Privacy Policy
Last updated: 2026-10-15
This Privacy Policy explains what information Signal Deck collects when you use our mobile app or website (together, the "Service"), why we collect it, and the choices you have. It should be read alongside our Terms of Service and Disclaimer.
1. Information you provide directly
| What | Why |
|---|---|
| Email address and password (stored as a salted hash, never in plain text) | Create and secure your account |
| Google or Apple sign-in identifier, or a passkey's public key | Sign in without a password, if you choose that instead |
| Watchlist tickers, followed strategies, alert rules and thresholds, virtual/paper trading positions | Power the features you actually use |
| Price alerts you set (stock, price, and when it fired) | Send you the notification you asked for |
| Support or feedback messages you send us | Respond to you |
2. Information collected automatically
| What | Why |
|---|---|
| Session tokens (stored as a hash, not the raw token) | Keep you signed in |
| Device push token, device model, OS version, app version, and IP address at the time of send | Deliver push notifications through our provider, OneSignal (see Section 3) |
| Crash and error diagnostics: what happened and where, not who you are | Find and fix bugs, via Sentry (see Section 3); we do not send Sentry your name, email, or IP address |
| Aggregate, non-account page-view analytics on our public website only (not the mobile app) | Understand what content on the free web dashboard gets used, via Google Analytics |
| In-app usage events (which screens and features are used, linked to your account ID), device model, OS and app version | Understand how the app is used and improve it, via PostHog (see Section 3) |
| Relay: a count of the questions you ask each day (not their text), and a topic label for each question (such as "earnings" or "advice request") chosen on your device from a fixed list | Hold free accounts to their daily allowance, and understand what Relay is used for, via PostHog (see Section 3) |
| App install, app open, sign-up and App Store purchase events, a device identifier, and, only if you allow tracking on iOS, your device's advertising identifier | Measure which of our ads on Facebook and Instagram bring people to the app, via the Meta SDK (see Section 3) |
3. Third parties we share data with
We don't sell your personal information. We do use a small number of service providers to run the Service, each of which only receives what it needs to do its job:
- Apple: Sign in with Apple, and processing your subscription purchase through the App Store (we receive a transaction identifier and subscription status back from Apple, never your card details). Relay questions are answered by Apple Intelligence, on your iPhone or on Apple's Private Cloud Compute servers, which Apple designs so that requests are not stored or made accessible to Apple. Signal Deck never receives or stores the text of your questions or Relay's answers, unless you tap "Report this answer" and confirm, which sends that question and answer to us so we can review them.
- Google: Sign in with Google, if you choose it.
- OneSignal: delivers push notifications on our behalf; receives a device push token and the device/app metadata in the table above, not your email or password.
- Sentry: crash and error reporting, configured to exclude personal identifiers.
- PostHog: product analytics for the mobile app; receives in-app usage events and your account ID, not your password or payment details.
- Meta Platforms (Facebook and Instagram): measures our app install ads. The Meta SDK in the app sends Meta install, app-open, sign-up and App Store purchase events with a device identifier. On iOS, Meta receives your advertising identifier only if you tap Allow on Apple's tracking prompt. We don't send Meta your email, watchlist, alerts, or positions.
- Market and news data providers (including Tiingo, Alpha Vantage, Yahoo Finance, and StockTwits): supply the price and sentiment data the Service displays; we send them ticker symbols, not information about you.
We may also disclose information if required by law, or to protect the rights, property, or safety of Signal Deck, our users, or others.
4. How long we keep it
We keep account data for as long as your account is active. If you delete your account (Account → Delete account, in the app, or via our web deletion page), we delete your profile, credentials, and preferences; some records we're required to keep for accounting, tax, or fraud-prevention purposes are retained only as long as legally necessary, and are not otherwise used.
5. Your choices
- You can review and edit your profile and preferences directly in the app.
- You can revoke individual sessions/devices, or turn off push notifications, at any time in Account settings.
- On iOS you can decline, or later turn off, tracking for Signal Deck in Settings → Privacy & Security → Tracking. The app works the same either way.
- You can delete your account at any time, in the app or on the web; this is permanent.
- You can ask us what data we hold about you, or ask us to correct or delete it, by contacting us (Section 8).
6. Children
The Service is not directed to anyone under 18, consistent with the eligibility requirement in our Terms of Service. We do not knowingly collect information from children.
7. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above; continued use of the Service after changes are posted constitutes acceptance of the revised policy.
8. Contact
Questions about this policy, or requests regarding your data, can be directed to hello@signalstock.markets.
See also our Terms of Service, Disclaimer, and Support.