FolioFolk
Privacy Policy
Effective 7 September 2026
What we collect, why, and the controls you have.
What we collect
- Account: email address (or Apple / Google sign-in identity), username, display name, bio and avatar.
- Activity: posts, replies, likes, bookmarks, follows, watchlists, simulated orders and fills, portfolio snapshots.
- Subscriptions: Apple transaction identifiers and subscription status. We never see your payment details.
- Device and security: session records, device push tokens (only if you enable notifications), and request logs with a hashed IP address.
How we use it
To run the service: show feeds and profiles, execute simulated orders, compute track records and leaderboards, deliver notifications you opted into, grant subscription access, keep the community safe and meet legal obligations. We do not use advertising identifiers and do not track you across other apps or websites.
What is public
Your username, display name, bio, public posts, follower counts and, if your portfolio is public, your holdings' weights and performance figures. You can make your portfolio private and opt out of discovery in Settings › Privacy & Security.
Sharing
We share data only with processors that run the service (hosting, email delivery, market data, Apple for subscriptions) and when required by law. We do not sell personal data.
Your controls
- Edit your profile, privacy and notification preferences in the app.
- Export your data from Settings › Export My Data (one export per 24 hours).
- Delete your account from Settings › Delete Account. Sessions end immediately; data is removed after a 30-day grace period, except records we must keep for legal, security or audit reasons, which are isolated and then deleted.
Retention and security
Data is stored on servers in the EU/US region of our hosting provider, encrypted in transit and at rest. Secrets are kept outside the database. Access is limited and audited.
Children
FolioFolk is for adults 18 and over. We do not knowingly collect data from children.