Effective Date: 21 March 2026
Last Updated: 7 November 2026
costonks ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our mobile and web application ("the App"). By accessing or using the App, you agree to this Privacy Policy.
When you create an account and use the App, you provide:
Legal Basis: Performance of contract (necessary to provide the App's services) and consent (where you voluntarily provide optional information like bio).
When you use the App, we automatically collect:
Legal Basis: Legitimate interests (to improve app functionality, fix bugs, understand user behavior, and enhance user experience).
If you choose to sign in via Google or Apple, we receive basic profile information (name, email) from these providers in accordance with their terms of service.
We use your personal data for the following purposes:
We do NOT sell your personal data to third parties.
No tracking or advertising: The App shows no ads and does not use your device's advertising identifier. We do not share your data with data brokers or advertisers, and we do not track you across other companies' apps or websites.
We use the following third-party services to operate the App:
| Service | Purpose | Data Processed |
|---|---|---|
| Firebase Authentication | User login and account management | Email, name, authentication tokens |
| Cloud Firestore | Database storage | Profiles, communities, posts, comments and watchlists |
| Firebase Data Connect (Cloud SQL) | Portfolio and market data storage | Portfolios, transaction records and portfolio performance data |
| Firebase Storage | Image and file hosting | User-uploaded images (profile pictures, post images) |
| Firebase Analytics | App usage analytics and improvement | Usage events, app-instance identifier, device info |
| Umami | Website analytics (costonks.com) | Anonymised page views and referrers — no cookies, no personal data |
| Firebase Crashlytics | Crash reporting and error tracking | Crash logs, diagnostic data, installation identifier, device info, app version |
| Firebase App Check | Protecting our backend against abuse | Device attestation tokens (App Attest, Play Integrity, reCAPTCHA) |
| Typesense | Search functionality | Limited user data required for search indexing (e.g. usernames, stock symbols) |
| Yahoo Finance | Stock market data (prices, dividends, splits) | None — market data is retrieved by our servers; no personal data is shared |
| Google Sign-In / Apple Sign-In | Third-party authentication | Name, email from your Google/Apple account |
These services are provided by Google LLC (Firebase, Google Sign-In), Apple Inc. (Apple Sign-In), Typesense Inc. (search), and Umami Software Inc. (website analytics). Umami collects no personal data and sets no cookies. Other providers may process data outside the European Economic Area (EEA) and comply with GDPR through standard contractual clauses and privacy frameworks.
Your data is stored on Google Cloud Platform (Firebase) servers, which may be located in the United States or other regions. Google complies with GDPR requirements for international data transfers.
If you are located in the European Union, you have the following rights:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete personal data through your account settings or by contacting us.
Request deletion of your personal data by deleting your account or contacting us at hello@costonks.com.
Request that we limit how we use your personal data in certain circumstances.
Receive your personal data in a structured, machine-readable format (e.g., JSON export of your portfolio data).
Object to processing based on legitimate interests. You can disable Firebase Analytics tracking by contacting us.
Where processing is based on consent (e.g., optional bio), you can withdraw consent at any time without affecting prior processing.
You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
To exercise these rights, contact us at: hello@costonks.com
We implement industry-standard security measures to protect your data, including:
However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
The web version of the App uses cookies and similar technologies for:
You can manage cookie preferences in your browser settings, but disabling essential cookies may limit app functionality.
The iOS and Android apps do not use cookies. Instead, they use the identifiers described in section 1.2.
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure such transfers comply with GDPR through:
The App is only intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we discover that someone under 18 has provided personal data, we will delete it immediately.
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
Continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: hello@costonks.com
Data Controller: Shacklebolt BV, maker of costonks · KBO 1039002038
For EU users, you may contact your local data protection authority. For Belgium:
Gegevensbeschermingsautoriteit (GBA)
Website: www.gegevensbeschermingsautoriteit.be