Who we are
The InvestorBytes app is published by Veltro Solutions ("we", "us") on Google Play and the App Store. It tracks Pakistan Stock Exchange prices, lets you keep a record of the shares you hold, and sends price alerts. It is not a brokerage: it does not place orders, hold money or connect to your brokerage account.
This policy covers the app only. The investorbytes.com news website has its own privacy policy.
What we collect
| Data | Where it comes from and why |
|---|---|
| Name | You enter it when you sign up, or Apple/Google shares it when you sign in with them. Shown in the app and used in emails to you. |
| Email address | Your login. We send your verification code, password-reset codes and a welcome email to it. |
| Mobile number | Asked for at sign-up so your account has a contact number. We do not send SMS or verify it by text. |
| Password | Stored only as a one-way hash. We cannot see it. Accounts made with Google or Apple sign-in have no password until you set one. |
| Google or Apple sign-in | If you choose it, we receive a signed token that confirms your email (and name, if you allow it) and an account identifier. We never see your Google or Apple password. |
| Portfolio and transactions | The shares, buys, sells and dividends you enter yourself, plus your tax filer status and fee rate if you set them. Used to value your holdings and build your reports. |
| Watchlists and price alerts | The stocks you follow and the price levels you set, so they sync to your account and the alerts can fire. |
| Push notification token | A token from your phone and its type (Android or iOS), so we can deliver the alerts you set. It identifies the app install, not you personally. |
What we don't collect
- No location, contacts, photos, camera, microphone or SMS access.
- No advertising IDs, no ads and no ad networks.
- No analytics or tracking SDKs, and no selling or renting of your data.
- No bank, card or brokerage details. The app takes no payments.
How we use it
- To create and secure your account, and to let you log in.
- To show and sync your portfolio, watchlists and alerts across your devices.
- To send account emails (verification, password reset, welcome) and the push notifications you ask for.
- To answer you when you write to support.
- To keep the service safe and investigate misuse or errors.
We don't use your data for advertising, and we don't share it with anyone for their own purposes.
Service providers
A few companies process data on our behalf, only to run the app:
| Provider | What they do |
|---|---|
| Hetzner Online | Hosts our servers and database in Germany (EU). |
| Resend | Delivers our account emails (codes and welcome email). |
| Google Firebase Cloud Messaging and Apple Push Notification service | Deliver push notifications to your phone. |
| Google and Apple | Confirm your identity when you choose to sign in with them. |
Market prices and news in the app come from public sources. We send them your requests for data, never your personal details.
We may disclose data if the law requires it, for example a valid court order.
Security
All traffic between the app and our servers is encrypted with HTTPS. Passwords and emailed codes are stored as one-way hashes, codes expire quickly and have limited attempts. Access to the servers is restricted to the staff who run them.
Retention and deletion
We keep your data while your account is open. You can delete your account at any time in the app: Settings → Delete account. That removes your account and everything linked to it straight away. If you can't use the app, email us and we'll do it for you.
Full steps, and what is deleted or kept, are on the Delete your account page.
Your choices
- See and edit: your name and mobile number are in Settings; your portfolio, watchlists and alerts can be edited or deleted one by one.
- Notifications: turn them off in your phone's settings for InvestorBytes at any time.
- Copy or delete: email us for a copy of your data or to delete it.
Children
The app is meant for adults (18+) and is not directed at children. If you think a child has made an account, email us and we will delete it.
Changes
If we change this policy we'll update the date at the top, and tell you in the app if the change is significant.
Contact
Questions or requests: [email protected]