Privacy Policy

1. Who We Are

Tickers ("Tickers," "we," "us," or "our") is a stock market analysis application available on iOS and Android, operated from Canada. Our website is ticker.investments and our support contact is support@ticker.investments.

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use the Tickers mobile application and website (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account registration: Name, email address, and password when you register with email/password.
• Social sign-in: When you sign in with Google or Apple, we receive your name, email address, profile photo URL, and a unique identifier from that provider.
• Watchlists and alerts: Stock symbols you add to watchlists and alert configurations you create.
• Support communications: Any messages you send to our support email.

2.2 Payment Information

Subscription payments are processed by Stripe, Inc. We do not store your credit card number, CVV, or full card details on our servers. Stripe provides us with a customer ID and subscription status. Please review Stripe's Privacy Policy for details on how they handle payment data.

2.3 Automatically Collected Information

• Device push tokens: Your device's push notification token, used solely to send you alerts you have requested.
• API request logs: Standard server logs including IP address, request timestamps, and endpoints accessed. These are used for security monitoring and are retained for 30 days.
• Error reports: Crash and error information to help us diagnose and fix problems.

2.4 Information We Do NOT Collect

• We do not collect brokerage account information or trading history.
• We do not collect precise location data.
• We do not use advertising tracking identifiers (IDFA, GAID).
• We do not fingerprint your device beyond the push notification token.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Providing the Service: Creating and managing your account, delivering real-time stock data, generating AI analysis, and operating watchlists and alerts.
• Subscription management: Processing payments, managing your subscription status, and sending billing-related communications through Stripe.
• Push notifications: Sending price alerts, earnings reminders, dividend alerts, and trial expiry notices that you have enabled.
• Service improvement: Analysing usage patterns (in aggregate, not individually) to improve features and fix bugs.
• Security: Detecting and preventing fraud, abuse, and unauthorized access.
• Legal compliance: Meeting obligations under applicable law, including responding to lawful requests from authorities.
• Communications: Sending transactional emails (account confirmation, password reset, subscription receipts). We do not send unsolicited marketing emails.

We do not use your personal data to train AI models. Your watchlist and alert data is used only to deliver your alerts and is not shared with Anthropic or any other AI provider.

4. Third-Party Services

Tickers integrates the following third-party services to operate:

4.1 Supabase

We use Supabase (Supabase Inc.) to host our PostgreSQL database. Your account data (email, name, subscription status, watchlists, alerts, and push tokens) is stored on Supabase-managed infrastructure. Supabase's servers are located in the United States. Supabase Privacy Policy.

4.2 Anthropic Claude API

AI stock analysis is generated by Anthropic's Claude API. To generate analysis, we send the following non-personal data to Anthropic: stock symbol, current price, technical indicators, earnings data, and analyst consensus. We never send your name, email, watchlist composition, or any personally identifiable information to Anthropic. Anthropic Privacy Policy.

4.3 Twelve Data

Real-time and historical market data is sourced from Twelve Data. We send stock symbol queries to their API. No personal data is shared. Twelve Data Privacy Policy.

4.4 Finnhub

Earnings calendar and dividend data is sourced from Finnhub. We send stock symbol queries only. No personal data is shared. Finnhub Privacy Policy.

4.5 Stripe

Subscription billing is handled by Stripe, Inc. When you subscribe, you interact directly with Stripe's payment interface. We receive your Stripe customer ID and subscription status. Stripe Privacy Policy.

4.6 Expo (Push Notifications)

Push notifications are delivered via Expo's push notification service. Your push token is transmitted through Expo's infrastructure. Expo Privacy Policy.

4.7 Google and Apple (Social Sign-In)

If you choose to sign in with Google or Apple, those providers share limited profile information (name, email) with us per their respective OAuth implementations. We do not have access to your Google or Apple passwords. Review Google's Privacy Policy and Apple's Privacy Policy.

4.8 Railway

Our backend API is hosted on Railway. Server logs (IP addresses, request metadata) may be temporarily stored on Railway's infrastructure. Railway Privacy Policy.

5. Data Storage and Security

Your data is stored on servers located in the United States (Supabase) and United States (Railway). If you are located in Canada, your personal information is transferred to and processed in the United States.

We implement reasonable technical and organizational security measures including:

• Encrypted data transmission via TLS/HTTPS for all API communications
• Passwords hashed using bcrypt with a cost factor of 12
• JWT access tokens with 15-minute expiry and refresh token rotation
• Database access restricted to our backend service only (no public database access)
• Row-level security policies on all database tables
• API rate limiting to prevent abuse

No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

6. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of a verified account deletion request.
• Server logs: Retained for 30 days for security monitoring, then automatically deleted.
• AI analysis cache: Cached stock analysis data is automatically deleted after 4 hours.
• Payment records: Stripe retains payment records as required by financial regulations (typically 7 years). We retain your Stripe customer ID for this period.
• Push tokens: Deleted immediately upon account deletion or when you unregister the token.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a structured, machine-readable format.
• Opt out of notifications: Disable push notifications at any time in the app Settings screen or your device settings.

7.2 Canadian Users (PIPEDA)

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access your personal information and to challenge its accuracy. You may direct complaints to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

7.3 California Users (CCPA/CPRA)

California residents have rights under the California Consumer Privacy Act, including the right to know what personal information is collected and to opt out of the sale of personal information. We do not sell personal information.

7.4 How to Exercise Your Rights

To exercise any of these rights, email us at privacy@ticker.investments with the subject line "Privacy Request." We will respond within 30 days.

8. Push Notifications

If you grant permission, we send push notifications for:

• Price alerts you have configured (price above / below targets)
• Earnings reminders for stocks in your alerts
• Ex-dividend date reminders
• Trial expiry reminders

You can disable push notifications at any time in the Tickers app (Settings → Notifications) or in your device's notification settings. Disabling notifications does not affect your ability to use the Service.

9. Children's Privacy

Tickers is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@ticker.investments and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Updating the "Last updated" date at the top of this page
• Sending a push notification or in-app notice for significant changes

Your continued use of the Service after the effective date of any update constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

11. Contact Us