Privacy Policy

Last Updated: May 1, 2026

This Privacy Policy describes how Boursati ("we," "us," or "the App") collects, uses, and protects your personal information when you use the Boursati (بورصتي) mobile application. By using the App, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Account Data

When you create an account, we collect the following through our authentication provider, Clerk:

• Email address
• Display name
• Profile photo (optional)
• Internal account identifier

You may sign in using your email address or Apple Sign-In. Clerk processes the account information required for authentication, such as your email address and account identifier.

1.2 Portfolio Data

We store data that you manually enter into the App, including:

• Stock positions (ticker symbols and names)
• Share quantities and average purchase prices
• Cash balance
• Watchlist selections
• Price alert configurations
• Transaction history

This data is user-entered. We do not import data from brokerage accounts, bank accounts, or any external financial institution.

1.3 Notification Data

If you enable push notifications, we store your Apple Push Notification service (APNs) device token and notification preferences so we can deliver disclosure, price alert, and market summary notifications. Device tokens are used only for notification delivery and are removed when you sign out, delete your account, or unregister the device.

1.4 Usage Analytics

We collect usage analytics through PostHog, including:

• Page views and screen navigation
• Button clicks and feature interactions
• Feedback and settings interactions
• Session duration

This data may be associated with an internal account identifier so we can understand feature usage and troubleshoot account-specific issues. We do not send your email address to PostHog, and we do not use analytics data to track you across other companies' apps or websites.

1.5 Crash and Performance Reports

We collect crash, error, and limited performance reports through Sentry, which may include:

• Device type and model
• Operating system version
• Application stack traces
• Performance diagnostics such as launch time or slow operations

Crash and performance reports may be associated with an internal account identifier to help diagnose account-specific issues. We do not send your email address to Sentry, and screenshots are not attached to crash reports.

1.6 AI-Processed Market Data

To generate Arabic-language market summaries, aggregated market data (stock prices, price changes, and sector performance data) is sent to Groq, a third-party AI processing provider based in the United States. No user personal data is sent to the AI service — only publicly available, aggregated stock market information.

1.7 Market Data

The App retrieves publicly available market data from Boursa Kuwait and Yahoo Finance, including stock prices, fundamentals, and corporate disclosures. This is public data and is not considered user data.

1.8 Information We Do NOT Collect

• Location data
• Contacts or address book
• Photos or media (beyond the optional Clerk profile photo)
• Health or fitness data
• Financial account credentials (no bank or brokerage linking)
• Browsing cookies (the App is a native mobile application)
• Advertising identifiers (no advertising SDKs are used)

2. How We Use Your Information

We use the information collected for the following purposes:

• Providing the Service: To authenticate your account, store and display your portfolio, watchlist, alerts, and transaction history.
• Market Data Display: To retrieve and present stock prices, fundamentals, and disclosures from public data sources.
• AI Market Summaries: To generate Arabic-language summaries of market activity using aggregated, non-personal market data.
• Analytics: To understand how users interact with the App so we can improve features, performance, and user experience.
• Crash and Performance Reporting: To identify and fix bugs, errors, crashes, and performance issues in the App.
• Notifications: To deliver notifications that you enable in the App.
• Communication: To respond to support requests sent to our contact email.

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

3. Third-Party Service Providers

We use the following third-party service providers to operate the App. Each provider processes data in accordance with its own privacy policy:

• Clerk (Authentication) — Handles user registration, login, and session management. Processes email addresses, display names, and profile photos. Clerk Privacy Policy
• Supabase (Database & Backend) — Stores portfolio data, user preferences, and application data. Servers located in Frankfurt, Germany. Supabase Privacy Policy
• Groq (AI Processing) — Processes aggregated market data to generate Arabic market summaries. Servers located in the United States. No personal user data is sent to Groq. Groq Privacy Policy
• PostHog (Analytics) — Collects product usage analytics linked to an internal account identifier, without email addresses and without cross-app tracking. PostHog Privacy Policy
• Sentry (Crash & Performance Reporting) — Collects crash reports, error logs, and limited performance diagnostics that may be linked to an internal account identifier for debugging. Sentry Privacy Policy
• Boursa Kuwait (Market Data) — Public stock market data source.
• Yahoo Finance (Market Data) — Public financial data source.

Note: Your data may be processed in jurisdictions outside of Kuwait, including Germany (Supabase), the United States (Groq, PostHog, Sentry, Clerk), and other locations where our service providers maintain infrastructure. By using the App, you consent to the transfer and processing of your data in these jurisdictions.

4. Data Retention

• Account and Portfolio Data: Retained for as long as your account is active. Upon account deletion, all associated data is permanently deleted within 30 days.
• Notification Device Tokens: Retained while notifications are enabled for your account or until you sign out, delete your account, or unregister the device.
• Usage Analytics: Retained for 90 days, after which they are automatically purged.
• Crash and Performance Reports: Retained for 30 days, after which they are automatically purged.

5. Data Security

We implement the following security measures to protect your data:

• All data transmitted between the App and our servers is encrypted in transit using HTTPS/TLS.
• Database access is restricted to authorized systems and support processes, with additional application-level protections added for sensitive portfolio fields as they are rolled out.
• Authentication is managed by Clerk, a dedicated identity provider with industry-standard security practices.
• No server-side secrets or private credentials are stored in client-side code. Public client identifiers may be included when required by service providers.
• Database access is restricted through Row-Level Security (RLS) policies, ensuring users can only access their own data.

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the following rights regarding your personal data:

• Access and Export: You may request a copy of all personal data we hold about you by contacting support@boursati.app.
• Deletion: You may request the deletion of your account and all associated data by contacting support@boursati.app. You may also delete your account directly within the App.
• Opt-Out of Analytics: You may request to opt out of usage analytics by contacting support@boursati.app.
• Correction: You may update your display name and profile photo directly in the App. For other corrections, contact support@boursati.app.

We will respond to all data requests within 30 days.

7. Children's Privacy

Boursati is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at support@boursati.app.

8. International Data Transfers

Your data may be transferred to and processed in countries outside Kuwait, including:

• Germany (Frankfurt): Application database (Supabase)
• United States: AI processing (Groq), analytics (PostHog), crash reporting (Sentry), authentication (Clerk)

These transfers are necessary to provide the service. Each third-party provider processes data in accordance with its own privacy policy and applicable data protection regulations. By using the App, you acknowledge and consent to these international data transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

For material changes that significantly affect your rights, we will make reasonable efforts to notify you through the App or via email.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@boursati.app
Website: boursati.app