StockStag — Privacy Policy
StockStag is a portfolio tracker that runs on your device. It has no accounts, no ads, no tracking, and no analytics. Your trades, holdings, and cash balances are stored on your iPhone and are never sent to us. We do not know who you are.
Who we are
StockStag is developed by Viacheslav Mukha (“we”, “us”). For any question about this policy or your data, email viacheslav.mukha@gmail.com.
What we collect
We do not collect personal information. There is no sign-up, no login, and no user profile on our side. We never ask for your name, email address, date of birth, or any government or brokerage identifier.
The display name you can set in Settings is stored only in the app on your device. It is never transmitted.
Where your portfolio lives
Every transaction you enter, import, or sync is written to a database on your device. All analytics — returns, XIRR, benchmarks, risk, dividend figures — are computed on your device from that database. This data is not uploaded to us, and we have no ability to read it.
Data that leaves your device
Three things can send data off your iPhone. Two are optional and off unless you turn them on.
| What | Where it goes | What is sent |
|---|---|---|
| Market prices (always on) |
A market-data proxy we operate on Cloudflare, which fetches from third-party market-data providers | The ticker symbols you hold or search for, and text you type into instrument search |
| iCloud backup (optional) |
Your own iCloud account, via Apple’s CloudKit private database | A full backup of your portfolios and transactions |
| Interactive Brokers sync (optional) |
Interactive Brokers, directly from your device | Your Flex Web Service token and query ID |
Market data
To show prices, the app asks our proxy for quotes, historical bars, and exchange rates. Those requests contain ticker symbols only. They do not contain your holdings’ quantities, your cost basis, your portfolio value, your name, or any account or device identifier.
Be aware that the set of symbols requested can suggest which instruments you are interested in or may own. We consider this the minimum necessary to display prices, but we would rather state it plainly than imply the requests reveal nothing.
As with any internet request, our proxy receives your IP address. We use it to rate-limit requests and block abuse. Our own application logs record the type of request (for example /v1/quotes) and timing, not the symbols. Cloudflare, acting as our infrastructure provider, additionally retains standard request logs — which include the full request URL and IP address — for a short diagnostic window before deletion. We do not build profiles, and we do not link requests to any identity, because we do not have one.
Upstream market-data providers receive only the symbol being requested. They receive your request from our servers, not from your device, and they do not receive your IP address.
iCloud backup
If you enable iCloud backup, the app stores a copy of your ledger in your own iCloud account, in Apple’s CloudKit private database. It is your data in your Apple account. We cannot access it, and we receive no copy and no notification. Apple’s handling of it is governed by Apple’s Privacy Policy.
You can turn this off at any time in Settings, and delete the stored data through your Apple account.
Interactive Brokers
If you connect Interactive Brokers, your Flex Web Service token is stored in the iOS Keychain on your device. Your device contacts Interactive Brokers directly to download your statement, and the statement is parsed on your device. This connection is read-only — the app cannot trade or move money. Neither the token nor the statement passes through our servers or is visible to us. Removing the connection in Settings erases the token from the Keychain.
What we do not do
- No advertising, and no data sold, rented, or shared with data brokers.
- No analytics, telemetry, or usage tracking of any kind.
- No third-party tracking SDKs. The app bundles no third-party libraries.
- No advertising identifier (IDFA), no cross-app or cross-site tracking, and no fingerprinting.
- No AI features, and none of your data is used to train any model.
Face ID and Touch ID
If you turn on App Lock, authentication is performed entirely by iOS. The app receives only a success-or-failure answer. We never see or store biometric data.
Exporting your data
Settings → Export data writes a JSON file containing your portfolio and hands it to the iOS share sheet. Where that file goes is entirely your choice. The file is not sent to us.
Deleting your data
Because your portfolio lives on your device, deleting the app deletes it. You can also remove transactions from within Settings. If you enabled iCloud backup, delete the app’s data from your Apple account to remove the stored copy. There is nothing held on our side to request the deletion of.
Your rights
Privacy laws including the GDPR and the CCPA give you rights to access, correct, port, and delete personal data held about you. We hold no personal data about you and cannot identify you, so there is nothing for us to retrieve or erase — your data is already entirely in your hands. We do not sell or share personal information as those terms are defined under the CCPA. If you believe we hold something about you, write to us and we will answer.
Children
StockStag is not directed at children under 13, and we do not knowingly collect information from them.
Changes to this policy
If this policy changes, the updated version will be posted at this address with a new “last updated” date. Material changes affecting how data leaves your device will also be noted in the app’s release notes.
Contact
Questions, corrections, or concerns: viacheslav.mukha@gmail.com.