store the messages you send, the page you were on, and the time. A cookie named wf_support_thread holds a random identifier for your conversation for 30 days so your messages stay in one thread; it tracks nothing else. If you are logged in, the conversation is linked to your account. To alert our support staff, the text of your message is also sent by email through Resend and as a notification through Telegram. We keep conversations until we delete them; email us to request deletion.
• Advertising measurement: our website uses the Meta pixel, a piece of code from Meta Platforms. It sets cookies in your browser and sends Meta the pages you visit on our site and the fact that you requested a free report. It does not send your email address or the company you chose. We use it to measure our ads and to show them to people likely to be interested. See section 10 to opt out.
• Usage data: basic technical information needed to operate and secure the service (for example, authentication events).
• Watchlist & portfolio: the companies you add to your watchlist and portfolio are stored on our servers, linked to your account, so we can sync them across your devices and send the Buy / Watch / Hold / Sell zone alerts you enable. They are also cached on your device for speed and offline use.
• On-device cache: cached company market data is stored locally on your device to make the App fast and usable offline. This is general market data, not information about you.

We use your information to provide and maintain the App, authenticate you, deliver alerts you have enabled, secure the service, and respond to support requests. We do not sell your personal information.

Company financial data shown in the App is sourced from third-party market data providers and public filings. It is general information about securities, not information about you.

We share information only with service providers that help us operate the App and website, including Stripe (payment processing), Resend (transactional and marketing email delivery), our cloud hosting provider, Cloudflare (web analytics, and Turnstile bot protection on our forms), Meta Platforms (ad measurement), and where required by law. Apart from Meta, these providers are bound to use the information only to provide their services to us.

We do not sell your personal information. We do share limited information with Meta: our website uses the Meta pixel to measure our ads and to show them to people likely to be interested. The pixel sets cookies and sends Meta the pages you visit on our site and the fact that you requested a free report. Meta may use this under its own terms. California law calls this sharing for cross-context behavioral advertising. You can opt out as described in section 10.

We retain account information, including your watchlist and portfolio, for as long as your account is active. You may request deletion of your account and associated personal information (see Contact). Locally cached data is removed when you sign out or delete the App.

We use reasonable technical and organizational measures to protect your information, including encrypted credential storage. No method of transmission or storage is completely secure.

The App is intended for users 18 and older and is not directed to children.

You can disable notifications at any time in Settings, and you can request access to or deletion of your account information by contacting us.

We may update this policy from time to time. Material changes will be reflected by an updated date and, where appropriate, an in-app notice.

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request access to, or a copy of, that information; to request correction or deletion; and to be free from discrimination for exercising these rights.

We do not sell your personal information. We do share it with Meta for cross-context behavioral advertising, as described in section 4. You can opt out of that sharing in either of two ways: select “Do Not Share My Personal Information” at the bottom of any page on our website, or turn on Global Privacy Control in your browser. Either one stops the Meta pixel from loading in that browser. The link saves your choice in that browser only, so select it again if you clear your browsing data or use another browser.

To make a request, email support@wonderfolio.org. We verify requests using your account email and respond within the timeframes required by law.

Questions or requests regarding this policy: support@wonderfolio.org.