Legal
Stoxio AI is a mobile application providing AI-powered stock intelligence. It is operated by David Svatos, an independent developer based in British Columbia, Canada, who is the controller of the personal data described in this policy.
We can be reached at hello@stoxio.ai.
We collect only what the app needs to work. We do not collect location data, advertising identifiers, contacts, or any special-category personal information.
Account data — if you create an account, we store your email address securely to manage authentication. If you sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address.
Portfolio and app data — when you are signed in, your portfolio holdings, watchlist, price targets, analysis history and daily portfolio value history are stored in your private account on our infrastructure so they sync across your devices and are restored if you reinstall the app. This data is tied to your account and is never sold, shared with advertisers, or used to identify you to third parties. If you use the app in guest mode without an account, this data remains only on your device.
Push notification token — if you enable notifications, your device's push token is stored in your account so our servers can deliver price alerts, earnings reminders and market summaries. It is also shared with Apple's notification service, which is what physically delivers the notification to your device.
Subscription status — managed through Apple's in-app purchase system and RevenueCat to verify your premium access. We never see or store your payment details; Apple handles all billing.
IP address — used temporarily in server memory for rate limiting. We do not retain IP addresses in our own records, though our hosting providers may log them briefly for security and abuse prevention, as is standard for internet infrastructure.
When you use AI-powered features — stock analysis, Morning Brief, Sentiment, Earnings summaries, or Smart Alerts — your request, which may include your portfolio tickers and investment preferences, is processed by Anthropic's Claude API.
Some AI output is saved to your account so the app can remember context between sessions — for example, a previous verdict and thesis for a stock, so future analysis can tell you whether that view has played out. You can remove all of it by deleting your account.
Live market data such as prices, fundamentals, and news is fetched from financial data providers in real time. Only the ticker symbols you request are included in these calls — your personal information is never shared with market data providers.
We use the following third-party services to operate the app. None of them are used for advertising, and none of them sell your data.
| Service | Purpose | Data collected | Privacy policy |
|---|---|---|---|
| Supabase | Account authentication and secure data storage | Email address, portfolio, watchlist, price targets, analysis history, push token. Protected by row-level security so only your account can access your data. | supabase.com/privacy |
| Anthropic | AI analysis generation | Ticker symbols, portfolio context and investment preferences included in your request. Not used to train models. | anthropic.com/privacy |
| RevenueCat | Subscription management | Anonymous subscriber ID and subscription status. No payment details. | revenuecat.com/privacy |
| Sentry | Crash reporting and error monitoring | Error stack traces, device OS version, app version. No personal or financial data. | sentry.io/privacy |
| PostHog | Anonymous usage analytics | Anonymised feature usage events (e.g. "analysis run", "brief generated"). No portfolio holdings, tickers, or personal data are included in analytics events. | posthog.com/privacy |
Analytics collection is disabled during development and only active in production builds. If you wish to opt out of analytics, contact us at hello@stoxio.ai and we will disable collection for your account.
We use your data only to provide and improve the Stoxio AI service — generating analysis, syncing your portfolio across your devices, delivering notifications, processing your subscription, fixing crashes, and understanding which features are most useful. We do not use your data for advertising, sell it to third parties, or use it to train AI models.
We keep your account data for as long as your account exists. When you delete your account, your data is removed immediately and permanently — see below. If you stop using the app without deleting your account, your data remains stored so it is waiting for you if you return.
Delete your account and data — you can permanently delete your account at any time from inside the app: go to More → Delete Account. This immediately and permanently erases your account together with your portfolio, watchlist, price targets, analysis history, portfolio value history and push token from our servers, and clears all locally stored data on your device. This cannot be undone. If you need help, contact us at hello@stoxio.ai.
Access or correct your data — your portfolio, watchlist and alerts can be viewed and edited directly in the app at any time. For anything else, contact us at hello@stoxio.ai.
Push notifications — disable at any time in iOS Settings → Notifications → Stoxio AI, or per-alert-type inside the app.
Analytics opt-out — contact us at hello@stoxio.ai to opt out of PostHog analytics or Sentry crash reporting.
Canadian users (PIPEDA) — you have the right to access the personal information we hold about you, request corrections, and withdraw consent. Contact us to exercise these rights. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
EU/UK users (GDPR) — you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.
California users (CCPA) — we do not sell personal information.
Your data is stored with row-level security enabled, meaning your records are only accessible by your own authenticated account. All data is transmitted over encrypted HTTPS connections. Payment information is handled entirely by Apple and never reaches our servers.
Stoxio AI is operated from Canada, but our infrastructure and service providers — including Supabase, our application servers, and the third parties listed above — process and store data on servers located in the United States and other countries.
This means your personal data may be transferred to, stored in, and processed outside your country of residence, where it may be accessible to law enforcement and regulatory authorities under the laws of those jurisdictions. By using Stoxio AI, you consent to this transfer. We take reasonable steps to ensure your data receives a comparable level of protection wherever it is processed.
Stoxio AI is intended for adults. Our Terms of Service require users to be at least 18 years old, and the app is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us at hello@stoxio.ai and we will delete it.
All content in Stoxio AI is for informational purposes only and does not constitute financial advice, investment recommendations, or an offer to buy or sell any security. Stoxio AI does not execute trades, hold customer funds, or provide licensed advisory services. Always consult a qualified financial professional before making investment decisions.
We may update this policy from time to time. Significant changes will be communicated through the app or by email. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
Questions, concerns, or data requests: