Privacy Policy
TICK is a free beta used by a small group of testers. This policy describes what the app actually does today.
1. Who we are
TICK is a neutral financial information app operated by Yahya Raissouni, in Montreal (Quebec, Canada), as a sole proprietorship. TICK is the controller of your personal information.
Person in charge of the protection of personal information: Yahya Raissouni — raissouni.yahya@yahoo.com. Write to this address with any question or request about your information.
2. What we collect, why, and on what basis
| Information | Why | Basis |
|---|---|---|
| Email address and password (the password is irreversibly hashed with bcrypt; we never know it) | Create your account and sign you in. | Providing the service you ask for |
| Your acceptance of the terms and this policy, your confirmation that you are 18 or older, the date and the versions accepted | Being able to show your consent. | Legal obligation |
| Technical device identifier (generated by the app, random) | Link your settings and usage statistics to your phone. | Providing the service |
| Notification token (Expo / Google / Apple) | Send you the notifications you chose. | Your consent (you can turn them off at any time) |
| Country of residence, account types chosen | Adapt the app to your country (stored on your phone). | Providing the service |
| Watchlist, notification threshold, calibration answers | Choose which news to show you and which to notify. | Providing the service |
| Portfolio positions: symbol, quantity, average price, broker name — entered by hand or imported from your broker | Show you the news about what you own and your portfolio's value. | Your consent |
| Price alerts: symbol, chosen price, time it fired | Tell you when a price crosses the level you chose. | Providing the service |
| Screenshots you import (for example another app's watchlist) | Read the symbols in them. The image is sent to Anthropic to be read and is not kept by TICK. | Providing the service |
| Questions asked to the assistant | Answer them. Conversation history stays on your phone, not on our servers. | Providing the service |
| Usage statistics: app opens, tabs viewed, features used (question asked, position added, notification opened, post shared…), linked to the device identifier. Never the content of your questions or your quantities. | Understand what is useful and improve the app. No third-party tool: these statistics stay with us. | Legitimate interest in improving the service |
| App error reports: the error message, where in the code, the app version, the phone type, and your account if you are signed in. Never what you typed or your positions. | Find and fix bugs. No third-party tool: these reports stay with us. | Legitimate interest in running the service |
| IP address and server technical logs | Security, abuse prevention and bug fixing. | Legitimate interest in protecting the service |
We never collect your broker credentials, bank account numbers, SIN/SSN or national ID number, or any payment information. We do not sell your information, we do not share it for advertising, and we use no advertising, tracking or profiling tools.
Cookies: neither the app nor our web pages (this policy, shared posts) use cookies or trackers.
Shared posts: when you share a post, the link opens a public web page showing that post, with no information about you. We count visits to these pages (the post visited and the date) without recording who visits them.
3. Connecting your broker (read-only)
If you choose to connect your broker, the connection goes through SnapTrade (Passiv Inc., Toronto). You sign in directly with your broker on SnapTrade's page: TICK never sees your password. Access is read-only: TICK can read your positions but cannot buy, sell or move money. The access key SnapTrade gives us is encrypted in our database. You can disconnect your broker at any time from the Wallet tab: access is then revoked at SnapTrade and imported positions are deleted.
4. Artificial intelligence
News summaries and the assistant's answers are written automatically by artificial intelligence, without human review; the app says so on every post and in the assistant. They can contain errors: every post links to its source. TICK makes no automated decision that produces legal effects for you or significantly affects you: the AI summarizes information, it decides nothing for you.
5. Who we share your information with
Only with the providers needed to run the service, bound by their data processing terms:
| Provider | What it receives | Location |
|---|---|---|
| Oracle Cloud | Server hosting | Montreal, Canada |
| Neon (database) | Accounts, watchlists, portfolios, settings, alerts, statistics | United States (Ohio) |
| SnapTrade (Passiv) | Read-only broker connection, if you turn it on | Canada |
| Anthropic (Claude) | Your questions to the assistant, with the list of symbols in your portfolio and watchlist (not your quantities or identity); screenshots you import. Anthropic does not train its models on this data. | United States |
| Expo (and Google / Apple) | Notification token and content | United States |
| Price and market data providers (Yahoo Finance, Twelve Data, TMX, OpenFIGI) | Stock symbols only, no personal information | — |
| Other AI providers (Google Gemini, Groq, Cerebras, Mistral, Hugging Face, OpenRouter, NVIDIA, Zhipu AI, Cloudflare, Cohere) | Only the text of news articles and public documents to summarize, never any information about you | United States, Europe, China |
We may disclose information when the law requires it (for example a court order).
6. Information outside Quebec and Canada
Some information is stored or processed outside Quebec, notably in the United States, where it may be subject to local laws. Before entrusting it to a provider we assess the protection offered (sensitivity, security measures, legal framework) and choose providers that protect it by contract and encryption. If you are in the European Union or the United Kingdom: Canada benefits from a European Commission adequacy decision; for transfers to the United States we rely on our providers' contractual commitments (standard contractual clauses, or the Data Privacy Framework where they are certified).
7. How long we keep it
- Account, watchlist, settings, positions, active alerts: as long as your account exists.
- Positions imported from your broker: deleted as soon as you disconnect the broker.
- Price alerts that fired: 30 days.
- Usage statistics: 13 months.
- Server technical logs: 30 days.
- App error reports: 30 days.
- Account deletion from the app: immediate (account, watchlist, portfolio, alerts, settings, consent record, notification tokens; the SnapTrade connection is revoked). By email request: within 30 days.
8. Your rights
Wherever you are, you can, by writing to the person in charge (section 1):
- access your information and get a copy, including in a structured, commonly used format (portability);
- have it corrected;
- object to processing based on our legitimate interest (such as usage statistics) or ask us to restrict it;
- withdraw your consent and delete your account, directly in the app (Account → Delete my account) or by email (details);
- disconnect your broker and turn off notifications directly in the app.
We answer within 30 days, free of charge. We will not treat you differently for exercising your rights. If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or the data protection authority of your country (for example, in the European Union, the one where you live; in the United Kingdom, the ICO).
9. Security
Encrypted connections (HTTPS), hashed passwords (bcrypt), encrypted broker access keys, server access limited to the operator. We keep a register of confidentiality incidents. No system is perfect: if an incident presents a risk of serious harm, we will inform you, the Commission d'accès à l'information and, where applicable, other competent authorities, as the law requires.
10. Minors
TICK is for people 18 and older; signing up asks you to confirm it. If we learn that an account belongs to someone under 18, we delete it.
11. Changes
We will tell you in the app about any significant change to this policy before it applies.