Privacy Policy

Last updated: June 14, 2026

This Privacy Policy describes how MindStock ("we", "us") handles information when you use the MindStock mobile app and this website (together, the "Service"). By using the Service you agree to this policy.

Information we collect

• Account information: when you sign in (Google, Apple, or email), we receive your email address and a unique account identifier to create and secure your account.
• Your content: the portfolios, holdings, watchlists, transactions and AI chat messages you create in the app, so we can sync and display them.
• Subscription status: whether you have an active MindStock Pro subscription, verified through Apple or Google. We do not receive or store your card details.
• Technical data: basic logs and diagnostics needed to operate the Service.

How we use it

• To provide portfolio tracking, watchlists and AI features.
• To authenticate you and keep your data in sync across devices and platforms.
• To process and verify subscriptions and entitlements.
• To maintain, secure and improve the Service.

Third-party services

We use the following providers, who process data only to deliver the Service:

• Firebase Authentication (Google) — sign-in and account identity.
• AI providers — Google (Gemini), OpenAI (ChatGPT) and xAI (Grok). When you run an AI tool, the relevant prompt (which may include the stocks or text you choose) is sent to the selected provider to generate a response. Do not enter sensitive personal information into AI prompts.
• Market data providers — public financial data sources used to show prices, charts and news.
• Apple App Store / Google Play — subscription billing and receipt verification.

Data sharing

We do not sell your personal information. We share data only with the processors listed above as needed to run the Service, or when required by law.

Data retention & deletion

We keep your account data while your account is active. You can delete your account at any time from Profile → Delete account in the app, or by emailing us. Deletion permanently removes your account, portfolios and associated data.

Security

Requests are served over HTTPS and access to your data requires authentication. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Children

The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected here with a new "Last updated" date.

Contact

Questions about this policy: zazamediaapps@gmail.com.