Holdwise Privacy Policy

Holdwise is designed so your portfolio stays yours. Your positions and accounts live on your device, not on a server we run. This policy explains, plainly, what Holdwise does and does not collect.

Short version

• We do not run analytics. We have no idea how you use the app.
• The iPhone app has no user accounts. The Android app has an optional Google sign-in used only for cloud sync, described in the Android version section below.
• Your positions, account types, share counts, and dividend history are stored on your device. We never see your holdings.
• Optional iCloud sync moves your data into your own private iCloud database that only you can read. It never passes through our servers, because we do not run any.
• To auto-fill dividend data, Holdwise sends only the ticker symbol you ask about to Tiingo, using a free Tiingo key you provide. No personal data and no holdings totals are included.
• We never sell or share your data. We do not have it to sell.

What Holdwise does not collect

• We do not collect your name, email, phone number, or contacts.
• We do not collect your positions, account balances, or dividend records.
• We do not use third-party analytics, advertising SDKs, or trackers.
• We do not have access to read your iCloud data.

Where your data lives

Everything you add to Holdwise, including your positions, the account they sit in (taxable, Roth, Traditional IRA, 401(k), or HSA), share counts, and dividend history, is stored locally on your iPhone by default. Deleting Holdwise from your device removes the local data.

Optional iCloud sync

If you turn on iCloud sync in Settings, Holdwise stores your data in your own private iCloud database (CloudKit private database) so it can sync between your devices. This container is tied to your Apple ID and is governed by Apple's privacy terms. We cannot read it, and your data never passes through any server we operate, because we do not run any. You can turn sync off at any time.

Dividend data (Tiingo)

To auto-fill the annual dividend per share and read real ex-dividend dates for your trailing income, Holdwise queries Tiingo's free dividend feed at tiingo.com. You add your own free Tiingo API key, which is stored only in the iOS Keychain on your device; we never see it. Only the ticker symbol you are looking up is sent to Tiingo. No personal data, no share counts, no holdings totals, and no identifiers about you are included in the request. If you prefer not to use Tiingo, you can enter dividend figures manually and skip auto lookup entirely.

CSV import

When you import a positions CSV exported from a broker such as Fidelity, Schwab, or Vanguard, Holdwise reads the symbol and share count for each holding directly on your device. The file is parsed on your phone. Nothing from the file is uploaded to us or to any third party.

Subscriptions

Holdwise Pro is an auto-renewable subscription billed through Apple's App Store. Apple handles the payment; we never see your card or Apple ID. Apple gives us a transaction receipt that we use only to verify your subscription is active. Subscription status is stored on your device. You can manage or cancel anytime in your Apple Account settings.

Diagnostic information

If you opt in via iOS Settings, Privacy & Security, Analytics & Improvements, Apple may send us anonymized crash reports and performance metrics. These reports do not contain your portfolio data or identifiers we can link back to you. You can disable this at any time in iOS Settings.

Android version

The sections above describe the iPhone app. The Android app works the same way by default: everything you enter is stored locally on your phone, there is no analytics SDK, no ads, and no tracking. The differences are listed here.

Optional cloud sync (Firebase)

On Android you can sign in with your Google account (through Firebase Authentication) to keep your data in sync across devices. Sync is off until you sign in. When you are signed in, the portfolio data you enter, meaning your accounts, holdings, transactions, dividend history, net-worth snapshots, watchlist, goals, and bills, is mirrored to Cloud Firestore under your own user id. The security rules allow only you, signed in as that user, to read or write that space, and the data is encrypted in transit. Holdwise runs no servers of its own; Firestore is operated by Google and governed by Google's privacy terms. You can pause syncing at any time with the Sync switch in Settings, and your local data keeps working while it is off.

What is collected when you sign in

When you sign in with Google, Holdwise receives your Google account's email address and a user id. They are used only to identify your private data space in Firestore. We do not use them for marketing, we do not add you to any list, and we do not share them with anyone. If you never sign in, Holdwise collects nothing about you at all.

Delete your account and data

You can remove everything yourself, without contacting us:

• Cloud data: open Settings, Cloud Sync, and tap "Delete cloud data". This removes everything stored for your user id in Firestore. Tapping "Sign out" stops syncing and disconnects your Google account from the app.
• Local data: clear the app's data in Android Settings, or uninstall Holdwise. Both remove the local database from your phone.

If you would rather we handle it, email jcmappstudio@gmail.com from the Google account you signed in with and ask for your account and cloud data to be deleted. We will confirm when it is done. Because the email address and user id are the only account data we hold, deleting your cloud data removes everything.

Tiingo key on Android

Your Tiingo API key is stored in Android's encrypted preferences, protected by the Android Keystore on your device. It is sent only to api.tiingo.com when you look up a ticker, and never to us.

Subscriptions on Android

Holdwise Pro on Android is billed through Google Play Billing. Google handles the payment; Holdwise never sees your card or payment details. You can manage or cancel the subscription in the Google Play app.

Notifications

Reminders in the Android app are local notifications scheduled on your device. They are not sent through a push service and no notification content leaves your phone.

Children

Holdwise is a general investing and productivity tool and is not directed to children under 13. We do not knowingly collect any information from children.

Your rights

Because Holdwise stores your data on your device and we hold no account data, there is nothing for us to access, correct, or delete on our servers. To remove your data, delete the items in the app or remove the app from your device. To manage data stored in your private iCloud database, use your Apple account tools at privacy.apple.com.

If you are a California resident (CCPA / CPRA), a resident of the EU/UK (GDPR), or covered by a similar law, the same applies: we have no personal data of yours to provide or delete because we do not collect it. You may still contact us with any questions.

Data security

Because Holdwise data lives on your device, security depends primarily on Apple's platform protections, your device passcode, Face ID or Touch ID, and your iCloud account security. Your Tiingo key is held in the iOS Keychain. We recommend you enable two-factor authentication on your Apple ID and use a strong device passcode.

A note on investing

Holdwise is a tracking and modeling tool. Its projections are estimates based on the assumptions you enter and do not constitute financial, tax, or investment advice. Dividend data may be delayed or incomplete. Always verify with your broker before making decisions.

Contact

Questions or requests: contact@jcmobileappstudio.com

Changes

If this policy ever changes, we will update the "Last updated" line above and post a new version at this URL.