Privacy Policy

RapidTradeView is operated by Asaf Berreby in Israel. For privacy requests, contact asafb2k@gmail.com or visit our contact page.

Accounts and sign-in

When you choose Google sign-in, we receive a provider account identifier, your email address and available profile information such as your name and picture. On supported iPhone builds, Sign in with Apple provides an Apple account identifier and may provide your name and email the first time you authorize the app. If you choose Hide My Email, we receive Apple’s relay address instead of your personal email. Repeat Apple sign-ins may not provide your name or email again. We do not receive your Google or Apple password.

Google’s native sign-in software also declares processing of phone numbers, approximate location, account and device identifiers, technical information and usage data for sign-in functionality and analytics. Google may estimate a device’s general location from its IP address to prevent fraud. These categories can be processed by Google even when they are not included in the account fields returned to RapidTradeView. See Google’s sign-in privacy information.

We identify Apple accounts by Apple’s verified account identifier. An email match does not automatically join accounts. Connecting Apple and Google requires you to prove access to both sign-in methods. This lets explicitly connected accounts access their saved data across supported apps and the website.

We use session credentials to keep you signed in. Mobile access credentials last two hours; mobile refresh sessions can last up to 30 days and are rotated when used. App refresh credentials are stored as hashes on our server, and Apple refresh credentials needed to manage your Apple authorization are encrypted on our server. Mobile credentials are stored using the device’s secure storage. Older Android installations may also use a secure cookie lasting up to five minutes to prove ownership of an existing session while renewing Google sign-in. This proof cannot access account data by itself. Sign out when using a shared device.

Portfolios and files you choose

We store portfolio names, stock and ETF symbols, holdings, quantities, transaction dates, prices, fees, dividends and notes you enter, linked to your account. These records can reveal financial information. When you import a CSV or spreadsheet, the selected file is sent to our server for parsing, and supported transaction fields are saved. The import process does not keep a separate original-file archive. Only upload information needed for your portfolio; do not include account passwords or payment card details.

Imports can use files you select from Files or a connected file provider, including iCloud Drive. Export creates a file on your device that you can save or share. A copy you send to another app or store outside RapidTradeView is controlled by you and that service. Account deletion does not remove those external copies.

Usage, identifiers and technical data

We record searches and product interactions, such as pages or screens opened, picks expanded, and portfolio actions, to understand use and improve the Service. Events can include the stock symbol, time, platform, a persistent browser or app identifier, and your account identifier when signed in. These are first-party analytics and are not limited to anonymous totals.

The iPhone app creates an identifier stored in secure storage; Android uses an available Android identifier or a generated app identifier. These identifiers also support usage limits and abuse prevention. They are not advertising identifiers. Secure storage on iOS can survive reinstalling the app. The website uses cookies, local storage and browser identifiers for sessions, preferences, usage limits and campaign attribution. Clearing website storage may sign you out or reset preferences.

Our servers and hosting providers process request information such as IP addresses, request paths, device or browser information, timestamps and errors for security and operation. We do not request access to your contacts, precise location, microphone or photo library for stock research.

Optional notifications

If you enable notifications, we store a push delivery token and device platform. A signed-in device can be associated with your account and portfolio alert preferences, including selected alert types, thresholds, muted symbols, quiet hours and time zone. We also store alert and delivery records. A time zone setting is not GPS location.

Expo routes mobile notifications through Apple Push Notification service (APNs) on iOS and Google’s delivery service on Android. Those services process delivery tokens and message contents. Portfolio alerts can disclose a stock you follow on your lock screen. You can change alerts in the app and notification permissions or previews in your device settings. A queued notification may still arrive after you disable alerts.

Service providers and public market information

Railway runs our API and background processing; Supabase provides database storage; Vercel hosts the website; Apple and Google provide sign-in; and Expo and device push providers deliver mobile notifications. Authorized operators and these providers process information as needed to operate, support and secure the Service. Support messages and any attachments you email are processed by our email provider.

We retrieve public market information from sources including Yahoo Finance, Finnhub, Google News, ApeWisdom, Stocktwits and public government disclosures. Market requests use symbols and public market inputs, rather than your account name or portfolio file. Company logos may load directly from Google’s favicon service, which receives your IP address and technical request information. Opening a news article, source or external link sends you to that provider, whose privacy policy applies.

Our Google Gemini flow generates explanations for public stock picks using the stock symbol, company name, date and public market signals, with Google Search grounding. We do not send personal portfolio records, uploaded files, account identifiers or contact information to Gemini for this feature.

Advertising

The native mobile app has no advertising or advertising tracking SDK. The website is separate: where Google AdSense is enabled, Google and its partners may use cookies and technical information to serve and measure ads, including personalization based on visits to this and other websites. You can manage Google ad personalization in Google Ads Settings and control cookies in your browser. We do not sell personal information or use mobile account and portfolio data for cross-app advertising.

Retention, deletion and security

Account and portfolio records are retained while your account is active. Usage and operational records are retained for product analysis, security and support; their retention is separate from the lifetime of a sign-in session. We restrict access and use encrypted connections, but no system is perfectly secure.

Use Delete account in the app or our delete account page. A deletion request revokes access and removes account data for identities you explicitly connected, including portfolios and associated notification devices. Apple authorization is also revoked for connected Apple identities. If processing or an external provider is temporarily unavailable, deletion can remain pending while it is retried; pending does not mean every copy has already been erased.

We retain limited deletion and security records, including account or provider identifiers, the account email where recorded, and a deletion timestamp, to prevent deleted data from being recreated and to resolve failed deletion work. These records are not retained portfolios. Provider backups and operational logs may persist under the provider’s retention schedule. We do not promise immediate erasure of backups or copies you exported. Contact us for the status of a pending request or help identifying data associated with an old sign-in method.

Your choices and rights

You can use guest research, decline notifications, disconnect sign-in through the provider, export your transactions, or request access, correction or deletion by emailing asafb2k@gmail.com. We may ask you to verify account ownership before disclosing or changing personal data. Disconnecting a provider by itself does not remove copies you exported or guarantee that a separate, unlinked account is deleted.

We process information to provide features you request, maintain security and improve the Service, and where required on the basis of your consent. Information may be processed in Israel and in countries where our providers operate. Depending on where you live, you may have rights to portability, restriction or objection, to withdraw consent, or to complain to your local data protection authority. Contact us to exercise a right or ask about international processing arrangements.

Children and changes

The Service is intended for adults and is not directed to children under 18. If you believe a child has provided personal information, contact us. We may update this policy as the Service changes; the date above identifies the latest revision.