Privacy Policy

What we collect, where it lives, and the things we promise never to do with it.

Last updated June 14, 2026

What we collect

Only what the app needs to work. Specifically:

Account
Your email address and an encrypted password, used to sign you in and secure your account.
Portfolio
The holdings you add: product, quantity, the cost and any market price you enter, acquisition date, and currency. You enter it, you own it, and you can change or remove it anytime.
Watchlist & alerts
Products you're tracking, plus your per-product alert preferences (tier, strength, recommendation).
Preferences & app state
Your strategy mode, market view, display currency, onboarding progress, and which cards or notifications you've dismissed. This is what lets the app pick up where you left off.

We don't collect payment card details (any billing is handled by a payment processor, not stored by us), and we don't ask for anything we don't need.

How it's stored

Your data lives in a managed Supabase (PostgreSQL) database. Access is protected by row-level security: each user can only read and write their own rows. Your holdings and watchlist are never visible to anyone else. Supabase Auth handles sign-in, and traffic is encrypted in transit.

Who else touches your data

We keep the list of third parties short and functional:

  • Supabase hosts the database and handles authentication.
  • Market price & FX providers. We fetch live product prices and exchange rates from third-party sources. All we send them is a product identifier and a currency code. Never your email, never your holdings, nothing that identifies you.

What we never do

We do not sell, rent, or trade your personal data. Not to advertisers, not to data brokers, not to anyone. We don't use it to build advertising profiles either. The only reason we hold your data is to run VaultLogic for you.

Cookies & local storage

We use a small number of cookies strictly to keep you signed in. That is your Supabase authentication session, nothing more. There are no advertising or third-party tracking cookies.

We also store some preferences and dismissed-card state in your browser's local storage so the app works smoothly and remembers your choices. For signed-in users that state also syncs to your account so it follows you across devices. You can clear it anytime from your browser.

Your control

You can view, edit, or delete your holdings and watchlist at any time inside the app. If you'd like to delete your account and the data attached to it, contact us and we'll take care of it.

Contact

Questions about your privacy or a data request? Email thevaultlogic@gmail.com.