Your data stays yours.

Updated: 3 October 2026

Who controls your data

Market Alert is operated by MattStudio Mateusz Biskup, NIP 5213924162, ul. Szwoleżerów 131/2, 05-091 Ząbki, Poland. Contact: mattstudio94@gmail.com.

Data we process

We process account identifiers, nickname, authentication details supplied by the selected sign-in provider, an optional profile image, saved markets, notification settings, device push tokens, language and app preferences, subscription entitlement status, feedback and limited diagnostic events about subscription recovery, purchase, restore and server synchronization, together with the app build and platform. These events do not include raw errors, receipt contents or email addresses. Separately, Sentry receives app crash and error reports and sampled performance measurements (for example, app start and navigation): stack traces, device type, operating system, app version and operation timings. Session replay, screenshots, action breadcrumbs and default personally identifying data are disabled. An error message may nevertheless contain technical or user-entered fragments; we limit the context and do not intentionally add email, receipts or account IDs to Sentry. Separately, we process public market news and social posts, which can include the names and handles of their authors or people mentioned in those sources.

Purposes and legal bases

We process account, entitlement and preference data because it is necessary to provide the service you request and perform our contract with you. We process security, reliability, fraud-prevention and limited diagnostic data for our legitimate interests in protecting and improving the service, balanced against your rights. We use consent where applicable, including optional notifications and permissions that you can withdraw through the app or device settings. We may also process data where necessary to comply with law.

Payments

Purchases are processed by Apple or Google and subscription status may be synchronized through RevenueCat. Market Alert does not receive or store full payment-card numbers.

Service providers and recipients

Supabase supports our backend, authentication and storage. Sentry processes app crash and error reports and selected performance measurements to diagnose app failures. Expo and Apple or Google support push delivery and platform services. Apple or Google process store purchases; RevenueCat synchronizes subscription entitlements. Vercel hosts this legal website and processes technical request information needed to serve and secure it. Market prices come from Twelve Data and MetalpriceAPI; cryptocurrency prices and volume come from CoinMarketCap; news comes only through Marketaux and Twelve Data. Public social posts and metrics come separately through the X API. OpenAI processes market-content text for analysis, score explanations and Polish translations of headlines, short descriptions and eligible X posts. This market-content pipeline does not send your account profile, email address, saved markets or push token to OpenAI, Marketaux, Twelve Data, MetalpriceAPI, CoinMarketCap or X. Public posts may contain author names or other publicly disclosed personal information. A market-content provider does not receive your account profile merely because its data is shown in the app. We do not sell personal data or use it for third-party advertising.

International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the European Commission's Standard Contractual Clauses or another lawful safeguard. You may contact us for information about the safeguard relevant to your data.

Retention and security

Account data is kept while the account is active and then deleted or anonymized unless a longer period is required for legal claims, tax, fraud prevention or security. Push tokens reported as invalid by the delivery provider are deactivated and are no longer used to send notifications. Deactivation does not immediately delete the token record. Tokens associated with an app account are deleted when that account is deleted. Support records are retained for the period reasonably necessary to resolve the issue and protect the service. Subscription diagnostic events are deleted after 30 days or when the app account is deleted, whichever comes first. Sentry diagnostics have a separate retention period, determined by the type of diagnostic data (crash and error reports or performance measurements), the retention available under our Sentry subscription and any retention setting applied to the project. The applicable period runs from ingestion of the diagnostic event and is separate from the 30-day subscription-event period above. Deleting an app account does not automatically delete Sentry reports because we do not attach the account ID to them. You may request information about the current retention periods or ask us to delete diagnostic data relating to you. We will take reasonable steps to identify and delete that data where required by applicable law; without an account identifier, we may need additional information to locate the relevant report. News collection and Polish news translation use a rolling window of up to 45 days. This news window is not the retention period for account data or a promise that all provider logs and backups are erased after 45 days. Providers may retain operational records under their applicable terms and configuration. We use access controls, encrypted transport and restricted production credentials. No internet service can guarantee absolute security.

Automated processing

Market scores rank public market information and are not used to make legal or similarly significant decisions about individuals. Market Alert does not perform automated credit, employment, insurance or eligibility decisions about users.

External links

When you open an original article, X post or another external page, that service receives information normally sent by your browser, such as your IP address and device information. Loading external media may also send a request to its host. The destination service applies its own privacy policy. These legal pages do not set advertising or analytics cookies; technical hosting logs remain subject to the processing described above.

Your choices and rights

You can change preferences, disable notifications, restore purchases and request account deletion from the app. Subject to applicable law, you may request access, correction, deletion, restriction, portability, object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing. Contact mattstudio94@gmail.com. You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or another competent authority.

Children

Market Alert is not directed to children under 13 and is not intended to collect their personal data knowingly.

Changes

We may update this policy when the product or legal requirements change. The effective date above identifies the current version.