Privacy Policy

Effective date: May 7, 2026 Last updated: May 7, 2026 Version: 1.0

NOTE: This document is a developer-prepared draft. Legal counsel review before launch is recommended.

🇹🇷 Türkçe versiyon: Türkçe

1. Service Owner

Savelion ("the App", "we", "our") is a portfolio tracking service offered through this application.

Contact: investingviewapp@gmail.com

2. Data We Collect

2.1 Account Information

Email address (when you register)
Display name (optional — you provide it)
Profile photo URL (if you sign in with Google)
Anonymous user ID (when you use the app without registering)
Whether your account is anonymous or registered

2.2 Investment Data

Data you provide while using the app — entirely entered by you:

Portfolio names and currencies
Position details (asset type, ticker, quantity, average entry price, opening date, optional notes and broker)
Transaction history (buy/sell trades, prices, dates)
Closed-trade realized P&L data
Preferences (display language, theme, display currency)
Onboarding answers (investment experience, asset class interests)

2.3 Automatically Collected Data

Anonymous usage stats (app launches, lifetime position count)
Crash reports and error logs (via Firebase Crashlytics — debugging only)
Device info (OS, app version)

We do NOT collect: location, contacts, photos (automatically from the gallery), microphone, health data, advertising identifiers (IDFA/AAID), browser history.

3. Device Permissions

3.1 Camera and Photo Library (AI Position Import)

The AI Import feature requests camera and photo library access in order to automatically read position details from screenshots you take from your broker apps. Access is requested only when you press "Pick from gallery" or "Take a photo"; no background scanning is performed.

The image you select or capture:

Is temporarily sent to the Anthropic Claude AI service over a secure HTTPS channel
The extracted position details (symbol, quantity, price) are pre-filled in the AddPosition form
The image itself is not stored on our servers; it is deleted after the analysis completes
Per Anthropic's usage policy, the image is also not retained by Anthropic for the purpose of training models

You can revoke the camera/photo library permission at any time from your device settings; the rest of the app continues to work without this feature.

4. Third-Party Services

We share data with the following providers:

Service	Provider	Purpose	Data shared
Auth + database	Google Firebase	Authentication, data storage	Account info, investment data
Cloud Functions	Google Firebase	Price fetch, snapshots, subscription webhook	User ID, portfolio ID
Subscription mgmt	RevenueCat	Pro subscription status	User ID, purchase receipt
Stock prices (US, EU, BIST)	Yahoo Finance (unofficial API)	Price data	Symbol only (no user ID)
Stock prices (US fallback)	Alpha Vantage	Price data	Symbol only
Crypto prices	CoinGecko	Price data	Symbol only
FX rates	Frankfurter (ECB)	Currency conversion	No user data shared
Crash reporting	Google Firebase Crashlytics	Error tracking	Anonymous device ID, crash stack trace

Yahoo Finance data is fetched via an unofficial API and may be delayed (up to 15-30 minutes). It must not be relied on for investment decisions — it is provided for informational purposes only.

5. Data Retention

Active users: Your data is retained as long as your account remains active.
Anonymous users: Anonymous accounts inactive for 30+ days with zero positions are automatically deleted (cleanupAnonUsersScheduled cron job).
Account deletion request: You can request full deletion via Settings → "Delete my account" in-app, or by emailing investingviewapp@gmail.com. Requests are processed within 30 days.
Backups: Firebase automatic backups are deleted after 30 days.

6. Your Rights (KVKK + GDPR)

If you reside in Turkey (KVKK) or the EU (GDPR), you have the following rights:

Access: Learn what data we hold about you
Rectification: Correct inaccurate information
Erasure: Request full deletion ("right to be forgotten")
Portability: Receive your data in a machine-readable format (CSV/JSON)
Objection: Object to specific processing activities

For requests: investingviewapp@gmail.com

7. Security Measures

All data transmission is encrypted via HTTPS/TLS
Passwords are never stored on our servers — Firebase Auth uses Google's bcrypt-based infrastructure
Firestore Security Rules ensure that only the account owner can read their own data
Webhook calls use secret-based authentication
Subscription status (isPro) can only be written by the server-side webhook; clients cannot manipulate it

8. Children's Privacy

The app is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If we discover that a child under 13 has provided data, we will delete the account and notify the parent.

9. International Data Transfer

Your data is stored on Google Firebase infrastructure in the European Union region (europe-west1). Backups may be stored encrypted on Google's global infrastructure. All transfers are subject to GDPR Standard Contractual Clauses.

10. Cookies and Tracking

We do not use cookies in the mobile app. We do not use advertising identifiers (IDFA/AAID). We are not integrated with any third-party advertising network.

11. Policy Changes

When this policy is updated, we will display a notice in the app and update the "Last updated" date. For material changes, we may also notify you via email.

12. Contact

For questions about this privacy policy:

Email: investingviewapp@gmail.com

This policy is in effect from May 7, 2026.