Privacy Policy

Your Data Stays on Your Device

FolioSync does not operate any servers that store your personal or financial data. All portfolio data — including your transactions, holdings, trade history, and settings — is stored exclusively on your device using a local database (SQLite via Android Room). We do not collect, transmit, or have access to this data.

No Sale of Personal or Financial Data

Because we do not collect or store your portfolio data on our servers, we cannot sell, rent, or trade it. Limited website usage information is processed by Google Analytics as described separately below; it never includes your FolioSync portfolio, holdings, transactions, broker files, or app credentials.

Website Analytics

The public FolioSync website uses Google Analytics 4 to understand aggregate website usage and improve content. Google Analytics may process information such as pages visited, referral source, approximate location, browser, device type, and interaction timing, and may use cookies or similar browser storage.

Google Analytics is not loaded on FolioSync administration, support-ticket viewing, or ticket-tracking routes. It does not receive your app portfolio, holdings, transactions, imported files, or API keys. Website analytics data is processed under Google's Privacy Policy. You can restrict analytics cookies through your browser settings or privacy tools.

Optional Google Drive Backup

FolioSync offers an optional cloud backup feature that allows you to back up your database to your own personal Google Drive account. If you enable this feature:

- Your data is stored in the private "App Data" folder of your own Google account, which is not visible to other apps or users. - FolioSync only accesses Google Drive using the restricted "appdata" scope — it cannot read any other files in your Drive. - You can disable this feature or delete backups at any time from within the app. - Your data in Google Drive is governed by Google's Privacy Policy.

This feature is entirely optional. FolioSync functions fully without a Google account.

AI Features & API Keys

FolioSync offers optional AI-powered features using third-party AI providers (Anthropic Claude, Google Gemini). If you choose to use these features:

- Your API key is stored locally on your device in encrypted preferences. It is never transmitted to FolioSync's servers (we have none). - When you trigger an AI analysis, the relevant data (stock symbol, price, technical indicator values, or portfolio allocation summary) is sent directly from your device to the AI provider's API. - This data is subject to the privacy policy of the respective AI provider (Anthropic or Google). - AI insights are cached locally on your device and are not transmitted to us.

These features are entirely optional and off by default.

Push Notifications (Firebase)

FolioSync uses Google Firebase Cloud Messaging (FCM) to deliver app-level push notifications (such as important update announcements from the FolioSync team). FCM assigns your device a registration token, which Firebase uses to route notifications. Firebase may also collect limited device diagnostic data as part of this service.

FolioSync uses Firebase Crashlytics to receive anonymous crash reports so we can identify and fix bugs. Crashlytics does not collect personally identifiable information. Firebase Analytics may collect anonymised usage events to help us understand app performance.

All of the above is subject to Google's Privacy Policy.

Security

Your data is stored locally and is protected by Android's application sandboxing, which prevents other apps from accessing it. FolioSync also supports biometric authentication and PIN lock to further protect your portfolio data. API keys entered in the app are stored in encrypted DataStore preferences.

Age Requirement

FolioSync is intended for users who are 18 years of age or older. The App is designed for investors who hold or intend to open a brokerage account on the Pakistan Stock Exchange, which requires users to be at least 18 years old. Since all data is stored locally on your device and we do not collect or hold any personal information on our end, we have no mechanism to identify or act on the age of any user.