Our commitment: We collect only the data necessary to provide you with a great investment tracking experience. We do not sell your data. We do not serve ads. Your financial information stays private.
Information We Collect
When you use Briefcase, we collect the following information:
| Data Type | Purpose | Storage |
|---|---|---|
| Email Address | Account creation, login, password recovery | Our servers |
| Password | Account security | Encrypted (bcrypt hashed) |
| Name (optional) | Personalization | Our servers |
| Apple ID | Sign in with Apple authentication | Our servers |
| Portfolio Holdings | Core app functionality - tracking your investments | Our servers |
| App Preferences | Theme, currency, notifications | Your device only |
Third-Party Services
We use the following third-party services to provide app functionality:
- CoinGecko - Cryptocurrency price data. We send asset symbols only, not your personal data.
- Finnhub - Stock and ETF price data. We send asset symbols only, not your personal data.
- Google Gemini AI - Powers AI insights and chat features. When you use AI features, your portfolio holdings (asset names, quantities, values) are sent to Google's Gemini API for analysis. Google's privacy policy applies to this data.
- Resend - Email delivery for account verification. Your email address is shared for this purpose only.
What We Do NOT Collect
- We do not collect your location data
- We do not collect device identifiers for advertising
- We do not track your behavior across other apps or websites
- We do not use analytics or tracking SDKs
- We do not sell or share your data with advertisers
Data Security
We take reasonable measures to protect your data:
- Passwords are hashed using bcrypt (never stored in plain text)
- All data transmission uses HTTPS encryption
- Database access is restricted and secured
- Session tokens expire automatically
Data Retention
Your account data and portfolio information are retained as long as you maintain an active account. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your portfolio data
To exercise these rights, contact us at the email below.
Children's Privacy
Briefcase is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Questions?
If you have any questions about this privacy policy or our data practices, please contact us: