Last updated 2 September 2026
The short version
StockHealth has no analytics, no advertising and no third-party trackers of any kind. You can use the whole heatmap without an account. If you do sign in, we store your email, the lists you build and whether you are subscribed — nothing else. We have never sold data and the app contains no code that could.
Who we are
StockHealth is provided by HotnSpicy.Pro LLC. Questions about this policy, or about your data, can be sent to hotnspicy.pro@gmail.com and we will answer.
Using the app without an account
Browsing the heatmap requires no account and no sign-in. In that state the app sends no personal information anywhere. It requests market data — prices and company reference information — which is identical for every visitor and is not tied to you.
What we collect when you sign in
Signing in is optional and only unlocks watchlists and favorites. You can sign in with Google, with Apple, or with an email address and password. Either way we receive and store:
•
Your email address, and the display name and profile picture your provider chooses to share. Apple users who choose Hide My Email give us only the relay address, which works exactly as well.
•
A random account identifier we generate for you.
•
Which provider you used, so the app can say “via Google” on your account card.
•
The watchlists and favorites you create — a list of ticker symbols and the names you give them.
•
Whether you have an active subscription, when it expires, and an identifier from our payments processor.
We never receive your Google or Apple password. Sign-in happens on their systems, and we only receive the result. If you sign in with an email address and password instead, the password is hashed by our authentication provider and is never stored in a form anyone here can read.
What stays on your device
Your color palette, layout, sort order and the board you last viewed are stored on your own device and never sent to us. Your login session is held in your device’s secure storage so you are not asked to sign in every time.
What we do not do
•
No analytics or usage tracking. The app contains no analytics SDK, so we cannot see which screens you open or how long you spend in the app.
•
No advertising, no ad identifiers, and no data brokers.
•
No crash-reporting SDK, and no session recording.
•
No selling, renting or sharing of personal information for advertising.
•
No location, contacts, camera, microphone, photo or health access. The app never asks, because it never needs to.
•
No tracking you across other apps or websites.
Who else processes your data
We keep this list short on purpose. These companies process data on our behalf so the app can work; none of them are given data for their own marketing.
•
Supabase — hosts our database and handles sign-in. Your account and lists live here, on servers in the United States.
•
Vercel — serves the web version of the app.
•
RevenueCat — manages subscription status. It receives your account identifier and your purchase state, not your email.
•
Apple and Google — only when you choose to sign in with them, and only to authenticate you.
•
Apple and Google also process payment for subscriptions bought in the mobile apps. We never see your card details.
Our market data providers — Alpaca, CoinGecko, the SEC and Nasdaq — learn nothing about you. Prices are fetched on a schedule for entire indices at once by our server, never as a request made on your behalf, so there is nothing in those requests to identify you.
Why we are allowed to hold it
We process your account details and lists to provide a service you asked for — that is, to perform our contract with you. Where local law requires consent instead, signing in is that consent, and you can withdraw it at any time by deleting your account.
How long we keep it
For as long as your account exists. Delete the account and your profile, watchlists and favorites are removed from our database immediately — deletion cascades, so nothing is left orphaned. Backups roll off within 30 days. Records of purchases may be retained longer where tax or accounting law requires it.
Deleting your account
Open Settings and choose Delete account. It is immediate and needs no email to us. If you would rather we did it, or you can no longer sign in, write to us and we will.
Your rights
Depending on where you live you may have the right to access, correct, export or erase your personal information, to object to processing, and to complain to your data protection authority. Deletion is built into the app; for anything else email us and we will respond within 30 days. We will not charge you or degrade the service for asking.
Security
Traffic is encrypted in transit. Database access rules are enforced by the database itself rather than by the app, so one account cannot read another’s lists even if the app were wrong. Subscription status can only be written by our payment processor’s verified webhook, never by a client. No system is perfect, and we will not pretend otherwise.
Children
StockHealth is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.
International transfers
Our servers are in the United States. If you use the app from elsewhere, your information is transferred and processed there.
Changes
If this policy changes materially we will update the date at the top and, for anything significant, tell you in the app before it takes effect.
Contact
hotnspicy.pro@gmail.com ↗