Privacy Policy — Portfolio Tracker

Last Updated: May 6, 2026
App Name: Portfolio Tracker
Developer: Zaur Tskhvaradze
Contact: z.tskhvaradze@gmail.com

1. Overview

Portfolio Tracker is a personal investment portfolio management application available on Android. This policy explains what data the app collects, how it is used, and your rights as a user.

2. Data We Collect

2.1 Data You Enter (Stored Locally Only)

The following information is entered by you and stored exclusively on your device in the app's local storage (WebView localStorage). It is never transmitted to our servers:

Stock ticker symbols and company names
Share quantities and purchase prices (cost basis)
Investment notes and watchlist entries
Target prices and priority labels

2.2 Network Communication (If Live Prices Enabled)

When configured with live price fetching, the app makes HTTPS requests to a private Cloudflare Worker proxy, which then forwards requests to Finnhub on your behalf:

Layer	Data Sent	Recipient	Purpose
App → Proxy	Stock ticker symbol	Cloudflare Worker	Route request to Finnhub
Proxy → Finnhub	Stock ticker symbol	Finnhub.io	Fetch live price quotes
Finnhub → Proxy → App	Stock quote data	Your app	Display current price

Key Security Point: Your Finnhub API key never leaves Cloudflare — it's stored as an encrypted server secret. Your device never holds it.

The app does not collect or transmit: your name, email address, device advertising IDs, location data, portfolio data (quantities, prices, holdings) to any third party, or contact lists/camera/microphone access.

3. Finnhub API & Proxy Architecture

3.1 Security Model

Production Mode (Recommended): The app communicates through a Cloudflare Worker proxy, which securely forwards requests to Finnhub. The Finnhub API key is stored only on Cloudflare, not on your device, preventing key exposure in the Android APK.

Development Mode: For local testing only. Not recommended for public distribution.

3.2 Data Transmitted to Finnhub

When live prices are enabled, Finnhub receives:

Stock ticker symbol (e.g., "AAPL")
Your device's IP address (inherent to any HTTPS request)
Nothing else — no portfolio data, quantities, prices, or holdings

Finnhub's privacy policy: https://finnhub.io/privacy-policy

3.3 Disabling Live Prices

Live price fetching is completely optional. Without a configured API key or proxy URL, the app functions fully with manual price entry. No network requests are made to any third party.

4. Data Storage & Security

Portfolio data: Stored exclusively on your device in Android WebView's localStorage, not accessible to other apps.
API Key security: Finnhub API key (if configured) is stored only on Cloudflare as an encrypted secret. It never reaches your device or appears in the APK.
Backup: Backup is disabled (android:allowBackup="false") — app data is not included in ADB backup or Google Drive backup.
Network security: All communication uses HTTPS only. HTTP is blocked by the app's Network Security Configuration.
Server-side data: No portfolio data is stored on any server. The proxy only forwards requests; it does not log or retain your financial information.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We do not share your portfolio data with any third party, except as described in Section 3 (Finnhub ticker queries).

6. Data Retention & Deletion

Your data lives entirely on your device. To delete all app data:

Android: Settings → Apps → Portfolio Tracker → Storage → Clear Data.
Uninstall: Removes all locally stored data.

7. Children's Privacy

This app is not directed to children under the age of 13 and does not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by updating the "Last Updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

Zaur Tskhvaradze
Email: z.tskhvaradze@gmail.com