Privacy Policy
This Privacy Policy explains how CallistoVentures ("we", "us" or "our") collects, uses, shares and protects personal data when you use the Insider Stock Trader Android app, its alerts and related websites (together, the "Service"), and the choices and rights you have. We collect only what the Service needs, we do not sell personal data, and we do not show ads.
1. Data controller
CallistoVentures is the controller of the personal data described in this policy. For any privacy question or request, contact contact@callisto.ventures.
2. Personal data we collect
| Data | When | Purpose |
|---|---|---|
| Email address | Always (required for an account) | Create your account, sign you in, account emails |
| Name and profile picture URL | Only if you sign in with Google | Kept with your account by our authentication provider |
| Account ID | Always | A random identifier for your account; also links your subscription |
| Subscription and purchase history | When you subscribe | Provide paid access; received from Google Play via RevenueCat |
| Preferences and activity in the app | As you use the app | Your onboarding answers, watchlist, alert settings, quiet hours, digest time and alert history |
| Search queries | When you search | Tickers and company names are sent to our servers to answer the search; not saved to your account |
| Device and push identifiers | Always | An installation ID and a Firebase messaging token, so alerts reach your device |
| Crash logs and diagnostics | When the app crashes or misbehaves | Find and fix errors (Firebase Crashlytics) |
| Usage events and approximate location | Only if you allow analytics | Understand how the app is used; Firebase derives an approximate location (country or city) from your IP address |
Analytics only with your consent
When you first open the app, it asks whether you want to share usage statistics. Firebase Analytics collects nothing unless you choose Allow, and you can change your choice at any time in Settings → Share usage analytics. Choosing Not now does not limit the app in any way. Crash reports are sent regardless of this choice, because we need them to keep the Service working, and they are not linked to your account.
3. What we do not collect
We do not collect your precise (GPS) location, contacts, photos, files or messages. The app does not read or transmit the Android advertising ID, contains no advertising SDKs and shows no ads. We do not sell or rent personal data, and we do not use it for cross-app tracking or profiling for advertising.
4. Why we use your data and our legal bases
- To provide the Service: your account, sign-in, subscription, feed, searches, alerts and daily digest (performance of our contract with you).
- To keep the Service secure and working: crash reports, diagnostics and abuse prevention (our legitimate interests in a reliable and secure service).
- To improve the Service: usage analytics (your consent, which you can withdraw at any time).
- To communicate with you: sign-in codes, service notices and replies to your requests (contract and legitimate interests).
- To comply with the law: for example tax and accounting records (legal obligation).
5. Public SEC data
The Service displays information from public filings with the U.S. Securities and Exchange Commission, including the names of company insiders exactly as filed. These records are public; we obtain them from the SEC's EDGAR system, not from you, and display them for their public-information purpose.
6. Service providers
We share personal data only with service providers that process it on our behalf, under contracts that limit its use to providing their service:
- Supabase: database and authentication
- Railway: server hosting
- Google Firebase: push notifications, crash reports (Crashlytics) and, with consent, analytics
- RevenueCat: subscription management
- Google Play: distribution and billing
- Resend: delivery of sign-in code emails
We may also disclose data where required by law or to protect rights, safety and the integrity of the Service.
7. International transfers
Our providers may process data outside your country, including in the United States and the European Union. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
8. How long we keep data
- Account data: until you delete your account; then deleted immediately from our live systems and from encrypted backups within 30 days.
- Crash reports: up to 90 days (Firebase Crashlytics).
- Analytics data: up to 14 months, and only if you allowed analytics.
- Purchase records: as long as Google Play and applicable tax law require.
9. Security
All data is encrypted in transit (HTTPS/TLS). Access to our systems is restricted to authorised personnel and protected by authentication and access controls. Your watchlist, alerts and account data are protected so that only your own account can read them. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires it.
10. Your rights and choices
Depending on where you live, including under the EU and UK GDPR and Ukrainian data protection law, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data;
- delete your data (see Delete your account);
- receive your data in a portable format;
- object to or restrict certain processing;
- withdraw consent to analytics at any time in Settings;
- lodge a complaint with your data protection supervisory authority.
California residents also have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
To make a request, email contact@callisto.ventures from the email address of your account. We respond within 30 days.
11. Children
The Service is intended only for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date and notify you in the app before material changes take effect.
13. Contact
CallistoVentures · contact@callisto.ventures