Holdwise Privacy Policy

Holdwise is designed so your portfolio stays yours. This policy explains, plainly, what Holdwise does with your data, what reaches us, and what reaches anyone else.

Who we are

JC Mobile App Studio LLC, a one-person studio based in Pennsylvania, USA, makes Holdwise and is responsible for how it handles your data. "We" and "us" in this policy mean JC Mobile App Studio LLC. You can reach us at contact@jcmobileappstudio.com.

Short version

• No analytics, no ads, no tracking. We have no idea how you use the app.
• The iPhone app has no user accounts. The Android app has an optional Google sign-in used only for cloud sync, described in the Android version section below.
• Your accounts, positions, share counts, transactions, and dividend history are stored on your device.
• On iPhone, iCloud sync is on by default when you are signed in to iCloud. It keeps a copy in your own private iCloud database, which we cannot read. You can turn it off.
• On Android, if you sign in with Google, your portfolio data syncs to a Firebase database that we operate, walled off so only your account can read or write it.
• If you add your own free Tiingo API key, Holdwise sends ticker symbols (and currency codes for multi-currency) to Tiingo to fetch prices and dividends. Share counts, cost basis, and account details are never sent.
• We never sell your data or use it for advertising.

What reaches us, and what reaches third parties

Data that reaches systems we operate:

• Holdwise Firebase project (Android only, only if you sign in). Your Google account email and user ID (Firebase Authentication) and your synced portfolio data (Cloud Firestore). Google runs the infrastructure for us. Details in the Android section.
• Crash reports (iPhone), only if you opt in to share analytics with app developers in iOS Settings. Apple passes us anonymized crash and performance reports that do not include your portfolio.

The iPhone app sends nothing else to us. There is no Holdwise server that holds your iPhone data.

Data handled by third parties under their own policies:

• Tiingo, the market data provider, if you add a key. tiingo.com/about/privacy
• Apple (iPhone): iCloud sync through CloudKit, App Store purchases. apple.com/legal/privacy
• Google (Android): Google sign-in, Firebase (as the provider running our project), Google Play purchases, Android backup, and ML Kit text recognition. policies.google.com/privacy and firebase.google.com/support/privacy

Where your data lives

Everything you add to Holdwise, including your accounts (taxable, Roth, Traditional IRA, 401(k), HSA, and others), positions, share counts, cost basis, transactions, dividend history, net-worth snapshots, watchlist, income goals, covered bills, and settings such as birth year for RMD estimates, is stored locally on your device. Deleting Holdwise removes the local data.

iCloud sync (iPhone)

When you are signed in to iCloud, Holdwise syncs your data through your own private iCloud database (CloudKit private database) so it can appear on your other Apple devices. This is on by default. It is tied to your Apple Account and governed by Apple's privacy terms. We cannot read it, and it does not pass through any server we operate. You can turn sync off in Settings, Backup & Restore; the change takes effect the next time the app starts.

Market data (Tiingo)

Holdwise can fetch dividends, prices, benchmark returns, backtests, and currency rates from Tiingo (api.tiingo.com). This needs a free Tiingo API key that you create and paste in. The key is stored only on your device (the iOS Keychain on iPhone, encrypted storage backed by the Android Keystore on Android) and sent only to Tiingo.

What Tiingo receives:

• The ticker symbols you look up or refresh. "Refresh all" sends the ticker of every holding, one at a time. Benchmarks and backtests send the benchmark tickers you compare against.
• Date ranges for the history being fetched, and currency codes if you use another display currency.
• Your API key, which is linked to your Tiingo account, plus your IP address as with any web request. That means Tiingo could see which tickers your key looks up.

Share counts, cost basis, account types, balances, and income totals are never sent. If you prefer not to use Tiingo, leave the key blank and enter figures by hand.

Imports, exports, and on-device features

• CSV and screenshot import. A broker CSV or a screenshot you pick is read on your device (Apple's Vision text recognition on iPhone, ML Kit's on-device text recognition on Android). The file or image is not uploaded.
• Backup files and exports. Backup, PDF, CSV, tax pack, and calendar exports are files created on your device. They go wherever you choose to save or share them.
• Insights (iPhone). Holdwise Intelligence uses Apple's on-device FoundationModels model. Your portfolio is processed on your iPhone.
• Spotlight, widgets, and the Live Activity (iPhone). Holdings are added to on-device Spotlight search by name and ticker only, never amounts. Widgets and the pay-day Live Activity read a summary stored on your device.
• App Lock. Face ID, Touch ID, or Android biometrics are handled by the system. Holdwise never sees your biometric data.
• Notifications. Pay-day alerts and ex-dividend reminders are scheduled on your device, not sent through us.

