Privacy notice

Who is responsible

Quiet Money, 1800 N Field St, Dallas, TX 75202, United States, decides how the data below is used (the data controller). For anything about your data, write to hi@quietmoneyapp.com.

Reading the site

You can read the feed, the rankings and every stock page without an account. Visitors who are not signed in get no cookies. Like any website, our hosting provider keeps short-lived technical logs of requests, including IP addresses, to run the service and protect it from abuse.

We use Vercel Web Analytics to count page views and a few named actions, such as searching for a stock, following one or opening the pricing page. It sets no cookies, does not identify you and does not follow you across other sites. We use these totals to see which parts of the product are useful.

The Friday digest

If you join the digest we store your email address, the date you joined, an optional referral tag from the link you arrived on, which version of the page you saw, and a salted one-way hash of your IP address that we use only to stop sign-up spam (the address itself is never stored). The legal basis is your consent. Every email has a one-click unsubscribe link, and unsubscribing stops sending at once. We keep the entry until you unsubscribe.

Your account, watchlist and alerts

The website and the Android app share one account. For it we store your email address, your password as a one-way hash (we cannot read it), your name if you give one, your plan, and whether alert emails are on. We store the stocks you follow and a record of which filings we have already sent you, so you are not told twice. If you use the app, we store a push-notification token for each phone.

We use this to provide the service you signed up for: your watchlist and the alert emails or notifications about it. The legal basis is our contract with you. We do not collect your location, contacts, photos or files.

Payments

If you buy Pro on the website, Stripe handles the payment. We never see or store your card number. We store the Stripe customer reference, your plan and whether your subscription is active. In the Android app, Google Play handles the payment and RevenueCat tells us whether a subscription is active. Payment records are kept by the payment provider and, where the law requires, by us for tax and accounting purposes.

Cookies

Quiet Money sets only these first-party cookies, and none of them for advertising:

• a login cookie when you sign in, which keeps you signed in for up to 30 days;
• two cookies on your watchlist page (qm_prev, qm_last) that remember when you last looked, so it can show what changed since then. They last up to one year.

The Stripe checkout page sets its own cookies, which are needed to process and protect the payment. Those are covered by Stripe’s privacy policy.

How long we keep data

Account data, your watchlist, alert records and phone tokens are kept until you delete your account. Deleting it removes them straight away and cancels a website subscription first, so you are not charged again. The digest list is separate and is kept until you unsubscribe. Payment records stay with the payment provider, and with us only as long as tax law requires.

Who processes data for us

• Vercel — hosting, technical logs and the cookie-less analytics
• Neon — the database, in the EU (Frankfurt)
• Resend — sending email
• Stripe — website payments
• Google Play and RevenueCat — payments in the Android app
• Expo — delivering push notifications to the app

Some of these providers are based in the United States. Where data leaves the EU, it is protected by the safeguards the GDPR allows, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We do not sell, rent or share your data for advertising, and there is no profiling.

Your rights

Under the GDPR you can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. Write to hi@quietmoneyapp.com and we will answer within one month. You can delete your account yourself at any time: how to delete your account. You may also complain to the data protection authority in the country where you live.