Privacy statement
Last updated: 23 September 2026. Controller: Buddy's Digital Factory, reachable at hallo@buddyprintables.nl. Legal basis: performance of the service you request yourself (an account) and, for abuse protection, legitimate interest.
What stays on your own device
Your API keys for investment platforms are stored only on your own computer or phone. They are never sent to this server, not even if you have an account.
For prices, annual figures and fund contents the app asks this server for data on the securities and coins you hold: only the tickers, without quantities, amounts or names. The server fetches that data from public sources and doesn't remember who asked what.
What the server stores if you create an account
- Your email address and an encrypted (hashed) version of your password; the password itself is never stored.
- When signing in with Google: your email address and your Google user ID, to recognise your account. We don't request any other Google data.
- Sign-in sessions (at most thirty days) and the name of the device.
- If you use Pro: until when you have Pro and why (trial period or subscription). For a purchase via Google Play only a checksum of the purchase token; only Google sees your payment details.
- If you switch on sync: an encrypted block with your settings and targets, your history (your totals per measurement), your deposits, withdrawals and dividends and your status colours. It is encrypted on your device with a phrase only you know; the server can't read it. Your API keys are not in it.
- Your IP address, only to stop too many sign-in attempts: for at most a quarter of an hour, solely in the server's working memory, never in a file or log.
For what and for how long
Solely to let you sign in and to restore your settings and history on a second device. Data is kept until you delete your account; you can do that in the app under Account, and then everything on the server is gone immediately.
Questions in the app (support chat)
If you ask a question in the app, the server keeps that conversation: your messages, the answers and an identifier of your device that the app makes up itself; your email address only if you are signed in. To give you an answer right away, your question goes to Claude by Anthropic (United States), which answers it using the app's help texts and translates messages in another language. Anthropic does not use that data to train its models and keeps it only briefly, for abuse monitoring. If you choose to send your question to the maker, it goes to him via Telegram. Do not put passwords or API keys in it.
Automatic connection via SnapTrade
If you choose automatic connection for a broker without its own connection (such as DEGIRO, eToro or BUX), you sign in on the screen of SnapTrade (Passiv Inc., Canada). Your login details for that broker go to SnapTrade, not to this app and not to the server. SnapTrade uses them only to read your accounts, positions and balances; the connection is requested as 'read only'. The server keeps only a SnapTrade connection number with your account; your positions pass through the server to the app and are not stored there. If you delete your account, your user at SnapTrade is deleted too; you can also disconnect separately in the app.
Who else is involved
The server runs at Contabo (Germany, within the EU). Emails for resetting your password are sent via Brevo (France, EU); Brevo sees your email address for that purpose. If you choose to sign in with Google, Google processes that sign-in under its own privacy policy; we only receive your email address and a user ID. Prices, annual figures and fund contents come from public sources (Yahoo Finance, CoinGecko, TradingView and the fund issuers themselves); no personal data goes to them. We don't sell or share data, use no cookies and show no ads.
Your rights
You can access, correct, take away or delete your data. You delete it yourself in the app under Account; you retrieve the encrypted settings block with the app itself (that's taking it away). For everything else, email hallo@buddyprintables.nl; we respond within a month. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).