NP

Privacy Policy

Effective 9 July 2026

This page explains, in plain English, what data Portfolio collects, why, and who it goes to. We aim to describe what the app actually does — not a generic template.

Who we are (data controller)

The data controller for this app is [COMPANY_NAME_AND_CONTACT]. For any privacy request, email that address.

What we collect

  • Account details — the email address and username you sign up with, plus an optional display name and avatar you choose.
  • Brokerage data you connect — if you link a Trading 212 API key, we pull your holdings, transactions, dividends, and account value from Trading 212 into your account.
  • Data you upload — CSV transaction history you import.
  • Derived data — daily portfolio snapshots, computed analytics, watchlists, price alerts, notification preferences, and insights we generate from your holdings and trades.
  • Basic technical data — standard server logs and authentication metadata needed to run and secure the service.

Why we use it (purposes and lawful basis)

We use your data to provide the service you signed up for — portfolio analysis, alerts, and research tools. Under UK GDPR our lawful basis is performance of a contract with you.

Third parties your data touches

We only share what's needed to run the app. The processors below receive data on our behalf:

  • Supabase — database, authentication, and hosting for your account and portfolio data.
  • Trading 212 — brokerage connection; your saved API credentials call the Trading 212 API to fetch your holdings, orders, and dividends.
  • Financial Modeling Prep (FMP) — market data provider. We send tickers you hold or watch to fetch quotes, fundamentals, and news.
  • Quiver Quantitative — congressional trading data. We request filings for tickers relevant to your portfolio.
  • Anthropic — the AI model that generates written analysis. Your portfolio and trade data is sent to Anthropic so the model can describe it back to you. It is not used to train models.
  • Logo.dev — company logos rendered next to tickers.

Some of these processors are based outside the UK/EU (primarily the US). Standard safeguards for international transfers apply.

How long we keep it

We keep your data while your account is active. When you delete your account (see below), your account, profile, holdings, transactions, snapshots, notifications, insights, watchlist, price alerts, and imported history are deleted, and your stored brokerage API credentials are removed.

Your rights under UK GDPR

  • Access a copy of your data.
  • Correct anything that's wrong.
  • Delete your account and data — self-serve from Settings.
  • Portability — Settings includes an "Export my analysis" feature that produces a text/JSON export of your portfolio data.
  • Complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this page

We'll update this page as the product evolves. The effective date at the top reflects the last revision.

Contact

Privacy questions or requests: email [COMPANY_NAME_AND_CONTACT].