Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address, display name, and password (stored as a secure bcrypt hash). If you sign in with Google, we receive your name and email from Google OAuth.

Portfolio Data: Cards you add to your portfolio, watchlist entries, alerts, and preferences are stored to provide the service.

Usage Data: We collect anonymous usage data such as features used, pages visited, and app interaction patterns to improve the service.

Camera Data: When you use the card scanner, images are processed to identify cards. Images are sent to our server for identification and are not stored permanently.

2. How We Use Your Information

• To provide and maintain the PullPortfolio service
• To manage your account and portfolio
• To send price alerts and notifications you have opted into
• To process subscription payments via Stripe or Apple In-App Purchase
• To improve and optimize the app experience
• To respond to support requests

3. Information We Do Not Collect

• We do not collect precise location data
• We do not collect contacts or address book data
• We do not store credit card numbers (payments are handled by Stripe and Apple)
• We do not track you across other apps or websites

4. Third-Party Services

We use the following third-party services that may receive your data:

• Stripe — Payment processing for web subscriptions. See Stripe's Privacy Policy.
• Apple — In-App Purchase processing for iOS subscriptions. See Apple's Privacy Policy.
• RevenueCat — Subscription management and entitlement tracking. See RevenueCat's Privacy Policy.
• Vercel — Web hosting and serverless functions. See Vercel's Privacy Policy.

5. Data Retention

Your account and portfolio data are retained as long as your account is active. If you delete your account, your personal data will be removed from our systems within 30 days. Anonymous, aggregated usage data may be retained for analytics purposes.

6. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), bcrypt password hashing, and secure JWT session tokens. However, no method of transmission over the internet is 100% secure.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your portfolio data
• Opt out of marketing communications

To exercise any of these rights, contact us at [email protected].

8. Children's Privacy

PullPortfolio is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this privacy policy or your data, contact us at [email protected].