Privacy Policy

Last updated: 20 September 2026

Our Commitment to Your Privacy

Welcome to TrackMyStack, published by Beeblesoft Ltd. We are committed to protecting your privacy and handling your data with transparency. Our guiding principle is to collect only the minimum information necessary to provide and improve our service. This policy explains what data we collect, why we collect it, who else sees it, how long we keep it, and what you can do about it.

1. Anonymous by Design: No Personal Account Required

To use TrackMyStack, you do not need to create an account with personal information like your name or email address, and you never hand us the login to a bank or a broker.

When you first use the app, an anonymous, unique identifier is created. This identifier is not linked to your real-world identity. Its sole purpose is to enable core features like securely synchronizing your portfolio data across your devices.

Support does not need one either: you can write to us from inside the app, and the conversation is attached to your anonymous account. An email address is needed only if you want to recover your account on a new device, or if you write to us through the contact form on our website instead, where there is no account to attach the message to.

2. Information We Collect and Why

We collect a limited set of data to operate and improve the app.

a) Data You Manually Provide

  • Portfolio Contents: You manually enter your assets, liabilities, and transactions. This data is stored on your device and sent securely to our servers so you can reach it from your other devices. It is stored encrypted, and we decrypt it only to do the work you have asked for — valuing your holdings, keeping your home-screen widgets current, and answering an assistant you have connected. We never use it to profile you, sell it, or share it for advertising.
  • Files You Upload for an Import: If you import a portfolio from a statement or a screenshot, the file is uploaded encrypted, read once to produce the list of holdings you then review, and deleted. We do not keep it. Reviewing and undoing an import work from the list, not from the file, so nothing needs the original once it has been read.
  • Messages You Send Us: Support messages written in the app carry no email and no name — they are attached to your anonymous account, and we keep the conversation so that it still makes sense the next time you write. If you use the contact form on our website instead, or verify an email address so you can recover your account, we keep that address too.

b) Data We Collect Automatically for App Functionality

  • Asset Queries: When you search for assets (e.g., stocks, cryptocurrencies) or refresh prices, the app sends a request to our servers with the asset ticker (e.g., "AAPL"). This is necessary to retrieve the latest market data for you.
  • Usage Events: Information about actions taken, such as screens opened or buttons tapped. This helps us understand which features are most popular and where we can improve the user experience.
  • Device Information: Your device type (e.g., "iPhone 15"), OS version, phone language, and app version. This helps us troubleshoot bugs and optimize the app for different devices.
  • IP Address and Approximate Location: Your IP address reaches our servers with every request, as it does with any internet service. We resolve it to an approximate location — country, region, city — so we know which markets and currencies to prioritise and can spot abuse. We do not collect GPS location, and the app never asks your device for it.
  • Aggregated Financial Information: High-level, non-identifiable data such as the currencies you use (e.g., "USD," "GBP") and the types of assets you track (e.g., "Stock," "Crypto"). This helps us prioritize feature development.
  • Crash and Error Reports: If the app crashes, an anonymous report may be sent to us. You may also voluntarily choose to send us diagnostic logs to help us resolve a specific issue you are facing.

3. Information We Explicitly DO NOT Collect

Your financial privacy is paramount. To be clear, we never collect or transmit:

  • Bank or Broker Credentials: TrackMyStack does not link to your financial accounts. There is no login to give us, and no read access to your real accounts for anyone to lose.
  • Advertising Identifiers: The app contains no advertising SDK, no third-party analytics SDK, and no tracker. Usage data goes to our own servers and nowhere else.
  • Contacts, Photos or Precise Location: We never ask your device for them.
  • Your Backups: The app allows you to create internal backups or export your portfolio to a file. We do not have access to these files. They are for your use only.

