Stock Market Future — Privacy Policy

Introduction

This Privacy Policy describes how Stock Market Future ("we", "us", or "our") — an AI-powered stock market analysis and financial intelligence platform — collects, uses, stores, and protects your personal information when you use our application at https://smf-ai.web.app.

By using our platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please discontinue use of the application.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number (for OTP-based verification to secure your account)
• Password (stored as a cryptographic hash — we never store plain-text passwords)
• Profile photo (if provided via Google or Apple Sign-In)
• Account creation date and last login timestamp

1.2 Authentication Data

We use Firebase Authentication (Google LLC) to securely manage sign-in. When you sign in via Google or Apple, we receive basic profile information (name, email, profile picture) from those providers pursuant to OAuth 2.0. We do not receive your Google or Apple account passwords.

1.3 Usage & Telemetry Data

We automatically collect the following when you use the app:

• IP address and approximate geolocation (city, region, country)
• Browser type, version, operating system, device type, and screen resolution
• Language and timezone preferences
• Pages visited, features used, and time spent
• Access timestamps (first sign-up, most recent login)
• Referral source (how you discovered the app)

1.4 Financial Activity Data (Paper Trading Only)

We store your virtual (paper trading) portfolio data including positions, trade history, and watchlists. This is entirely simulated — we do not hold real money, execute real trades, connect to any brokerage account, or store any banking information. We are not a financial intermediary, broker, or investment advisor.

1.5 Market Data Queries

Stock symbols, mutual fund searches, and AI analysis queries you make are processed through third-party market data APIs. These queries are not personally identifiable and are not permanently linked to your profile in a way that can identify you.

1.6 Phone Verification Data

To verify your phone number, we use Firebase Phone Authentication. Your phone number is stored in your user profile solely for account security purposes. It is never used for marketing or sold to third parties.

2. How We Use Your Information

• To create and securely manage your account
• To verify your phone number and prevent duplicate or fraudulent accounts
• To personalize your experience (currency preference, watchlist, portfolio)
• To detect and prevent unauthorized access or security threats
• To display your access location history in your profile dashboard
• To send transactional SMS messages (OTP for phone verification only)
• To improve the platform using aggregated, anonymized analytics
• To comply with applicable laws and regulations (including India's DPDP Act 2023)
• To respond to your support or data-access requests

We do not use your data for: advertising, profiling for third-party marketing, automated decision-making that significantly affects you, or any purpose not listed above.

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only with the following trusted service providers necessary to operate the platform:

We may disclose your information if required by law, court order, or government authority, or if necessary to protect the rights, property, or safety of our users or the public.

4. Data Security

• All data is encrypted in transit using TLS 1.3 / HTTPS
• Passwords are hashed using Firebase's industry-standard algorithm — we never see or store plain-text passwords
• Firestore Security Rules ensure each user can only access their own data
• Phone number OTP verification adds a second authentication factor
• Firebase App Check is used to prevent unauthorized API access
• Access logs are maintained to detect and respond to security incidents

Despite our best efforts, no method of electronic transmission over the internet is 100% secure. We encourage you to use a strong password and to keep your phone number up to date.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. Upon account deletion:

• Your personal profile, portfolio, and watchlist data are permanently deleted within 30 days
• Your authentication records are removed from Firebase Authentication
• Anonymized, aggregated analytics data may be retained indefinitely as it cannot be used to identify you
• Backup copies may persist for up to 90 days before being overwritten

6. Your Rights

Depending on your jurisdiction (including under India's Digital Personal Data Protection Act 2023 and the EU's GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable, machine-readable format
• Withdraw consent to data processing at any time
• Object to processing of your personal data
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please email us at hg497kg@gmail.com. We will respond within 30 days.

7. Cookies & Local Storage

We use browser localStorage and sessionStorage to store your session preferences, authentication tokens, and demo/guest mode state. We do not use third-party advertising cookies.

Google Analytics sets cookies for anonymous traffic analysis. You may opt out at any time via:

• Your browser's cookie settings
• A browser extension like uBlock Origin
• Google's opt-out page at tools.google.com/dlpage/gaoptout

8. Children's Privacy

Stock Market Future is intended for users aged 18 and above. We do not knowingly collect personal information from minors under 18. If we become aware that a minor has created an account, we will immediately delete the account and all associated data.

If you believe a minor has used this service, please contact us immediately at hg497kg@gmail.com.

9. International Data Transfers

Our platform is primarily operated from India. Your data may be stored and processed on Google Cloud / Firebase servers located in the United States, Singapore, or other regions. By using our app, you consent to the transfer of your data to these regions. We ensure all transfers comply with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this page
• Displaying a notice in the application on your next login

Continued use of the platform after changes constitute acceptance of the updated policy.

11. Disclaimer — Not Financial Advice

12. Contact Us

For privacy-related queries, concerns, data deletion requests, or to exercise your rights:

We will respond to all privacy-related requests within 30 days.