Privacy Policy

Who we are

Finrival ("Finrival", "we", "us" or "our") is a market-information, financial-analysis, simulation, watchlist, news and AI-assisted research application.

For the purposes of applicable data-protection law, including the General Data Protection Regulation ("GDPR") where applicable, İlkim Alatan is the controller of personal data processed by Finrival, except where a third-party provider acts as an independent controller under its own terms and privacy policy.

Scope of this policy

This Privacy Policy explains how Finrival may collect, use, store, disclose and protect information when you use the Finrival mobile application, related web pages, account features, Finrival AI, market-data features, watchlists, alerts, PRO features and other services we make available.

It does not replace the privacy terms of Apple, Google or other independent third-party services that you choose to use.

Information we may collect

Depending on how you use Finrival, we may process the following categories of information.

Account and authentication

• Email address.
• Firebase authentication identifier and account status.
• Email-verification status.
• Authentication and security information needed to sign in, maintain a session, protect an account and process account deletion.
• Information you voluntarily provide when contacting support.

Watchlist, alerts and app preferences

• Assets you add to your watchlist.
• Price-alert settings, including the selected asset, alert direction and target reference price.
• App preferences and locally stored settings.
• Language and interface preferences.
• PRO entitlement or subscription status after store billing is enabled.

Finrival AI

When you use Finrival AI, we may process:

• The text you submit to Finrival AI.
• The financial asset, market, comparison or news context associated with your request.
• AI conversation or session information needed to provide the requested feature.
• Technical metadata needed for authentication, quota enforcement, abuse prevention, reliability and security.

Push notifications

If you enable notifications, we may process:

• Device push-notification tokens.
• Platform and technical information needed to deliver alerts.
• Price-alert configuration associated with your account.

You can control notification permission in your device settings.

Technical, diagnostic and security information

• Device or operating-system information.
• App version.
• IP address and approximate network information, where automatically processed by hosting, security, advertising or service providers.
• Request timestamps.
• Error, security and abuse-prevention information.
• Server logs needed to operate, protect and troubleshoot Finrival.

We do not intentionally collect precise GPS location unless a future feature clearly requests it and you grant the required permission.

Advertising and advertising consent

If advertisements are enabled for Free users, advertising providers such as Google AdMob may process information such as:

• Advertising identifiers, where permitted.
• IP address.
• Device and app information.
• Ad interaction and measurement information.
• Consent choices.
• Coarse location or other signals derived by the advertising provider, where permitted by law and platform rules.

The exact data processed by an advertising provider depends on your region, device settings, consent choices, platform permissions and the provider's own policies.

Purchases and subscriptions

Finrival does not directly collect or store your full payment-card details. If you purchase Finrival PRO, the Apple App Store or Google Play processes the transaction. Finrival may receive limited purchase or entitlement information needed to determine whether your PRO access is active, such as:

• Product or subscription identifier.
• Transaction or purchase-token information.
• Entitlement status.
• Subscription status and expiration information, where provided by the store.

How we use information

We may use information to:

• Create, authenticate and maintain user accounts.
• Verify email addresses and protect account access.
• Provide watchlists, price alerts and account-linked features.
• Provide Finrival AI responses and related context.
• Enforce Free-plan quotas and PRO entitlements.
• Deliver push notifications you request.
• Provide market, news, comparison and simulation features.
• Process and restore subscription entitlements.
• Maintain app functionality, security, fraud prevention and abuse prevention.
• Diagnose errors and improve reliability.
• Respond to support, privacy and account-deletion requests.
• Comply with legal obligations.
• Display, measure and manage advertising where advertising is enabled and legally permitted.
• Obtain and store consent choices where consent is required.

We do not use Finrival to execute real-money securities trades or to hold customer investment funds.

Legal bases for processing

Where the GDPR or similar law applies, we process personal data only where a valid legal basis is available. Depending on the context, those bases may include:

Performance of a contract or requested pre-contract steps

• Creating and maintaining your Finrival account.
• Providing account-linked features.
• Providing requested Finrival AI functionality.
• Providing watchlist, alert and PRO functionality.
• Recognising an active subscription or purchase.

Legitimate interests

Where permitted by law, limited processing may be based on legitimate interests such as security, fraud prevention, service reliability, troubleshooting, anti-abuse controls and basic service performance, where those interests do not override your rights and interests.

Consent

We rely on consent where required, including for certain advertising or personalisation activities, certain device identifiers, tracking permission, optional notifications and other processing for which the law requires consent. You may withdraw consent where applicable. Withdrawal does not affect the lawfulness of processing carried out before it.

Legal obligation

We may process or retain limited information where necessary to comply with a legal obligation, valid legal process, regulatory requirement, tax or accounting obligation, or lawful request.

Third-party service providers

Finrival relies on third-party services to operate certain features. Depending on the feature and release version, these may include:

Google Firebase

Authentication, backend infrastructure, database functionality, server-side operations, security and account-linked features.

AI service providers

Finrival uses server-side AI services to generate Finrival AI responses. Information you submit to Finrival AI, together with relevant asset, comparison or news context, may be transmitted to the AI provider as needed to generate a response.

