1. Scope and Data Controller
This Privacy Policy applies to LiteFolio (the “App”), provided by BitFlap LLC (“BitFlap,” “we,” “us,” or “our”). BitFlap LLC is responsible for the processing described in this policy.
LiteFolio is a manual investment portfolio ledger. It does not connect to brokerage accounts and does not require brokerage credentials.
2. Information We Process
2.1 Portfolio records you enter
The App processes information that you choose to record, which may include:
- Portfolio names, base currency and display settings
- Account names, account types, currencies and optional tax settings
- Asset names, symbols, asset types, sectors, custom lists and notes
- Holdings, quantities, purchase prices, average cost and cost basis
- Buy and sell events, dividends, deposits, withdrawals, fees, stock splits, tax entries, dates and memos
- Derived information such as holdings, cash balance, performance, allocation and expected dividend figures
Investment records can be sensitive. They are stored locally by default and are sent to our cloud service only when you enable cloud sync as described below.
2.2 Account and profile information
You do not need an account for the App’s local features. If you sign in for cloud sync or account features, we may receive a provider-specific user identifier, email address, and any name or profile image you choose to make available through Google Sign-In or Sign in with Apple.
2.3 Subscription and purchase information
If you purchase LiteFolio Pro, we process product, entitlement, purchase status and transaction-verification information needed to provide and restore the subscription. Apple or Google processes your payment method; we do not receive your full payment-card number.
2.4 Technical and analytics information
The App may automatically process:
- A randomly generated anonymous analytics identifier stored on your device
- App identifier, platform, app version, build number and device-language setting
- Limited usage events, such as app opens, and information needed to diagnose service failures
- A device-specific sync identifier when cloud sync is configured
- Your account user identifier together with analytics events when you are signed in
- On iOS, your tracking-permission status. Any access to an advertising identifier is subject to the permission you choose in the system prompt.
We do not use the contents of your investment records for advertising, and we do not sell personal information.
2.5 Support communications
If you contact us, we process the contact details, message contents and diagnostic information you choose to provide so we can respond.
3. Information the App Does Not Require
LiteFolio does not require or directly collect:
- Brokerage usernames, passwords or account-connection tokens
- Payment-card numbers
- Precise location, contacts, microphone recordings or health information
- Authority to place, modify or cancel investment trades
4. How We Use Information
We use information to:
- Provide portfolio recording, calculation, timeline, holdings, performance, allocation and dividend features
- Store records locally and, when you choose it, synchronize them across your devices
- Authenticate accounts and protect account and sync security
- Process, verify and restore Pro subscriptions
- Maintain the App, understand basic usage, prevent abuse and improve reliability
- Respond to support requests and comply with legal obligations
5. Local Storage and Optional Cloud Sync
5.1 Local-first storage
Portfolio records are stored on your device first. Local features are designed to work without signing in and without a continuous internet connection.
5.2 Cloud sync
Cloud sync is an optional Pro feature. If you sign in and enable it, relevant portfolio, account, asset, classification and investment-event records are transmitted to and stored by our service so they can be synchronized across your devices. Communications with the service use encrypted HTTPS connections.
If cloud sync is not enabled, the App does not upload your portfolio records for synchronization. Basic analytics and subscription checks may still communicate with our service as described in this policy.
6. Service Providers and Disclosure
We may disclose information only as needed in the following circumstances:
- Authentication: Google and Apple process information when you choose their sign-in services.
- Payments: Apple App Store and Google Play process purchases, renewals, cancellations and payment information.
- Infrastructure: Hosting, storage, security, analytics and other technical providers process data on our behalf to operate the App and cloud service.
- Legal and safety: We may disclose information where required by law or reasonably necessary to protect rights, safety and service integrity.
- Business changes: Information may be transferred as part of a merger, acquisition, reorganization or similar transaction, subject to applicable law.
For provider practices, see Google’s Privacy Policy and Apple’s Privacy Policy.
7. Retention, Deletion and Your Choices
- Individual records: You can edit or delete records within the App.
- Reset all data: The in-app reset removes local App data and, when cloud sync is enabled and the service is reachable, requests deletion of the associated synced portfolio data.
- Account deletion: You can request account deletion from the account screen in the App. You may also contact us if you cannot access the App.
- Uninstall: Uninstalling removes local App data from that device, but does not by itself delete cloud data, delete your account or cancel a subscription.
- Analytics and support: We retain technical and support information only for as long as reasonably necessary for the purposes described here, legal obligations, security and dispute resolution.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection or a copy of personal information. Contact us to exercise an applicable right. We may need to verify your request.
8. Security
We use reasonable technical and organizational safeguards, including encrypted network communication, authentication tokens and access controls. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
9. International Processing
Our service providers may process information in countries other than your own. Where required, we use appropriate contractual or other safeguards for international transfers.
10. Children’s Privacy
The App is not directed to children under 13 or the minimum age required to consent to data processing in their jurisdiction. We do not knowingly collect personal information from children below that age.
11. Changes to This Policy
We may update this policy as the App or applicable requirements change. We will post the revised policy on this page and update the date above. Where required, we will provide additional notice in the App.
12. Contact Us
For privacy questions or requests, contact:
BitFlap LLC
Email: support@bitflap.app
Web: https://bitflap.app/contact/