Privacy Policy

InvestAI — last updated: 5 September 2026

This policy explains what data InvestAI (“the app”, “we”) collects, why, how it is used, and what your rights are. InvestAI is a mobile decision-support app for trading (cryptocurrencies, stocks, forex, indices, commodities).

1. Data we collect

DataWhenWhy
Email addressAccount creation (email/password, Google or Apple)Identify your account and let you sign back in
Name (optional)If provided by Google/Apple at sign-inPersonalise your experience
PasswordEmail sign-upStored encrypted by Firebase Authentication — we never have access to it in plain text
Display preferences (language, light or dark theme, investment horizon, declared level, disclaimer accepted)App usageStored on your device only (AsyncStorage), never sent to our servers
Favourited assetsWhen you tap the star on an assetFind your favourites on all your devices and monitor those assets for your alerts. Stored on our servers (Cloud Firestore), tied to your account
Generated market alertsAutomatic daily analysis of your favouritesTell you about a notable move. They contain the asset name and the observed value, never personal data
Entitlements (purchase made, trial asset, AI usage counter)Purchase, free trial activation, AI synthesis generationKnow which features you are entitled to and apply quotas. Stored on our servers, tied to your account
Your device's notification token, platform and chosen languageWhen the app opens, if you accepted notificationsKnow where to deliver an alert and in which language to write it. The token identifies a device, never a person, and gives access to nothing else. Declining notifications prevents its collection ; alerts remain readable inside the app
Technical error reports (message, stack trace, app version, platform, language, screen involved)Only when an error occurs in the appFix failures. These reports describe a software defect, not you : they contain neither your email address nor the content of your screens, and are grouped by type of defect rather than by person

We collect no banking data : payments are handled entirely by Google Play or the App Store, which never pass us your payment method. We only receive an order identifier confirming that the purchase took place. The app is not connected to any brokerage account and executes no transaction : it displays public market information.

2. Third-party services used

These technical services help us run the app :

ServiceRoleData transmitted
Firebase Authentication (Google)Account and sign-in managementEmail, password (encrypted), Google/Apple sign-in identifier
Google Sign-In / Apple Sign-InSign in with a Google or Apple accountEmail and name associated with your Google/Apple account, depending on what you allow
Cloud Firestore (Google)Storage of your favourites, alerts and entitlementsThe data described in section 1, tied to your account identifier
Yahoo Finance, Frankfurter (ECB)Live prices (stocks, indices, commodities, currencies)Neither your email address, nor your account identifier, nor any account data is passed to them. As with any request over the Internet, these providers do however receive your IP address and the symbol of the asset whose price is requested : they can therefore infer which assets you look at. That is inherent to fetching a live price — no app can show a price without asking someone for it.

One exception : fundamental data (valuation, dividend, sector) is requested by our server, not by your device. For those, Yahoo receives our server's IP address
CoinGeckoCryptocurrency pricesYour device no longer contacts CoinGecko. These prices go through our server, which queries CoinGecko and caches the result for everyone. CoinGecko therefore receives our server's IP address, not yours, and can no longer infer which assets you look at
Economic news sources : Investing.com, CNBC, MarketWatch (Dow Jones), CoinDeskNews feeds shown in the News tab and summarised by the AINo data, not even your IP address. Our server reads these public feeds once for all users and keeps the result in cache ; your device never contacts them. These publishers therefore cannot know that you exist, nor what you read. The articles are the same for everyone : they are not chosen based on you
Financial Modeling PrepDisplay of official company logos in stock listsSame situation as the previous row, and nothing more : no account data, but your IP address and the symbol of the stock whose logo is requested. This provider actually receives less than the previous ones : it is only called for stocks
Anthropic (Claude)Writing the natural-language synthesis, only when you open the Synthesis tabThe name of the asset viewed, its price, the computed technical indicators and the chosen language. Neither your email address, nor your account identifier, nor any data identifying you is transmitted : Anthropic receives a market-analysis request, not a user profile
Google Play Billing / App StoreProcessing purchases and subscriptionsHandled entirely by these platforms under their own privacy policies. We receive neither your payment method nor your billing address — only the confirmation that a purchase is valid
Expo (push notification service)Delivering alerts to your device, only if you accepted themYour device token and the alert content — asset name and observed move. No email address or account identifier is transmitted. The service then relays the notification via Google (FCM) or Apple (APNs) depending on your device

We do not sell or share your data with third parties for advertising or commercial purposes. No advertising tracker is built into the app, and no data is used to track you across other apps or websites.

About analysis by artificial intelligence. The written synthesis is produced by Claude, a model from Anthropic. It is triggered only when you open an asset's Synthesis tab : no analysis is sent in the background. The data transmitted describes the asset and its market state, not you. Processing is governed by Anthropic's commercial terms, which provide that data sent through their API is not used to train their models.

3. Data retention

Your account data, favourites, alerts, device tokens and entitlements are kept for as long as your account exists. You can delete your account directly from the app (Settings → Delete my account) : deletion is immediate and erases all of this data. The full procedure, including by email if you no longer have access to the app, is described on the Delete your account page.

Preferences stored locally on your device (language, disclaimer accepted) are deleted automatically if you uninstall the app.

Technical error reports are kept for at most twelve months, then erased. They are not tied to any account.

One single exception to deletion : transaction records tied to a purchase are kept by Google Play or the App Store, which are required to do so by their accounting and tax obligations. These records are held by those platforms, not by us, and we cannot erase them.

4. Security

Communications between the app and our services use encrypted connections (HTTPS). Authentication and password storage are handled by Firebase Authentication (Google), which applies recognised security standards.

5. Your rights (GDPR)

If you live in the European Union (or an equivalent jurisdiction), you have the following rights :

To exercise these rights, contact us at marketinvestai@gmail.com. We reply within 30 days at most.

6. Minimum age

InvestAI is not intended for people under 18. The app's content concerns financial markets, access to which is restricted to adults in most jurisdictions.

7. Changes to this policy

This policy may be updated, in particular if new features are added to the app. The last-updated date at the top of this page reflects the version in force.

8. Publisher and data controller

The InvestAI app is published by :

Rayan Jibril ARIFA
Damac Hill 1, Carson Tower 1
United Arab Emirates
marketinvestai@gmail.com

Rayan Jibril ARIFA is the controller of the data described in this policy, within the meaning of the General Data Protection Regulation.

9. Contact

For any question about this privacy policy or your data, and to exercise the rights described in section 5 : marketinvestai@gmail.com