Subscriptions

Holdwise Pro is an auto-renewable subscription billed through Apple's App Store on iPhone and Google Play on Android. Apple or Google handles the payment; we never see your card or account details. The app checks your subscription status with Apple or Google and stores it on your device. You can manage or cancel in your Apple Account settings or the Google Play app.

Android version

The Android app works the same way by default: everything you enter is stored locally on your phone, with no analytics, no ads, and no tracking. The differences are listed here.

Optional cloud sync (Firebase)

You can sign in with your Google account (through Firebase Authentication) to sync across devices. Nothing syncs until you sign in; signing in turns sync on. While signed in, your accounts, positions, transactions, dividend events and payments, net-worth snapshots, watchlist, income goals, and covered bills are mirrored to Cloud Firestore under your user ID, in a Firebase project that we operate on Google's infrastructure. Security rules allow only you, signed in as that user, to read or write that space, and data is encrypted in transit. As the project operator we could technically access it, but we do not look at it and do not use it for anything except syncing. You can pause sync with the Sync switch in Settings.

What is collected when you sign in

Firebase Authentication stores your Google account email address and a user ID. They are used only to identify your private data space. We do not use them for marketing, add you to any list, or share them. If you never sign in, nothing about you reaches us.

Android backup

Holdwise allows Android's built-in backup. If backup is turned on for your phone, Android may copy the app's local database and settings to your Google account backup and restore them on a new phone. This is handled by Google, and we cannot read it. You can turn backup off in your phone's settings.

Delete your account and data

• Cloud data: open Settings, Cloud Sync, and tap "Delete cloud data". This removes everything stored for your user ID in Firestore and pauses sync. "Sign out" stops syncing and disconnects your Google account from the app.
• Sign-in record: deleting cloud data does not remove your email and user ID from Firebase Authentication. To have that removed, email contact@jcmobileappstudio.com from the Google account you signed in with, and we will delete it and confirm.
• Local data: clear the app's data in Android Settings, or uninstall Holdwise.

Data retention

• On-device data: until you delete it or uninstall the app.
• iCloud and Android backup copies: until you delete them through Apple or Google.
• Firestore sync data (Android): until you tap "Delete cloud data" or ask us to delete it.
• Firebase sign-in record (Android): until you ask us to delete it.
• Tiingo requests: handled by Tiingo under its own policy. We never receive them.

Sale, sharing, and targeted advertising

We do not sell personal data. We do not share it for targeted advertising. Holdwise has no ads and no advertising or analytics SDKs, and does not use your advertising ID.

Your privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Indiana, Kentucky, Rhode Island and other US states, or the EU/UK), you may have the right to access, correct, delete, or get a copy of personal data, and to opt out of targeted advertising, sale, or profiling. Many of these laws may not apply to a studio our size, but we honor these requests from everyone.

To make a request, email contact@jcmobileappstudio.com. We respond within 45 days, and we won't treat you differently for asking. If we decline your request, you can appeal by replying to our answer with "Appeal", and we'll respond within 45 days (60 days at most, as some laws allow). If your appeal is denied, you may contact your state attorney general. Data in your own iCloud is managed through Apple at privacy.apple.com.

Children

Holdwise is not directed to children under 13. We don't knowingly collect personal information from children. If you believe a child has signed in to Holdwise on Android, contact us and we will delete the related data.

International users

Data that reaches us (Android sync and sign-in data in Firebase, and opt-in iPhone crash reports) is processed in the United States.

Security

Network requests use encrypted connections (HTTPS). Firestore access is limited by security rules to your own signed-in account. Your Tiingo key is kept in the iOS Keychain or Keystore-backed encrypted storage on Android. Data on your device is protected by your phone's passcode and, if you turn it on, Holdwise App Lock. We recommend a strong passcode and two-factor authentication on your Apple or Google account.

A note on investing

Holdwise is a tracking and modeling tool. Its projections are estimates based on the assumptions you enter and do not constitute financial, tax, or investment advice. Dividend data may be delayed or incomplete. Always verify with your broker before making decisions.

Changes

If this policy changes, we will update the "Last updated" line above and post the new version at this URL. Material changes will also be noted in the app's release notes.

Contact

Questions or requests: contact@jcmobileappstudio.com