1. Introduction
InvTrack ("we", "our", or "us") is an app for tracking investments, made by an individual developer. This Privacy Policy explains what personal information the app collects, who processes it and why, where it is stored, how long it is kept, and how to use your rights.
2. Data Collection
Your data is stored in InvTrack's Google Firebase (Cloud Firestore) project under your account, so it syncs across your devices and works offline. Google encrypts it in transit and at rest. In the app, only your signed-in account can see your records. The developer can technically access stored data and does so only to answer a support request from you, to process a deletion request, or when the law requires it. We do not sell your data, and we do not use it for advertising. If you choose to sign in with Google, we receive your name, email and a unique user ID to create your account; we do not access your Drive, Gmail or Sheets. If you continue as a guest, Firebase creates an anonymous account with a random user ID, and we receive no name or email.
Under your account we store what you enter and what the app calculates from it, such as investments, cash flows, expected payments, goals, FIRE settings, health score history, profile preferences and cached exchange rates, and the details of files you attach (such as name, type and size). The attached files themselves stay on your device and are not uploaded.
We also use Google Firebase Analytics, Crashlytics and Performance Monitoring to measure app usage and diagnose crashes and slowness. This diagnostic data is associated with your user ID and device identifiers, and it is always on (there is currently no opt-out). Amounts are reported only in ranges, not exact values. You can delete your account and data in Settings > Data & Account.
3. Data Usage
Your records are used only to provide the tracking features: returns, goals, reminders and syncing across your devices. Usage data shows us which features are used. Crash and performance data is used to fix crashes and slowness. We do not sell, trade, or rent your personal identification information to others.
4. Who Processes Your Data
Google processes your data for us through Firebase Authentication, Cloud Firestore, Analytics, Crashlytics and Performance Monitoring, and through Google Sign-In if you use it.
To convert currencies, the app asks api.frankfurter.dev for a rate and, if that fails,
api.exchangerate-api.com. It sends only currency codes and dates. Like any internet request,
this shows your device's IP address to them.
The app may download its fonts from Google Fonts, which then sees your device's IP address, and it checks for updates through Google Play's in-app update service. When the app asks you to rate it, Google Play shows and handles the review prompt; the app is not told whether you left a review.
The app shows no ads. It still includes Google's mobile ads library (Google Mobile Ads), and its Android permissions include the advertising ID permission, which Firebase Analytics can use.
5. Where Your Data Is Stored
Your records are stored in Google Firebase (Cloud Firestore), and usage, crash and performance data is processed by Google. Google may store and process this data on servers outside India. A copy of your records and the files you attach are also kept on your device. Android backup is turned off for the app, so that copy is not saved to your Google backups.
6. How Long We Keep Data
Your records stay until you delete them or delete your account. Analytics events and crash reports are kept by Google for its own retention period for each service, and are then deleted automatically. Data on your device stays until you delete it in the app, clear the app's storage or uninstall the app.
7. Your Rights and How to Use Them
- See and export your data: Settings > Data & Account > Export as CSV or Export as ZIP.
- Correct your data: edit any record in the app.
- Delete your account and data: Settings > Data & Account > Delete Account. If you cannot use the app, open https://ravitejakamalapuram.github.io/delete/invtrack.html and sign in with the same Google account to ask for deletion (you can withdraw the request there before it is processed), or email support@invtracker.app from the email address you signed in with. A guest account cannot be requested on that page; delete it in the app.
- Withdraw consent: There is currently no switch to turn off Analytics, Crashlytics or Performance Monitoring. Signing out or deleting your account removes your user ID from new reports, and uninstalling the app stops them.
8. After You Delete Your Account
We delete your records and your sign-in account. Analytics events tied to your user ID are deleted automatically at the end of Google's retention period. We may also ask Google to delete them sooner; Google carries out any such request on its own schedule. We cannot delete individual crash reports. They are deleted automatically at the end of the Crashlytics retention period. Once you are signed out, new crash and analytics reports from this device no longer carry your user ID.
9. Security
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.
10. Contact Us
If you have questions about this Privacy Policy, or a request or complaint about your data, please contact us at support@invtracker.app.
The full, current policy is available at https://ravitejakamalapuram.github.io/privacy/invtrack.html