Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how Signalyst ("Signalyst", "we", "us") collects, uses, and protects your information when you use the Signalyst mobile application (the "App") and related services. By using the App you agree to this Policy.

1. Information we collect

• Account information — your email address, an optional display name, and a securely hashed password. If you sign in with Google, we receive your email address, name, and Google account identifier via Google/Firebase Authentication.
• Subscription information — when you start a trial or subscribe, Google Play Billing provides us a purchase token, product identifier, and subscription status. We do not receive or store your card or payment details; all payments are processed by Google Play.
• Content you create — your watchlist, portfolio holdings and transactions you enter, the markets/exchanges you follow, and your notification preferences.
• Device & notification data — a push-notification (FCM) token so we can send you alerts, and your approximate country/region (derived from your IP address) to show relevant markets.
• Optional integrations — if you connect Telegram, we store your Telegram chat identifier so we can deliver alerts there.
• Technical logs — IP address and basic request logs, used for security, rate-limiting, and abuse prevention.

2. How we use your information

• To create and secure your account and keep you signed in.
• To provide the App's features — signals, watchlist, portfolio tracking, your daily briefing, news, and alerts.
• To process and verify your subscription and free trial through Google Play.
• To send transactional emails (e.g. email verification, password reset) and, if enabled, push/Telegram alerts.
• To maintain security, prevent fraud and abuse, and comply with legal obligations.

3. How we share information

We do not sell your personal information. We share data only with service providers that help us operate the App:

• Google — Play Billing (subscriptions), Firebase Authentication (Google Sign-In), and Firebase Cloud Messaging (push notifications).
• Hosting & infrastructure — our backend runs on DigitalOcean and is served through Cloudflare.
• Market-data providers — we retrieve market data from third-party data providers; this does not involve sharing your personal information.

We may also disclose information if required by law or to protect our rights and users.

4. Data retention

We keep your account data for as long as your account is active. When you delete your account, we delete your personal data as described below, except where we must retain limited records to meet legal, tax, or fraud-prevention obligations.

5. Your rights & deleting your data

You can access and update your information in the App. You can delete your account and associated personal data at any time from Settings → Delete account, or by following the instructions on our Data Deletion page. Deleting your account does not automatically cancel a Google Play subscription — manage that in Google Play.

6. Security

We protect data in transit with HTTPS/TLS, store passwords only as salted hashes, and restrict access to production systems. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Children

Signalyst is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from children.

8. International users

Your information may be processed on servers located outside your country. By using the App you consent to this transfer and processing.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, an in-app notice.

10. Contact

Questions about this Policy or your data? Email us at admin@appgeek.co.