4. How We Use Your Information

We use the data we collect for the following purposes:

  • To Provide and Maintain the Service: To fetch asset prices, sync your data between devices, calculate your net worth, and ensure the app functions correctly.
  • To Improve the App: To understand user behavior, prioritize new features, and optimize performance across different devices and operating systems.
  • To Ensure Security and Stability: To monitor the load on our servers, manage responsiveness, and be alerted to potential technical issues, abuse, or errors.
  • To Provide Customer Support: To diagnose and resolve issues you report to us, often with the help of logs you voluntarily provide.

We do not use your data to make automated decisions about you, and we do not use your portfolio to give you financial advice or recommendations.

5. Who Else Sees Your Data

We do not sell, rent, or trade your data, and we share nothing for advertising or marketing. To run the service we rely on a small number of service providers, who process data on our behalf and only for the purpose they are given it for:

  • Cloud Hosting and Storage: Runs our servers and holds the encrypted files you upload.
  • AI Providers: When you import a statement or screenshot, its contents are sent to an AI provider to be read and turned into a list of holdings for you to review. We send the file, not who you are: the provider receives no name, email, or account identifier, and returns the result to us.
  • Email Delivery: Sends verification codes and our replies to you.
  • Subscription Management and the App Stores: Apple, Google, and our subscription provider tell us whether your subscription is active. We never see your payment details.
  • Push Notification Delivery: Delivers a notification to your device.
  • Abuse Prevention: Checks that a form submission is not automated, and resolves an IP address to an approximate location.

Market-data providers receive the asset identifiers we look up, never your identity or your holdings.

6. Connected AI Assistants

You can connect TrackMyStack to an AI assistant such as ChatGPT or Claude, so you can ask it about your portfolio. This is off unless you turn it on, it requires a TrackMyStack Premium subscription, and you start it yourself from Account → Connected apps.

Once connected, the assistant can read:

  • your net worth, the change since the previous market close, and the breakdown per portfolio;
  • your holdings, including quantities, values, cost basis, and unrealised gain;
  • your biggest movers;
  • results from our market catalogue when it searches for an asset.

It can also change your portfolio on your instruction:

  • add a holding or a portfolio;
  • change a holding you already have;
  • archive a holding.

It cannot permanently delete anything — that stays a decision you make in the app — and it cannot reach your backups, the files you upload for an import, or your support messages. It only ever sees the account you connected.

What the assistant does with that data once it has it is governed by its own provider's privacy policy and data controls — OpenAI for ChatGPT, Anthropic for Claude — not by this one.

On our side we record that a connection exists and keep a record of connector activity, so you can see what has been accessed and so we can investigate abuse. You can disconnect at any time from Account → Connected apps; access stops immediately.

7. How Long We Keep Your Data

  • Portfolio Data: For as long as your account exists.
  • Usage Events, Sessions and Diagnostic Logs: While your account is active, so we can compare behaviour over time and investigate an issue you report months later.
  • Files You Upload for an Import: Not kept. Deleted once the file has been read.
  • Messages and Support History: Kept so that the next person to read your message has the conversation so far.
  • Assistant Connections: A connection lasts until you revoke it or it goes unused long enough to expire.
  • If You Delete Your Account: Your devices lose access immediately, and the account and the data synced under it are deleted.

8. Your Choices and Controls

  • Delete your account from Account → Delete account in the app.
  • Disconnect an AI assistant from Account → Connected apps, at any time, without affecting the rest of your data.
  • Export your portfolio to a file you keep, at any time. There is no lock-in.
  • Diagnostic logs are opt-in. We ask; you decide each time.
  • Access, correction and erasure: wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to erase it. If you are in the UK or the EU you have these rights under the UK GDPR and the GDPR, and you can complain to your data protection authority.

9. Data Security

We implement industry-standard security measures to protect the data stored on our servers from loss, misuse, and unauthorized access. All data transmitted between the app and our servers is encrypted, and your portfolio is stored encrypted at rest. Note that this is encryption we hold the key to, not end-to-end encryption. We hold the key so that you can recover your account on a new device, and so that our servers can provide features such as valuations, home-screen widgets, and connected AI assistants.

10. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of any significant changes by posting the new policy within the app or on our website, and by updating the date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy, or a request about your data, contact us.