Privacy Policy

When you create an account we collect your email address and a hashed password. If you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service — we never see your Google password. If you sign in with Apple, we receive your email address (which may be an Apple private relay address) and an Apple user identifier — we never see your Apple ID password.

StockIntel AI is free to use. The only purchase is one optional, one-time £4.99 “Remove Ads” in-app purchase (or the local equivalent) in the iOS and Android apps, processed by Apple or Google and managed through RevenueCat; we never see your payment details. If you subscribed in the past, your payment details were processed directly by Stripe (website) or by Apple or Google (in-app purchases). We never stored card numbers on our servers; we keep the Stripe customer ID and subscription status from that time as a record of your past purchase, for example to handle refund requests. No full payment card information is stored by us.

When you create an account we record your country, estimated from your IP address at sign-up. We don't collect precise location.

We record usage data — such as your watchlist entries, the stocks you view, your price alerts, and your Predict guesses — solely to provide and personalise the service. We do not collect contacts, browsing history, or health and fitness information.

We also record which pages of our website you view (the page address and the name of the site that referred you), linked to your account when you're signed in, to understand how the site is used; this uses no cookies, and our website uses no third-party advertising or tracking cookies.

In the iOS and Android apps we record anonymous in-app usage events (for example, which screens you open and which features you tap) to understand how the app is used. These app events are not linked to your account.

We may collect basic diagnostic data (crash reports and performance metrics) to maintain app stability; this crash and performance data is not linked to you. While you're signed in, the app may also send us short technical logs, linked to your account, to help us fix problems (for example, when notifications fail to set up).

If you contact us through the in-app feedback form, we store your name, email address and message so we can reply.

If you complete the optional onboarding quiz before creating your account, we derive and store three preference labels from your answers — a self-reported experience level, risk lean, and investment goal — used solely to power the optional "Personalised" stock list on your dashboard. If you skip the quiz, sign up through an existing session, or created your account before this feature existed, these fields simply remain empty; we never re-prompt you for them or infer them any other way.

• To authenticate you and manage your account, including records of any past subscription (App Functionality).
• To personalise your watchlist and dashboard experience (App Functionality).
• To send transactional emails (password resets and other account-related emails) — never marketing without explicit consent (App Functionality).
• To maintain the security and integrity of our service (App Functionality).
• To diagnose crashes and improve app performance (App Functionality / Analytics).
• To reply to messages you send us through the feedback form (App Functionality).
• To understand how the app and website are used, including which country our users sign up from (Analytics).

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We store a JSON Web Token (JWT) in your browser's local storage to keep you logged in. We may use strictly necessary session cookies for security purposes.

Affiliate programme (discontinued). We previously ran an affiliate programme: visiting the website through a partner's link stored that partner's code in your browser, recorded the visit, and linked your new account to the partner who referred you so they could be credited. The programme has been discontinued — no affiliate codes are stored, visits aren't recorded, and new accounts aren't linked to a partner. Records created while it was active are retained for historical commission accounting.

We use the following third-party processors to deliver the service. Each is governed by its own privacy policy. We share only the minimum data necessary for each service to function, and we do not share your account details (such as your name, email address, or watchlist) for advertising or marketing purposes.

• Market Data Provider — we use a third-party financial data service to provide stock prices, analyst ratings, and market data shown in the app. This provider receives no personal information about you — only anonymized requests for market data (e.g. ticker symbols).
• OpenAI — AI-generated stock analysis. Stock symbol queries are sent; no personal account data is included.
• Anthropic (via Replit) — powers Stoki, our AI assistant. When you use Stoki, your message and your recent messages in that conversation are sent through our hosting provider Replit to Anthropic's Claude model to generate a reply. We don't send your name, email or account ID with them, and StockIntel doesn't store your chat history on our servers (it stays on your device). Our providers may keep this data for a limited period for safety and abuse monitoring. Please don't include personal or sensitive information in chat messages.
• Stripe — payment processor for past web subscriptions. When subscriptions were offered, Stripe received your payment card details directly and returned a customer ID and subscription status to us. Stripe holds the billing records for those past purchases (for example, for refunds).
• RevenueCat — manages in-app purchases made through the Apple App Store or Google Play: the optional one-time “Remove Ads” purchase and past subscriptions. RevenueCat holds purchase and subscription events (e.g. plan purchased, renewal, cancellation) and Apple/Google receipt identifiers (Apple's original transaction ID or Google's purchase token) for those purchases. It does not receive your payment card details — those are handled directly by Apple/Google.
• Resend — transactional email delivery. Resend receives your email address (and the content of the email itself) whenever we send you a password reset or other account-related email. We never use Resend for marketing email without your explicit consent.
• Google — optional OAuth sign-in. If you choose this option, Google shares your name, email, and profile picture with us under Google's Privacy Policy.
• Firebase Cloud Messaging (FCM) — push notification delivery. If you opt in to Stock Alerts, your device's push notification token is sent to Google's FCM service (which relays to Apple's APNs on iOS) solely to deliver the alert notifications you've enabled. FCM does not receive any other account data from us.
• Google AdMob — banner ads in the iOS and Android apps. When an ad loads, Google's Mobile Ads SDK receives your IP address (used to estimate your general location), device and app information, ad views and taps, and performance and crash data. It also receives your device's advertising identifier, but on iPhone and iPad only if you allow tracking when asked. Google uses this to show, measure, and personalise ads. We don't send Google your name, email address, or any other account data for advertising.

Apart from Google AdMob in the apps, none of these services receive your data for cross-app tracking or third-party advertising.

Your choices about ads. You can turn off personalised ads from Google at adssettings.google.com. If you're in the UK, EEA, or Switzerland, the apps ask for your consent before personalised ads are shown; if you don't consent, you may still see non-personalised ads. In the apps, you can change that consent at any time in Account → Privacy & Security → Ad privacy choices. On iPhone and iPad, ads use your advertising identifier only if you allow tracking; you can change this in iOS Settings → Privacy & Security → Tracking.

We previously used Anderro, a third-party ad-attribution service, on our website. That integration has been removed and is no longer part of StockIntel AI: no Anderro consent prompt or script is shown, and no data is sent to Anderro. Attribution records created while it was in use are held under the Data Retention terms below.

We retain your account data for as long as your account is active. If you delete your account, your personal data is permanently removed within 30 days, except where retention is required by law (e.g. financial transaction records relating to past subscriptions).

Depending on your location you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing activities.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at support@stockintel.app.

StockIntel AI is intended only for adults. You must be at least 18 years old to create an account, and you are asked to confirm this when you sign up, whether with email, Google or Apple. We record the date and time of that confirmation with your account.

We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has created an account, please contact us at support@stockintel.app and we will delete the account and its data.

Passwords are hashed using bcrypt and never stored in plain text. All data is transmitted over HTTPS (TLS). We follow industry-standard security practices, but no system is 100% immune to breaches. We will notify affected users promptly in the event of a security incident.

If you have any questions about this Privacy Policy, please contact us at support@stockintel.app. We aim to respond within 5 business days.