Privacy Policy

• Account information — when you create an account we collect your email address, an optional username you may set, and, if you sign up with email, an encrypted form of your password. If you use Sign in with Apple, we receive the identifier Apple provides and the email you choose to share.
• Payment information — when you purchase a subscription on our website, your payment is processed by our payment processor, Stripe. We receive limited transaction details (such as plan, amount, status, and your billing email); we do not collect or store your full card number.
• Device / notification tokens — if you enable alerts, we store a push notification token so we can deliver Buy / Watch / Hold / Sell zone alerts.
• Usage data — basic technical information needed to operate and secure the service (for example, authentication events).
• Watchlist & portfolio — the companies you add to your watchlist and portfolio are stored on our servers, linked to your account, so we can sync them across your devices and send the Buy / Watch / Hold / Sell zone alerts you enable. They are also cached on your device for speed and offline use.
• On-device cache — cached company market data is stored locally on your device to make the App fast and usable offline. This is general market data, not information about you.

We use your information to provide and maintain the App, authenticate you, deliver alerts you have enabled, secure the service, and respond to support requests. We do not sell your personal information.

Company financial data shown in the App is sourced from third-party market data providers and public filings. It is general information about securities, not information about you.

We share information only with service providers that help us operate the App and website — including Stripe (payment processing), Resend (transactional and marketing email delivery), our cloud hosting provider, and Cloudflare (cookieless web analytics) — and where required by law. These providers are bound to use the information only to provide their services to us. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We retain account information — including your watchlist and portfolio — for as long as your account is active. You may request deletion of your account and associated personal information (see Contact). Locally cached data is removed when you sign out or delete the App.

We use reasonable technical and organizational measures to protect your information, including encrypted credential storage. No method of transmission or storage is completely secure.

The App is intended for users 18 and older and is not directed to children.

You can disable notifications at any time in Settings, and you can request access to or deletion of your account information by contacting us.

We may update this policy from time to time. Material changes will be reflected by an updated date and, where appropriate, an in-app notice.

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request access to, or a copy of, that information; to request correction or deletion; and to be free from discrimination for exercising these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we neither sell nor share personal information in that sense, no “Do Not Sell or Share My Personal Information” action is required — but you may still contact us to exercise any of the rights above.

To make a request, email support@wonderfolio.org. We verify requests using your account email and respond within the timeframes required by law.

Questions or requests regarding this policy: support@wonderfolio.org.