Privacy Policy

This policy explains what personal data IS.hb collects, why, and what rights you have under the GDPR.

1. Who is responsible

The controller of your data is IS.hb, operated from Portugal. Contact: diogopparaiba@gmail.com.

2. What data we collect

• Account data: your email address, name and profile picture if you sign in with Google, and your account ID.
• Your lists and settings: the assets you follow or hold, notification choices, display preferences (for example dark mode).
• Usage and trial data: time used during the free trial, and counters such as the number of reports you generate.
• Payment data: handled by Stripe. We receive your subscription status, not your card number.
• Connected accounts (optional): if you connect Trading 212, Coinbase or Alpaca we store the access keys you provide, only to show your holdings and run the features you choose.
• Technical data: basic logs (such as IP address and browser type) created by our hosting and security services.

3. Why we use it, and on what legal basis

• To create your account and provide the service: performance of a contract.
• To process payments and keep subscription records: contract and legal obligations (accounting and tax).
• To send the daily email alerts you switch on: your consent, which you can withdraw at any time in Settings.
• To keep the service secure and prevent abuse (for example resetting the free trial): our legitimate interest.

4. Who we share it with

We do not sell your data. We use service providers who process data on our behalf, including: Google (Firebase for sign-in, database, hosting and email delivery), Stripe (payments), and, for the reports feature, an AI provider that receives only public company and market information, not your personal data. Where data is transferred outside the EU/EEA, this is done under safeguards such as the EU Standard Contractual Clauses.

5. How long we keep it

We keep your account data while your account exists. If you ask us to delete your account we delete or anonymise your data, except what we must keep by law (for example payment records, normally for several years). Some technical data is deleted automatically after a short period.

6. Your rights

You have the right to access, correct, delete, restrict or object to the use of your data, to receive it in a portable format, and to withdraw consent at any time. To use these rights write to diogopparaiba@gmail.com. You may also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt).

7. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls. No system is completely secure.

8. Children

IS.hb is not meant for people under 18 and we do not knowingly collect their data.

9. Cookies

See our Cookie notice.

10. Changes

We may update this policy and will show the date of the latest version at the top. For important changes we will tell you in the app or by email.