Privacy Policy

Effective: April 3, 2026

1. What We Collect

TrackFolio collects only the information necessary to provide the service:

Email address and optional username (for account creation and authentication)
Portfolio data you enter (transactions, holdings, ticker symbols)
Authentication tokens and session data

We do not collect browsing history, device fingerprints, or sell your data to third parties. We do not use tracking cookies or third-party analytics.

2. How We Use Your Data

Your data is used solely to operate TrackFolio and provide portfolio tracking, ACB calculations, and tax reporting features. We do not use your data for advertising, profiling, or any purpose beyond delivering the service.

3. Data Storage and Security

All user data is encrypted at rest using industry-standard encryption. Data is stored on secure, managed infrastructure provided by our hosting and database providers. Data may also be stored as part of encrypted backups to ensure service continuity and disaster recovery.

4. Third-Party Services

TrackFolio uses the following third-party services to operate:

Supabase (authentication and database hosting)
Yahoo Finance API (stock price data — no personal data is shared)
Google OAuth (optional sign-in — governed by Google's privacy policy)

We do not share your personal data or portfolio information with any third party for marketing or commercial purposes.

5. Your Right to Delete Your Data

You have the right to delete your account and all associated data at any time. You can do this from the Settings page within the application. Upon deletion, your account, portfolio data, and transaction history are permanently removed from our active systems. Residual copies may persist in encrypted backups for a limited retention period, after which they are automatically purged.

6. Data Retention

We retain your data only for as long as your account is active. If you delete your account, your data is removed from active systems immediately. Encrypted backups containing your data may be retained for up to 30 days before automatic deletion.

7. Children's Privacy

TrackFolio is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of TrackFolio after changes constitutes acceptance of the revised policy.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at admin@trackfolio.ca.