Privacy Policy

1. Introduction

Welcome to StockShelf (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our mobile application.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: Used for authentication and account management via Firebase Authentication
• Display name: Optional, for personalizing your experience

2.2 Portfolio Data

We store the following information about your stock portfolio:

• Stock symbols and company names
• Share quantities and purchase prices
• Transaction history (buys, sells, dividends)
• Portfolio allocations and watchlist items
• Notes and custom categories

2.3 Usage Data

We collect anonymous usage analytics to improve our app:

• App feature usage and interaction patterns
• Device information (model, OS version)
• Error logs and crash reports

2.4 Subscription Data

We collect information about your subscription status, including:

• Subscription tier: Basic or Premium
• Billing period: Monthly or Annual
• Subscription start and end dates: To track your subscription period
• Subscription status: Active, cancelled, or expired

This information is used to provide you with the appropriate features and access levels for your subscription tier.

3. Permissions We Request

4. How We Use Your Information

We use your information to:

• Provide and maintain the StockShelf service
• Sync your portfolio data across devices
• Display real-time stock prices and market data
• Process document imports and extract transaction data
• Send important service notifications
• Improve our app based on usage patterns
• Provide customer support
• Verify subscription status and provide appropriate feature access

5. Data Storage and Security

5.1 Where Your Data is Stored

Your data is securely stored using:

• Firebase Cloud Firestore: For portfolio data and user settings
• Firebase Data Connect: For subscription and usage tracking
• Firebase Authentication: For secure account management
• Firebase Storage: For temporary storage of imported documents

5.2 Security Measures

We implement industry-standard security measures:

• Data encryption in transit (HTTPS/TLS)
• Data encryption at rest
• Secure authentication protocols
• Regular security audits and updates
• Access controls and authentication

6. Data Sharing and Third Parties

6.1 Payment Information

6.2 Third-Party Payment Processors

Subscription payments are processed by:

• Apple App Store: For iOS subscriptions
• Google Play Store: For Android subscriptions

These third-party processors have their own privacy policies governing the collection and use of your payment information. We encourage you to review their privacy policies:

• Apple Privacy Policy
• Google Privacy Policy

6.3 Data Sharing with Payment Processors

We share your subscription status and user identifier with Apple App Store and Google Play Store to verify your subscription and provide you with the correct features. We do not share any personal information beyond what is necessary for subscription verification.

6.4 Other Third-Party Services

We also use the following third-party services:

• Firebase (Google): Backend infrastructure and authentication
• RevenueCat: Subscription management and verification
• Stock Data Providers: For real-time market information (Finnhub, Yahoo Finance)
• Google Mobile Ads: For displaying advertisements to free-tier users

6.5 What We Don't Do

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your data: View all data we store about you
• Update your data: Modify or correct your information
• Delete your account: Request complete deletion of your account and data
• Export your data: Download your portfolio data
• Revoke permissions: Disable camera or storage access at any time

7.2 Marketing Communications

You can opt out of marketing emails at any time by using the unsubscribe link in our emails.

8. Children's Privacy

StockShelf is not intended for users under the age of 13 (or applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your data may be processed and stored in servers located in different countries. By using StockShelf, you consent to the transfer of your information to countries outside your residence, including the United States, where Firebase servers are located.

10. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your personal data and portfolio information will be permanently deleted within 30 days
• Anonymous usage analytics may be retained for service improvement
• Subscription records may be retained for legal and accounting purposes

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the “Last updated” date
• Sending you an email notification (for significant changes)

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price

13. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing