Last updated 1 August 2026
The short version: we collect as little as possible, we don't sell your data, and there are no ads. The app itself carries no third-party analytics or tracking SDKs. Our website uses Google Analytics to count visits: see section 7. But StockChat is not end-to-end encrypted — read section 4 before you post anything you'd consider sensitive.
StockChat is an iOS group-chat app for discussing stocks, operated from the United States. Questions: support@stockchat.io.
We do not collect your contacts, location, browsing activity, advertising identifiers, or brokerage or financial-account credentials. The app contains no third-party analytics or advertising SDKs. Our website is separate and does use Google Analytics: see section 7.
Message text is encrypted with a key shared by your group, both while stored and while being delivered as a notification. That means the notification infrastructure can't read your messages.
However, StockChat is not end-to-end encrypted. The encryption key is stored in iCloud alongside your data, so Apple could technically access message content, and we retain the ability to read reported content in order to act on abuse reports. Please treat StockChat as a private group chat, not as a secure or confidential channel. Don't send anything you wouldn't want reviewed — no account numbers, passwords, government identifiers, or non-public material information.
When you ask the in-app AI a question, that question and relevant surrounding conversation context are sent to Google's Gemini API to generate the answer. Google processes it as our service provider and, under our API terms, does not use it to train its models. Don't put sensitive personal information into an AI question.
Price and company information is fetched from third-party market-data providers. Those requests reveal which tickers are being looked up, but are not tied to your name or profile.
This section covers the website only. It does not apply to the app, which contains no analytics SDK.
We use Google Analytics 4 to understand how many people visit stockchat.io and which pages they read. It sets cookies in your browser (named _ga and _ga_*, which last up to two years) and sends Google the page you viewed, the site or channel you arrived from, and basic device and browser information. Google uses your IP address to derive an approximate location and does not log or store the address itself. We do not use Google Analytics for advertising or remarketing, and we have not linked it to any Google Ads account. Google processes this in the United States. Reports are retained for 14 months.
The invite page is not tracked. Group invite links are capability links: whoever holds one can join that group. So stockchat.io/join, the page that handles them, carries no analytics at all. This is a deliberate exception, not an oversight.
To opt out: analytics is not required for anything on the site to work, so you can block google-analytics.com or googletagmanager.com with a content blocker, or use your browser's tracking protection. Note that two commonly suggested measures are weaker than they sound. Blocking cookies alone stops you being recognised across visits but does not stop the visit being counted, and Google's Analytics Opt-out Add-on is a desktop browser extension that does not work on iPhone or iPad.
We do not sell your data and we don't share it for advertising. We share only with the service providers we use to run StockChat — Apple (iCloud, push delivery), Amazon Web Services (hosting, push), Google (the AI features, and website analytics as described in section 7, which is measurement rather than something the app needs to function), and market-data providers — and with other members of groups you join, who can see everything you post there. We may also disclose information if legally required, or where necessary to investigate abuse or protect someone's safety. We report suspected child sexual abuse material to the National Center for Missing & Exploited Children, as US law requires.
Messages and groups persist until deleted by you or another member with permission to do so. Push tokens are removed when they stop working or you disable notifications. Note that messages you sent to a group may remain visible to other members even after you leave or delete your account, because a copy exists in that shared group.
Depending on where you live, you may have additional rights over your personal data (for example under the CCPA or GDPR), including access, correction, deletion, and the right not to be discriminated against for exercising them. Email us and we'll honour any valid request.
StockChat is not intended for children under 13 and we don't knowingly collect their data. If you believe a child under 13 is using the app, email us and we'll delete the account.
If we make a material change to this policy we'll update the date above and notify you in the app.