The short version. Portfolio On Fire has no account, no analytics and no server of ours. Everything you enter stays on your device. The app only goes online to ask for public market data, and those requests name a ticker or a currency, never you or what you own. If you have Pro, the app also backs up to your own iCloud or Google account. We never hold a copy of your portfolio, so there is nothing for us to sell, share or leak.
This policy covers the Portfolio On Fire app for iOS and Android, its web version (together “the app”) and this website. “We” and “us” mean the independent developer who builds and maintains Portfolio On Fire. It describes what the app does with your information, which is very little, and the few places where something does leave your device.
Everything you put into the app is stored in the app’s own storage on your phone, or in your browser’s storage if you use the web version:
We do not have a copy of any of it. There is no server of ours that receives it, so there is nothing of yours on our side that could be breached, handed over or sold.
Broker files work the same way. When you import a DeGiro CSV or one of your own JSON exports, the app reads the file on your device. Nothing is uploaded so that someone else can process it.
To show current prices, exchange rates, dividend information and company logos, the app asks third-party market data providers for that public data over an encrypted (HTTPS) connection. Each request asks something like “what is ASML trading at?” or “what was the euro–dollar rate on this date?” It does not include who is asking, how many shares you hold, what you paid, or what else is in your portfolio.
On iOS and Android these requests go directly from your phone to the data provider. The web version sends them through a relay service, because browsers do not let a web page ask those providers directly. You can also switch that relay on in the iOS and Android app settings. A relay forwards the request to the data provider and sees the same ticker request, nothing more. As with any internet connection, the provider and the relay, if used, can see your IP address. We have no access to their logs, and they have their own privacy policies.
You can check this yourself. Switch off your network and everything keeps working except price updates, because everything else is already on your device.
Pro backs up your portfolio automatically to your own cloud account: iCloud on iOS, your Google account on Android. Apple or Google stores that backup under their terms and your account settings. We cannot see it or access it. You can manage or delete it from your iCloud or Google account settings.
Apart from the requests above, the app sends nothing. It sends no holdings, no transactions, no device identifier and no usage data.
If you have told your phone to share diagnostics with app developers (on iOS, under Settings › Privacy & Security › Analytics & Improvements), Apple or Google may send us anonymous crash reports. These contain technical details such as the device model, the operating system version and the point in the code where the app crashed. They do not contain your portfolio. You can turn this sharing off in your device settings at any time.
Pro is bought through the App Store or Google Play. Apple or Google handles the payment, and we never see your card details, your name or your Apple or Google account. The app checks your subscription status with the store directly from your phone. From Apple and Google we receive only aggregated sales reports, such as the number of subscriptions per country, and these do not identify you. You can manage or cancel your subscription in your device’s subscription settings.
If you email support@portfolioonfire.com, we receive your email address and whatever you write. We use it only to reply. We do not add you to a mailing list, because there isn’t one. If you ask us to delete your emails, we will.
portfolioonfire.com sets no cookies and loads no analytics, tracking pixels, third-party fonts or third-party scripts. Everything on it is served from this domain. Like any web server, our hosting provider keeps standard access logs (IP address, the page requested, the time and the browser type) for security and for keeping the site running. We do not use those logs to identify visitors.
Because your portfolio lives on your device, you do not need to ask us to see it, correct it or remove it. You can do all of that yourself:
Keep a backup. Uninstalling the app or clearing its data permanently deletes your portfolio from the device. In the web version, clearing your browser’s site data does the same. Without Pro backup, a JSON export is the only copy, and we have no copy to restore from.
Under data protection law, including the GDPR, you have the right to access, correct or delete any personal data we hold about you. In practice that is only emails you have sent us. Email us to use those rights. You can also complain to the data protection authority in your country.
The app is not intended for children under 13. It collects nothing that identifies anyone, child or adult. If you think a child has emailed us personal information, let us know and we will delete it.
If this policy changes, we will update this page and the date at the top. The core design is no account, no analytics and no backend of ours, and it is not up for change.
Questions about this policy or about how the app handles data: email support@portfolioonfire.com. It goes to a person, not a ticketing queue.