Privacy Policy

Gentle Justie · Last updated 2 August 2026

Gentle Justie is an iOS application that shows you market analysis and, if you choose to connect them, your own financial accounts. It is operated by an individual developer, not a company. This policy explains exactly what the app collects, what it does with it, and what it will never do.

1. What the app collects

If you connect a financial account (through Plaid, SnapTrade, or Coinbase):

• Account names, types, and the last four digits of account numbers
• Account balances
• Investment positions — the symbol, quantity, value, and cost basis
• The access credential the provider issues so balances can be refreshed

If you sign in: an opaque identifier supplied by Apple. Sign in with Apple also offers your name and email address; the app requests them because Apple requires a scope to be requested, discards them on receipt, and stores neither.

General app use: a randomly generated device identifier used to keep your watchlist and to send notifications you have asked for. The identifier used for financial features is deliberately different from the one used for public features, so your market browsing cannot be linked to your accounts.

2. What the app deliberately does not collect

• No full account or routing numbers. The connection is provisioned without the products that return them.
• No institution passwords. You enter credentials on your provider's own screen; they never pass through this app or its servers.
• No transaction history, no Social Security number, no date of birth, no home address.
• No advertising or analytics SDKs, no third-party trackers, and no cross-app or cross-site tracking. The app does not ask for permission to track, because it does not track.
• No location data and no access to contacts, photos, or microphone.

3. How your data is used

Solely to display your own financial position to you inside the app: balances, net worth over time, allocation, and your holdings shown alongside the app's market analysis.

That market analysis is produced independently, from public market data, and is identical for every user. It is not derived from, influenced by, or personalised using your holdings. Your positions are never an input to it.

Your data is never sold, rented, or shared for advertising, and is not used to train machine-learning models.

4. Who else is involved

The app relies on these service providers, each used only for the purpose listed:

• Plaid — connects bank and credit-card accounts and returns balances. Plaid's own privacy policy governs data you provide on its screens.
• SnapTrade — returns brokerage positions and balances, read-only.
• Coinbase — returns crypto holdings through a key scoped to view only, enforced by Coinbase.
• Cloudflare — hosting, database, and network security.
• Apple — sign-in and app distribution.

No other party receives your financial data.

5. How it is protected

• Provider credentials are individually encrypted with AES-GCM-256 before storage, each under its own key, wrapped by a key derived per user. A copy of the database yields unusable ciphertext.
• Financial data is held in a separate database that the app's public services have no access to whatsoever.
• All traffic uses TLS 1.2 or better.
• Sign in with Apple is required for access; the app additionally locks balances behind Face ID, Touch ID, or your device passcode.
• Sessions expire after 30 days and can be revoked on every device at once.

6. How long it is kept, and how to delete it

Data is kept only while an account is connected.

• Disconnect an account in the app and its stored credential is permanently deleted first — making the data cryptographically unrecoverable — followed by its balances, positions, and account records.
• Delete a manually-added account and it is removed along with its full balance history.
• Sign out everywhere to revoke every active session immediately.

To request deletion of everything associated with you, use the contact address below. Because the data is stored per user, it can be removed in full.

7. Your choices

Connecting a financial account is entirely optional — the app's market features work without it. You choose which institutions to connect, you can disconnect any of them at any time, and disconnecting deletes the data as described above.

8. Children

Gentle Justie is not directed to children under 13, and does not knowingly collect information from them.

9. Changes

If this policy changes materially, the updated version will be posted here with a new date. Continued use after a change constitutes acceptance of it.

10. Contact

Questions, or a request to delete your data: lawsontrimmell@gmail.com