Privacy Policy

• Account: your email address and a securely hashed password (managed by Supabase).
• What you enter in the app: tokens you follow, alerts you create and positions you record (entry price, amount invested, sale price).
• Notifications: the push-subscription identifier of each device where you enable alerts.
• Preferences: your language and plan.
• Payments (paid plans only): processed by Stripe. We never see or store your card number; we only keep a Stripe customer ID and your subscription status.
• Technical logs: IP address and request data kept briefly for security and debugging.

We do not collect sensitive personal data, and we never ask for your wallet's private keys or seed phrase.

• To provide the Service: your account, watchlist, risk analysis, alerts and Profit Protection.
• To send the alerts and notifications you configure.
• To manage subscriptions and payments.
• To provide support, keep the Service secure and fix problems.

We may use aggregated, anonymized statistics (for example, how often alerts were followed by a price drop) to improve the Service. We do not sell your data and do not use it for third-party advertising.

We rely on these providers, some of which store data outside Mexico (mainly in the United States):

• Supabase — database and authentication.
• Vercel — website hosting.
• Stripe — payment processing.
• Apple, Google, Microsoft and Mozilla push services — delivering notifications to your devices.

These are processors acting on our behalf; transfers to them are necessary to provide the Service you requested, so under the LFPDPPP they don't require your separate consent.

We only use essential cookies: one to keep you signed in and one to remember your language. We don't use advertising or third-party tracking cookies.

We keep your data while your account is active. If you ask us to delete your account, we delete your personal data within 30 days, except what we must keep by law (for example, billing records for tax purposes). Price history is market data, not personal data, and is deleted automatically after 8 days.

You can request Access to your data, its Rectification, its Cancellation (deletion) or Oppose its use, and you can withdraw your consent, by writing to (support email coming soon). Include your account email and what you're requesting. We'll reply within 20 business days, as the LFPDPPP requires.

Data is encrypted in transit (HTTPS), passwords are hashed, and each user can only access their own data. No system is 100% secure, but we take reasonable measures to protect your information.

We'll post any changes to this Privacy Policy on this page and notify you of material changes.

Contact: (support email coming soon)