Privacy Policy
Last updated: 23 September 2026
1. Our commitment
Your financial data belongs to you. We do not sell your personal data, and your portfolio data (assets, prices, holdings, transactions) is never shared with advertisers.
2. Information we collect
Account information
- Username and password, if you register with a username. Passwords are stored hashed, so we cannot read your original password.
- Name and email address, if you sign in with Google or Apple. These are provided by Google or Apple.
Portfolio data
- Portfolios, assets, purchase prices, holdings and transaction history that you enter.
- Photos you choose to scan: when you use "add transaction from photo", the image is sent to our server and processed by Google Gemini to extract transaction details. We do not keep the image after processing.
Device and usage data
- Device identifiers: an app-generated device ID (on iOS, the identifier for vendor), Firebase app instance ID, and, where permitted, your device's advertising ID.
- App activity: screens viewed and features used.
- Diagnostics: crash logs, device model, OS and app version.
Purchase information
- Your PRO subscription status and purchase history, processed by Google Play, the Apple App Store and RevenueCat. We never receive your card or payment details.
3. How we use your information
- To create and secure your account, and keep you signed in.
- To provide portfolio tracking and update gains, losses and asset values.
- To manage your PRO subscription.
- To analyze usage and fix crashes so we can improve the app.
- To show ads in the free version and measure the effectiveness of our advertising campaigns.
4. Third-party services
| Service | Purpose | Data involved |
|---|---|---|
| Google Firebase (Analytics, Crashlytics) | Analytics, crash reporting | Device IDs, app activity, diagnostics |
| Google AdMob | Ads in the free version | Advertising ID, device information, approximate location (from IP address) |
| TikTok for Business | Measuring ad campaigns (app install attribution) | Advertising ID, account ID, app events including purchases |
| RevenueCat | Subscription management | Account ID, purchase history |
| Google Gemini | Reading transactions from photos you choose to scan | The photo you submit |
| Google Sign-In, Sign in with Apple | Sign-in | Name, email |
Each provider handles data under its own privacy policy. On first launch you are asked to consent to personalised ads where required by law (for example in the EEA and UK). On iOS, we only access the advertising ID if you allow tracking. You can also reset or delete your advertising ID in your device settings at any time.
5. Data security
Investea uses HTTPS encryption in transit and stores data with industry-standard cloud providers. Passwords are hashed and we cannot read your original password. No method of transmission over the Internet is ever 100% secure, but we follow modern security practices to protect your data.
6. Your rights
- View and update your portfolio data at any time.
- Delete individual portfolios, assets or transactions without deleting your account.
- Delete your account and all associated personal data.
- Email support for help with access or deletion.
7. Account and data deletion
Option 1: In the app
- Open Investea and sign in.
- Go to Settings.
- Tap Delete account and confirm.
Your account is deactivated immediately, you are logged out, and your data is scheduled for deletion. Most data is deleted within 7 days, and all data is removed within 30 days.
Option 2: By email
Send an email to support@investea.io with the subject line "Account deletion request" and include your username or the email address linked to your account. We will process your request within 7 days and delete all personal data within 30 days.
What we delete
- Your account and profile information.
- All portfolios, assets and transactions you entered.
- Your app settings and preferences.
What may be retained
- Purchase records held by Google Play, the Apple App Store and RevenueCat, because they are required for tax and financial reporting.
- Aggregated analytics and crash data in Firebase, which cannot identify you.
- Advertising and campaign attribution data held by AdMob and TikTok for Business.
8. Children
Investea is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn that we have collected such data, we will delete it immediately.
9. Policy changes
We may update this policy from time to time. Any changes will be communicated in the app or on this page. Continuing to use Investea after changes are posted constitutes acceptance of the updated terms.
10. Contact
- Email: support@investea.io
- In-app support channel in Investea.