BullionTally Privacy Policy

Overview

BullionTally is a precious metals portfolio tracker designed with privacy at its core. We believe your financial data belongs to you — not to advertisers, data brokers, or governments. This policy explains exactly what data we collect, why, and how it is handled.

Data Storage

Offline Mode (No Account)

When you use BullionTally without an account, all of your data stays on your device. Your portfolio holdings, purchase prices, transaction history, and personal preferences are stored locally in a private SQLite database on your phone. We cannot see, access, or retrieve this data. If you uninstall the app or lose your device without exporting a backup, your data is gone permanently — we have no copy.

Account Mode (Optional)

If you choose to create an account, the following data is transmitted to and stored on our servers:

• Account information: Your first name, email address, and a securely hashed version of your password. We never store your password in plain text.
• Portfolio data: Your holdings, purchase prices, quantities, and transaction dates are encrypted and synced to our servers to enable cross-device access and automatic backup.
• Last name (if provided): This is optional and only stored if you choose to enter it.

Your synced data is encrypted in transit (TLS 1.3) and at rest (AES-256). We do not sell, share, or provide your portfolio data to any third party under any circumstances.

Data We Collect

From All Users

• Anonymized analytics: We use Firebase Analytics to understand how the app is used in aggregate (e.g., which screens are visited most, crash reports). These analytics do not include your portfolio data, account details, or any personally identifiable information.
• Device information: Operating system version, device model, and screen size for debugging and compatibility purposes.
• Advertising data: If you are on the free tier, Google AdMob displays advertisements. AdMob may collect device identifiers and ad interaction data in accordance with Google's privacy policy. Pro subscribers do not see ads and no ad-related data is collected.
• TikTok analytics (Android only): We use the TikTok Business SDK to measure the effectiveness of our advertising campaigns. This SDK may collect device-level identifiers. It does not have access to your portfolio data.

From Account Users Only

• Email address: Used for authentication and password reset. We will never send you marketing emails unless you explicitly opt in.
• Profile name: Used to personalize your in-app experience (greetings, account display).

Data We Do NOT Collect

• We do not collect your physical location or GPS data.
• We do not access your contacts, photos, camera, or microphone.
• We do not track your browsing activity outside the app.
• We do not sell or share your personal data with third parties for marketing purposes.
• We do not collect or store bank details, credit card numbers, or other payment information (subscriptions are processed entirely through Apple App Store or Google Play).

Third-Party Services

BullionTally integrates with the following third-party services:

Data Retention

• Offline users: Data exists only on your device. We retain nothing.
• Account users: Your account and synced data are retained as long as your account is active. If you delete your account, all associated data is permanently removed from our servers within 30 days.
• Analytics data: Anonymized analytics are retained for up to 14 months, in line with Firebase's default retention policy.

Your Rights

You have the right to:

• Access your data at any time through the app's export functionality (CSV/Excel).
• Delete your account and all associated server-side data through the Settings screen.
• Opt out of an account entirely and use the app in fully offline mode.
• Export your complete portfolio data at any time, free of charge.
• Request a copy of your stored data by contacting us at the email below.

GDPR (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to rectification, and the right to lodge a complaint with a supervisory authority.

CCPA (California Users)

If you are a California resident, you have the right to know what personal information we collect and to request its deletion. We do not sell personal information.

Children's Privacy

BullionTally is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Security

We implement industry-standard security measures including:

• TLS 1.3 for all data in transit
• AES-256 encryption for data at rest
• Secure password hashing (bcrypt)
• Secure token storage on device (iOS Keychain / Android Keystore)
• Regular security audits

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify you through an in-app notice.

Contact Us

If you have any questions about this privacy policy or your data, please contact us:

Email: [email protected]

Developer: HMS Operations Ltd