StoxtoxStoxtox Privacy Policy
1. Who we are
Stoxtox LLC ("Stoxtox", "we") makes the Stoxtox app for iPhone, which shows your net worth and investments in one place. This policy explains what we collect, why, and the choices you have. It applies to the app and to stoxtox.com.
Stoxtox is read-only. It cannot move money, place trades or make changes at your bank or broker, and it does not give investment advice.
Effective date: 20 October 2026.
2. Information we collect
We collect only what the app needs to show you your own money.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Email address; your name if you share it through Sign in with Apple or Google | You, Apple or Google |
| Accounts you add by hand | Account name, country, currency, balance, balance history | You |
| Holdings | Ticker, number of shares, average cost, value | You, or your broker through Plaid |
| Connected accounts | Institution name, account name and type, last 4 digits, balances, holdings | Your broker through Plaid, with your permission |
| Watchlist | The stocks you follow | You |
| Technical data | Sign-in times, IP address, device and app version in server logs | Your device |
We do not collect your bank or broker password, full account or routing numbers, transactions, Social Security number, payment card details, precise location, or contacts. We do not use advertising or third-party analytics tools.
3. How we use it
Your information is used only to run Stoxtox for you.
Show your accounts, holdings, net worth and how they change over time.
Value your holdings at current market prices.
Keep your data in sync across your devices when you sign in.
Keep your account secure and prevent fraud and abuse.
Answer your questions and send important notices about your account.
Meet legal obligations.
We never sell your personal information, share it for advertising, or use your financial data to market other products to you.
4. Connecting accounts with Plaid
In the US, you can connect a brokerage or retirement account through Plaid Inc. Connecting is optional; you can always add accounts by hand instead.
You sign in to your broker on Plaid's own screen. Stoxtox never sees or stores your password.
Plaid sends us your account details, balances and holdings. It does not send us transactions.
Plaid gives our server a private key for your connection. That key stays on our server, is never sent to your phone, and is used only to refresh your own holdings.
Access is read-only. Neither Stoxtox nor Plaid can move money or place trades through this connection.
When you connect an account, you allow Stoxtox and Plaid to access and transfer this information from your broker on your behalf. Plaid handles your information under the Plaid End User Privacy Policy.
You can disconnect at any time in the app. That ends the connection at Plaid and deletes its accounts and key from Stoxtox.
5. Who we share it with
We share information only with the service providers that run Stoxtox, and only what each one needs.
| Provider | What they do | What they receive |
|---|---|---|
| Supabase (hosted on Amazon Web Services, US) | Database, sign-in, servers | Your account and portfolio data |
| Plaid | Brokerage connections | Your user ID and the connection you choose |
| Financial Modeling Prep | Stock prices, company data, logos | Ticker symbols your app asks about; no account details |
| Apple | App Store, Sign in with Apple | Sign-in details, if you use it |
| Sign in with Google | Sign-in details, if you use it |
We may also share information if the law requires it, to protect the rights and safety of our users or Stoxtox, or as part of a merger or sale of the business. In that last case this policy would continue to apply to your data.
6. How we protect and keep it
Your data is stored in the United States and encrypted both in transit and at rest.
Every connection uses HTTPS (TLS 1.2 or higher). Our database is encrypted at rest with AES-256.
Each person can reach only their own data; this is enforced by the database itself.
On your iPhone, data stays in the app's private storage, protected by iOS while your phone is locked. Signing out hides it, and other people who sign in on the same phone can't see it.
Plaid connection keys are held only by our server and never shown in the app.
We keep your data while your account is open. When you delete your account, we delete it from our servers right away. Copies in backups are removed within 90 days. Some records may be kept longer if the law requires it.
No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
7. Your choices and rights
You control your data, and most choices take one tap in the app.
| You want to | How |
|---|---|
| See or change your data | It's all in the app: edit or remove any account, holding or watchlist item |
| Stop a connection | Open the account and tap Disconnect |
| Delete everything | You → Delete account. This removes your data and connections from our servers |
| Get a copy of your data | Email us; we reply within 30 days |
| Use the app without an account | Skip sign-in; your data then stays only on your phone |
Depending on where you live, including California, you may have the right to know what we hold about you, correct it, delete it, get a copy, and opt out of its sale or sharing for advertising. We don't sell or share data for advertising, so there is nothing to opt out of. We will not treat you differently for using these rights. To make a request, email us from the address on your account so we can confirm it's you.
8. Children, changes and contact
Children. Stoxtox is meant for adults aged 18 and over. We don't knowingly collect information from children under 13. If you think a child has given us information, contact us and we will delete it.
Changes. If we change this policy, we will update the date above. For a significant change, we will tell you in the app or by email before it takes effect.
Contact. Stoxtox LLC, [email protected].