Privacy Policy
This policy explains what data we process when you use TrackYourInvestment, why we process it, and your rights. We kept it short.
What data we process
Account details: your email and name. If you sign in with Apple, the name and email Apple sends us, including the relay address Apple hides.
Your portfolio data: the assets and transactions you add, plus value snapshots over time. This is the core of the app.
A profile photo, if you upload one.
Your subscription status: a record of it if you bought premium.
Your device's notification token, if you allowed notifications.
Your language preference.
Technical diagnostic logs created when the app crashes or errors.
Why we process it
To create your account and let you sign in. Legal basis: performance of a contract.
To store your portfolio and calculate and show its value and profit/loss. Legal basis: performance of a contract.
To manage your premium access. Legal basis: performance of a contract.
To send you notifications and generate AI insights, only if you explicitly ask for them. Legal basis: consent.
To keep the app working and stable. Legal basis: legitimate interest.
Who we share it with
We don't sell your data or use it for advertising. There is no advertising or analytics tracking in the app.
We use a few providers to run the service: Apple (sign-in and purchases), RevenueCat (subscriptions), Cloudflare (profile photo storage), Expo (notifications), Sentry (error tracking) and OpenRouter (AI insights). Each one sees only the data it needs to do its job.
Some of these providers are US-based. In that case your data is transferred outside Türkiye and the EU. We handle the transfer under GDPR standard contractual clauses and the consent framework of Turkish KVKK.
If you use AI insights, a summary of your portfolio is sent to OpenRouter to generate the text.
Data that stays on your device
Your Face ID or fingerprint lock and your session tokens stay in the secure area of your phone. We don't see them and they never reach our server.
How long we keep it
We keep your data while your account is open. If you delete your account, your portfolio, profile photo and account details are permanently deleted. Only records we are legally required to keep remain.
How to use your rights
You can access, correct, delete, port and object to the processing of your data. You can withdraw any consent you gave at any time.
To use these rights, write to [email protected]. We answer within a reasonable time.
Article 11 of KVKK and the relevant GDPR articles cover these rights. If our response doesn't satisfy you, you can complain to the Turkish Data Protection Authority or the data protection authority in your country.
Security
We move data over encrypted connections and keep access limited. No system is perfect, but we take reasonable measures.
Children
The app is not aimed at anyone under 18. If we notice a child has given us data, we delete it.
Changes
If we update this policy, we change the date above. For an important change, we tell you inside the app.
Contact
For anything about privacy: [email protected].