Privacy Policy

You can use every core feature signed out. In that mode your watchlists, verdict history and alert records are kept only in your browser's local storage on that device. We cannot see them, and clearing your browser data or switching device removes them.

Signing in is optional. Accounts are handled by our backend authentication service (Supabase, provided through Lovable Cloud). If you sign in with email and password we store your email address and a securely hashed password. If you sign in with Google, we receive your email address and basic profile identifiers from Google — never your Google password.

A session token is stored in your browser so you stay signed in. Signing out removes it.

Stock Signals writes the following to your browser's local storage:

• your UK and US watchlist tickers;
• the last known buy/hold/sell verdict per ticker, used to detect changes;
• your alert history and read state;
• your authentication session token, when signed in.

These are functional, not advertising, storage items. You can clear them at any time through your browser settings.

When you are signed in, your watchlists and alert history are also saved to your account row in our hosted database so they follow you across devices. On first sign-in you are asked how to reconcile a device list with an account list (keep both, keep the device list, or keep the account list).

Access is restricted at the database level so that a signed-in user can read and write only their own rows. Deleting your account deletes the watchlists and alert history linked to it.

We do not use advertising cookies, third-party ad networks, cross-site trackers or behavioural profiling, and we do not sell or share your data with advertisers. Our hosting and backend providers keep standard technical logs (such as IP address, timestamp and request path) for security, abuse prevention and debugging, retained for a limited period.

• Market data provider. When you view a stock, our server requests that symbol's price history. The request comes from our server and contains the ticker, not your identity.
• AI provider. To write the plain-English signal explanation, we send only the ticker, company name and the indicator numbers already on your screen. No account details are included.
• Backend and hosting providers. They process account, watchlist and alert data on our behalf under their own security terms.
• Google. Only if you choose Google sign-in.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to your data protection regulator. You can delete watchlists and alerts in-app at any time, and clear device storage from your browser. For account deletion or a data request, contact the app owner through the contact details published with the app.

The app is not intended for under-18s and we do not knowingly collect their data.

If this policy changes materially we will update the date above and, where appropriate, notify you in the app.