Privacy Policy

1. Information We Collect

When you create an account, we collect:

• Account Information: Email address, username, full name, and password (stored as a secure hash).
• Usage Data: IP address, user agent (browser/device info), login timestamps, and session data for security and analytics.
• App Data: Watchlists, portfolio holdings (virtual/paper trading only), learning progress, and algorithm builder configurations.

We do not collect payment information, precise location, contacts, or any real brokerage/trading account data.

2. How We Use Your Information

• Authentication & Security: To verify your identity, manage sessions, and protect your account.
• Educational Services: To provide personalized learning progress tracking, AI-powered educational analysis, and algorithmic trading simulations using virtual money only.
• Audit & Compliance: To maintain security logs of authentication events (login, logout, account changes).
• Communication: To send password reset emails when requested.

3. Third-Party Services

We use the following third-party services to provide app functionality:

• Market Data Providers: Provide stock market data, quotes, and company information for educational display. Stock symbol queries are processed through our servers.
• Google Gemini AI: Powers our AI educational chatbot. Conversation messages are sent to Google's Gemini API for generating educational responses. No personal account data is shared with Gemini.
• Google AdMob: Displays advertisements within the app. AdMob may collect device identifiers and usage data for ad personalization. You can opt out of personalized ads in your device settings.
• News Aggregation Services: Provide financial news articles for educational context. Only search queries are sent; no user data is shared.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage & Security

• All data is transmitted over HTTPS (encrypted in transit).
• Passwords are stored using bcrypt hashing and are never stored in plain text.
• Authentication tokens are stored in SecureStore (device-level encryption) on mobile devices.
• Data is hosted on a self-hosted PostgreSQL database and Google Cloud Run (backend hosting).
• We implement rate limiting and audit logging to detect and prevent unauthorized access.

5. Your Data Rights

You have the right to:

• Access your data: Download all your data via Profile > Download My Data.
• Delete your account: Permanently delete your account and all associated data via Profile > Account > Delete Account.
• Correct your data: Update your profile information at any time within the app.

6. Account Deletion

You can delete your account at any time from within the app by navigating to Profile > Account > Delete Account.

When you delete your account, the following data is permanently removed:

• Your user profile (email, username, name)
• All sessions and authentication tokens
• Portfolios, holdings, and transactions (virtual/paper trading data)
• Watchlists and price alerts
• Learning progress and quiz scores
• Community posts and comments
• Role assignments and user attributes

Audit logs are retained for security compliance but are anonymized (your user ID is removed).

7. Children's Privacy

Algomaya is not intended for children under 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

[email protected]