Privacy Policy

Who we are

"We", "us", "our", and "Oxeye Technologies" refer to Oxeye Technologies LLC, a California limited liability company, which is the data controller for personal information processed by our website and products. You can contact us at sridhar@oxeye.tech. "Services" means the website at oxeye.tech, the Oxeye iOS application, and any other product published by Oxeye Technologies LLC. "Oxeye" (without "Technologies") refers specifically to the iOS application.

What we collect

Account information

When you sign into the Oxeye iOS app using Sign in with Apple or Sign in with Google, Oxeye Technologies LLC receives your Apple or Google user identifier and — only if you explicitly agree to share it — the name and email address associated with that identifier. If you choose to hide your email via Sign in with Apple, we only ever see Apple's relay address. Authentication is handled on our behalf by Firebase Authentication (Google LLC).

App usage data

We store the following, keyed to your Firebase user ID, so the app can work:

• Your watchlist (a list of stock tickers) and the price at which each ticker was added.
• Your recorded prediction outcomes, used to power the "AI Called It" feature.
• Your local notification schedule for 90-day reminders, stored on your device via Expo notifications; Oxeye Technologies does not receive the schedule.

Technical data

When you use the Services we automatically receive limited technical information necessary for delivery — IP address, user agent, approximate timestamps of requests, and the name and version of the Oxeye iOS app. We use Firebase App Check to verify that API requests originate from the genuine Oxeye app; App Check issues short-lived attestation tokens that do not identify you personally.

What we do not collect

• We do not collect your brokerage credentials, trade history, or portfolio holdings beyond the tickers you explicitly add to your watchlist.
• Oxeye Technologies LLC does not sell personal data, and we do not allow advertising networks to track you inside our Services.
• We do not ask for or store your passwords. Authentication is delegated entirely to Apple or Google.

How we use it

Oxeye Technologies LLC uses the information above only to:

• Provide the Services (e.g., sync your watchlist across devices, compute portfolio metrics you requested).
• Maintain the Services (e.g., rate-limiting, debugging, preventing abuse).
• Communicate with you about our products when you have emailed us or agreed to be contacted.
• Comply with our legal obligations and enforce our Terms of Service.

Legal bases (for users in the EEA and UK)

Where GDPR or UK GDPR applies, Oxeye Technologies LLC relies on the following legal bases: performance of a contract (to deliver the Services you request); our legitimate interests in operating and securing our products (balanced against your rights); and your consent, where we ask for it. You can withdraw consent at any time.

Third-party processors

We rely on the following service providers to run the Services. Each processes data only as needed to deliver its function:

• Google Cloud Platform — hosts our backend (Cloud Run), databases (Firestore, BigQuery), and storage (Cloud Storage). US regions.
• Firebase (part of Google) — Authentication, App Check, Cloud Messaging where applicable.
• Financial Modeling Prep and FRED — third-party public-market and economic-indicator data providers. They never receive information about you.
• Google Gemini API — generates per-stock LLM outlooks. Prompts contain only public market data; we do not include any personal information.
• Apple and Google — for Sign in with Apple / Sign in with Google and App Store / TestFlight distribution.

Data retention

We keep your account data while your account is active. If you delete your account or email us asking us to delete your data, Oxeye Technologies LLC will delete your Firestore records (watchlist, prediction history, profile) within 30 days, except where we are required to retain information to comply with law, enforce agreements, or investigate fraud. Backups are rotated out within 60 days.

Account deletion

You can request deletion of your Oxeye account at any time by emailing sridhar@oxeye.tech from the email address on your account, or by using the "Delete Account" option inside the Oxeye iOS app (Settings → Account). Deletion is permanent.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port the personal information Oxeye Technologies LLC holds about you, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA (including the right to know, right to delete, and right to opt out of the sale or sharing of personal information — though we do not sell or share personal information). To exercise any of these rights, email us. We will not discriminate against you for exercising a right.

Children

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, email us and we will delete it.

Security

All traffic between the app, the website, and our backend is encrypted with TLS. Secrets are held in Google Secret Manager. Access to production data is limited to the minimum number of personnel (currently: one) required for operation. No system is perfectly secure — if you discover a vulnerability, please report it to the email above and allow us a reasonable window to remediate before public disclosure.

International transfers

Oxeye Technologies LLC is based in the United States and processes data in the United States. If you access the Services from outside the US, you consent to this transfer and to the processing being governed by US law, subject to any non-waivable rights under your local law.

Changes to this policy

We'll update this page when our practices change and revise the "last updated" date at the top. Material changes will be announced inside the Oxeye app or by email where we have one on file.

Contact

For privacy questions, data-access requests, or to exercise any right above, write to Oxeye Technologies LLC at sridhar@oxeye.tech.