Privacy Policy

Effective September 25, 2026 · Version 2026-09-25.2

In short: we collect what we need to run your account and personalize your watchlist. We do not sell your personal information, we do not use advertising or tracking cookies, and you can delete your account and its data at any time.

1. Who we are

SMI Investments ("we", "us") operates this service. This policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies together with our Terms of Service.

2. Information we collect

Information you give us

Account details: your email address and, if you create a password, a salted one-way hash of it (we never store or see your actual password).
Profile: first and last name, date of birth (used to confirm you are 18 or older), and optionally your gender.
Preferences: the kind of investor you are, your experience level, how you heard about us, the sectors and indices you chose, your watchlist, your notification choices (when to send a daily summary, which sectors it covers, and whether by email, browser notification or in the app) and the politicians you follow.
Messages you send us, such as support requests.

Information from sign-in providers. If you choose "Sign in with Google", Google shares your name, email address, whether it is verified, and a Google account identifier. We do not receive your Google password or access to your Gmail, contacts or files.

Passkeys. If you create a passkey, we store only its public key, an identifier and a usage counter. Your fingerprint, face or device PIN never leave your device and are never sent to us.

Notifications. If you turn on browser notifications, your browser gives us a push address and encryption keys issued by its push service (for example Google, Apple or Mozilla); messages we send pass through that service encrypted. We keep the summaries and alerts shown in your Today panel for 90 days.

Information collected automatically. Our servers record technical information needed to operate and secure the Service: IP address, browser type, the pages and features requested, and error logs. We use one essential cookie to keep you signed in. We do not use advertising cookies, cross-site trackers or third-party analytics.

We do not collect Social Security numbers, bank or brokerage credentials, or payment card details.

3. How we use information

To create and secure your account, sign you in, and prevent fraud and abuse.
To personalize the Service, such as building your watchlist from the sectors you pick.
To operate, maintain, debug and improve the Service, including aggregated statistics that do not identify you.
To send the summaries and alerts you choose, and service messages such as security notices or changes to our terms. We will ask before sending marketing email, and every email has an unsubscribe link.
To comply with law and enforce our Terms.

We do not use your information to make automated decisions that have legal or similarly significant effects on you.

4. How we share information

We do not sell your personal information and do not share it for cross-context behavioural advertising. We share it only:

with service providers that host or deliver the Service for us (for example our hosting and network providers), who may use it only to provide those services;
with Google, only if you choose to sign in with Google;
with our email provider, to deliver emails you asked for, and with your browser's push service, to deliver browser notifications you turned on;
when required by law, subpoena or court order, or to protect the rights, property or safety of us, our users or others;
in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to your information; and
with your consent.

Market data requests we make to data providers do not include your personal information.

5. Retention

We keep account information while your account is open. When you delete your account we delete your profile, watchlist and passkeys immediately from the live database, and from backups within 30 days. Server logs are kept for up to 90 days. We may keep limited records longer where the law requires, such as a record that you accepted our Terms.

6. Your choices and rights

View and edit your profile and watchlist, and remove passkeys, in account settings.
Delete your account and its data at any time from account settings.
Ask us for a copy of your information, or ask us to correct or delete it, by contacting an address for legal and privacy requests.

California residents. Under the California Consumer Privacy Act (as amended by the CPRA) you have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of its sale or sharing (we do not sell or share it); to limit use of sensitive personal information (we use it only to provide the Service); and not to be discriminated against for exercising these rights. In the past 12 months we collected the categories described in section 2 (identifiers, personal characteristics such as age and gender, internet activity, and inferences such as your investor type) for the purposes in section 3, and disclosed them only as described in section 4. You or an authorized agent can make a request by contacting an address for legal and privacy requests; we will verify your identity before acting on it.

Other locations. Depending on where you live you may have similar rights, including the right to object to or restrict processing and to complain to a data-protection authority. Contact us to exercise them.

7. Security

We use HTTPS encryption, hash passwords, store passkeys as public keys only, and limit access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your sign-in methods private and tell us if you suspect unauthorized access.

8. Children

The Service is only for people 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.

9. International users

The Service is operated from the United States, and your information is processed and stored there. By using the Service you understand that your information will be transferred to the United States.

10. Changes

We may update this policy. If the changes are material we will tell you and, where required, ask for your consent before they apply to you. The effective date at the top shows when it last changed.

11. Contact

Questions or requests about your privacy: an address for legal and privacy requests.