Market-data and news providers

External market-data, crypto-data, news and related information providers. Requests may be routed through Finrival's backend and shared caches. These providers may have their own privacy practices.

Apple and Google

The Apple App Store and Google Play may process purchases, subscriptions, app distribution, device-level permissions and other platform services under their own terms and privacy policies.

Push-notification infrastructure

Apple Push Notification service, Firebase or Google messaging infrastructure, or similar platform services, may process technical information needed to deliver notifications.

Google AdMob / Google Mobile Ads

If advertising is enabled, Google and participating advertising partners may process information for ad delivery, fraud prevention, frequency capping, measurement and, where you have given any legally required consent, personalisation.

Finrival does not sell your personal data to data brokers. We disclose personal data to service providers only to the extent reasonably necessary to provide, secure, support or improve Finrival, or where disclosure is required by law.

Advertising, consent and tracking

Free versions of Finrival may contain advertising. PRO may include an ad-free experience as described on the applicable purchase screen.

Where required by law, Finrival will ask for an appropriate consent choice before using data for personalised advertising, or before using advertising identifiers or similar technologies for purposes that require consent.

For users in the European Economic Area, the United Kingdom, Switzerland or other regions with consent requirements, advertising choices may be presented through an in-app consent-management interface.

Where Apple App Tracking Transparency applies, Finrival will request the system permission before engaging in tracking that requires it.

Declining personalised-ad consent does not necessarily mean that no ads will be shown. Non-personalised or limited ads may still use limited technical information for purposes such as fraud prevention, frequency capping and aggregated measurement where permitted.

Finrival AI and your privacy

Finrival AI is an automated, AI-assisted information feature. When you submit a prompt:

• Your prompt may be sent through Finrival's backend to an AI service provider.
• Relevant market, comparison, asset or news context may be included.
• Authentication and quota information may be processed to protect the service and enforce usage limits.
• AI output may be inaccurate, incomplete or outdated.

Do not include anything in a prompt that you do not want processed in order to generate a response. Finrival does not represent that AI output is confidential professional advice.

Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, subject to legal, security and technical requirements.

• Account-linked data may be kept while your account remains active.
• Watchlist and alert data may be kept while the relevant feature or account remains active.
• Push tokens may be kept while needed to provide notifications, and may be removed when no longer valid or when the related account is deleted.
• Security and server logs may be kept for a limited period where reasonably necessary for security, fraud prevention, troubleshooting and legal compliance.
• Purchase or entitlement records may be kept as necessary to recognise purchased access, resolve billing issues, prevent fraud or comply with legal obligations.
• Data that must legally be retained may be kept for the required period.

When an account-deletion request is completed, Finrival deletes or disassociates account-linked personal data that we are not legally required or otherwise permitted to retain. Backups, logs or distributed systems may need a limited period before deleted information is fully removed from all technical copies.

Account and data deletion

You can permanently delete your Finrival account from within the app: Control Center → Account / Security → Delete Account & Data. The app may ask you to sign in again or complete other reasonable security checks first, to prevent unauthorised account removal.

You can also request deletion without reinstalling the app at finrival.com/delete-account, or by emailing support@finrival.com with the subject "Finrival Account Deletion Request". Where possible, send the request from the email address linked to your account. We may ask for reasonable verification before deleting an account.

Your privacy rights

Depending on where you live, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of personal data.
• Request restriction of certain processing.
• Object to certain processing based on legitimate interests.
• Withdraw consent where processing relies on consent.
• Request portability of certain data, where applicable.
• Lodge a complaint with an applicable data-protection authority.

These rights may be subject to legal conditions, exceptions and verification requirements. To exercise a privacy right, contact support@finrival.com. If the GDPR applies to you, you may also lodge a complaint with the supervisory authority in the EU/EEA country of your habitual residence, place of work or place of the alleged infringement.

International data transfers

Finrival and its service providers may process information in countries other than the one you live in. Where applicable law requires safeguards for international transfers, Finrival and/or its providers may rely on mechanisms recognised by that law, such as adequacy decisions, standard contractual clauses or other approved safeguards. Information about a specific provider's transfer safeguards may also be available in that provider's privacy documentation.

Security

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These may include encrypted network connections, authentication controls, access restrictions, backend security controls and service-provider security features where appropriate.

No internet transmission, software system or storage method can be guaranteed to be completely secure, so Finrival cannot promise absolute security.

Children

Finrival is not directed to children under 13. If local law requires a higher minimum age for independent consent to data processing, users below that age should use Finrival only where permitted by law and with any required parental or guardian involvement.

We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data unlawfully, contact support@finrival.com.

Sale of personal data

Finrival does not sell personal data to data brokers. Advertising providers may process data as described in this policy and according to your consent choices, platform settings and their own policies. Where applicable law treats certain advertising disclosures as a "sale", "sharing" or similar regulated activity, we will provide any legally required choice or opt-out.

Changes to this policy

We may update this Privacy Policy when Finrival, our providers, applicable law or platform requirements change. For a material update, we will change the "Last updated" date and may give additional notice where appropriate or legally required. Where fresh consent is legally required, we will ask for it rather than relying only on continued use.

Privacy contact

For privacy questions, account-deletion requests or data-rights requests: