Privacy Policy — Spiral Portfolio

Last updated: 20 July 2026

Spiral Portfolio ("the app", "we") is a personal analytics tool that helps you track your Indian (NSE) stock portfolio. This policy explains what information the app handles and how. By using the app you agree to this policy.

Information we handle

• Account information: when you create an account, we collect your email address and a password (stored securely by our authentication provider). This is used only to sign you in and sync your data.
• Portfolio data you enter: your holdings, GTT orders, watchlist, notes, and settings. This is stored in your account so it is available across your sessions.
• AI key (optional): if you choose to enable AI insights, you provide your own API key for a third-party AI provider. It is stored on your device and used only to send your portfolio context to that provider for analysis at your request.
• Purchases: if you buy Founding Access, the payment is processed by Google Play and our payments partner. We do not receive or store your card or bank details.

Information we do NOT collect

• We do not sell your personal data.
• We do not use advertising or third-party tracking SDKs.
• We do not collect your precise location, contacts, photos, or messages.
• The app does not connect to your broker or bank and cannot execute trades or move money.

How your information is used

• To provide the app's core features (sign-in, saving and displaying your portfolio).
• To generate educational analysis, only when you request it, using the AI provider you configure.
• To fetch public market and IPO data through our data service (no personal data is sent for this).

Third-party services

The app relies on the following processors, each governed by its own privacy policy:

• Supabase — account authentication and data storage.
• Google Play Billing and our payments partner — processing purchases.
• Your chosen AI provider (only if you enable AI insights) — processing the analysis requests you make.
• Our data proxy — retrieving public market/IPO data; it does not receive your personal information.

Data retention and deletion

Your data is kept while your account is active. You can request deletion of your account and associated data at any time by contacting us at the email below; we will delete it within 30 days.

Children

The app is intended for users aged 18 and over and is not directed to children.

Security

Data is transmitted over encrypted (HTTPS/TLS) connections. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

For questions or data requests, contact: krishnasedam@gmail.com

This app is an educational and analytics tool. It is not investment advice, and the developer is not SEBI-registered.