Signal is local-first. Your financial data stays on your device unless you explicitly enable cloud sync.
Our Privacy Philosophy
We built Signal with privacy as a core principle, not an afterthought. We don't sell your data, we don't show ads, and we don't share your information with third parties for marketing purposes.
Data We Collect
Local Data (stays on your device):
Investment holdings and transaction history
Portfolio settings and preferences
Reminders and notes you create
Historical portfolio snapshots
If You Enable Cloud Sync (Signal+ feature):
Your portfolio data is encrypted and stored in our secure Supabase database
Email address for account authentication
Sync metadata (last sync timestamp)
Anonymous Analytics (optional):
App usage patterns (which screens are visited, which features are used)
Crash reports to help us fix bugs
Device type and OS version for compatibility
We never include your financial data, holdings, or portfolio values in analytics.
How We Use Your Data
Data Type
Purpose
Portfolio data
To provide portfolio tracking and analysis features
Email address
Account authentication and password recovery
Analytics
To improve app performance and fix issues
Crash reports
To identify and fix bugs
Data Sharing
We do not sell, rent, or share your personal or financial data with third parties for marketing purposes. Period.
We may share anonymized, aggregated data (e.g., "X% of users track ETFs") for product improvement purposes only.
Third-Party Services
Signal uses the following services to provide functionality:
Supabase — Secure authentication and cloud sync (if enabled)
RevenueCat — Subscription management and billing
Finnhub / Yahoo Finance — Real-time market data (no personal data shared)
CoinGecko — Cryptocurrency prices (no personal data shared)
Anthropic — SignalAI analysis (portfolio context shared only when you ask a question)
Each service has its own privacy policy. We've selected partners with strong privacy practices.
Data Retention
Local data: Stored on your device until you delete it or uninstall the app
Cloud data: Retained while your account is active. Deleted within 30 days of account deletion request
Analytics: Retained for up to 12 months in anonymized form
Your Rights
You have the right to:
Access — Export all your data at any time (Settings → Export Data)
Delete — Delete your account and all associated cloud data
Portability — Export to CSV or JSON format
Opt-out — Disable analytics in app settings
Local-only — Use Signal without cloud sync to keep all data on-device
Security
We implement industry-standard security measures:
All data transmitted over HTTPS/TLS encryption
Cloud data encrypted at rest
Row-level security ensuring users can only access their own data
Regular security audits of our infrastructure
Children's Privacy
Signal is not intended for users under 18 years of age. We do not knowingly collect data from children.
Changes to This Policy
We may update this privacy policy from time to time. We'll notify you of significant changes through the app or via email if you have cloud sync enabled.