Last updated 6 October 2026
The short version: we collect as little as possible, we don't sell your data, and there are no ads. The app itself carries no third-party analytics or tracking SDKs. Our website uses Google Analytics to count visits: see section 7. Your messages are encrypted in transit and while stored — section 4 explains how.
StockChat is a group-chat app for discussing stocks, on iPhone and Android, operated from the United States. Questions: support@stockchat.io.
We do not collect your contacts, location, browsing activity, advertising identifiers, or brokerage or financial-account credentials. The app contains no third-party analytics or advertising SDKs. Our website is separate and does use Google Analytics: see section 7.
Your messages and data are encrypted while they travel between the app and our servers (TLS), and while they're stored on our servers and in their backups.
The encryption keys are managed by StockChat and our hosting provider rather than kept only on your devices, which lets our servers deliver notifications and run features like the AI assistant. We don't read your conversations; when someone reports a message, we review it so we can act on abuse. As with any group chat, avoid sharing account numbers, passwords, government IDs, or non-public material information.
When you ask the in-app AI a question, that question and relevant surrounding conversation context are sent to Google's Gemini API to generate the answer. Google processes it as our service provider and, under our API terms, does not use it to train its models. Don't put sensitive personal information into an AI question.
Price and company information is fetched from third-party market-data providers. Those requests reveal which tickers are being looked up, but are not tied to your name or profile.
This section covers the website only. It does not apply to the app, which contains no analytics SDK.
We use Google Analytics 4 to understand how many people visit stockchat.io and which pages they read. It sets cookies in your browser (named _ga and _ga_*, which last up to two years) and sends Google the page you viewed, the site or channel you arrived from, and basic device and browser information. Google uses your IP address to derive an approximate location and does not log or store the address itself. We do not use Google Analytics for advertising or remarketing, and we have not linked it to any Google Ads account. Google processes this in the United States. Reports are retained for 14 months.
The invite page is not tracked. Group invite links are capability links: whoever holds one can join that group. So stockchat.io/join, the page that handles them, carries no analytics at all. This is a deliberate exception, not an oversight.
To opt out: analytics is not required for anything on the site to work, so you can block google-analytics.com or googletagmanager.com with a content blocker, or use your browser's tracking protection. Note that two commonly suggested measures are weaker than they sound. Blocking cookies alone stops you being recognised across visits but does not stop the visit being counted, and Google's Analytics Opt-out Add-on is a desktop browser extension that does not work on iPhone or iPad.
We do not sell your data and we don't share it for advertising. We share only with the service providers we use to run StockChat: Apple (Sign in with Apple, iCloud, iPhone push delivery), Amazon Web Services (hosting, storage, push), Google (Google sign-in, Android push delivery through Firebase Cloud Messaging, the AI features, and website analytics as described in section 7, which is measurement rather than something the app needs to function), and market-data providers. We also share with other members of groups you join, who can see everything you post there. We may also disclose information if legally required, or where necessary to investigate abuse or protect someone's safety. We report suspected child sexual abuse material to the National Center for Missing & Exploited Children, as US law requires.
Your account and profile are kept until you delete your account. Messages and groups persist until deleted by you or another member with permission to do so. Push tokens are removed when they stop working, when you sign out, or when you disable notifications.
When you delete your account, we delete your profile, profile photo, lists, preferences and sign-in records, revoke StockChat's access to your Sign in with Apple account, and remove you from your groups. Messages you sent stay in their groups, shown as from "Deleted user", because they are part of a shared conversation. Deleted data can remain in our encrypted backups for up to 35 days before it is overwritten.
The link between your account and your earlier iCloud-based StockChat identifier is kept for at most 90 days after StockChat finishes moving to sign-in accounts, so that people who update late can still keep their data; after that, the earlier records are deleted.
Depending on where you live, you may have additional rights over your personal data (for example under the CCPA or GDPR), including access, correction, deletion, and the right not to be discriminated against for exercising them. Email us and we'll honour any valid request.
StockChat is not intended for children under 13 and we don't knowingly collect their data. If you believe a child under 13 is using the app, email us and we'll delete the account.
If we make a material change to this policy we'll update the date above and notify you in the app.