Privacy Policy

Who we are

Income Engineering ("we," "us") is a web application that helps you track dividend income, portfolio holdings, and related financial information. This policy describes how we handle personal information when you use our service.

Information we collect

• Account information. When you create an account, we process information needed to authenticate you (for example, email address and authentication provider data when you sign in with email/password or Google through our authentication partner).
• Portfolio and usage data. Information you enter or import into the app, such as tickers, purchases, holdings, cash balances, and preferences you save in your profile.
• Support requests. If you contact us through the in-app support form, we store the subject, message, and related account context needed to respond.
• Technical data. Standard server and security information such as IP address, browser type, and timestamps may be processed by our hosting and infrastructure providers when you use the service.

How we use information

We use the information above to:

• Provide, maintain, and improve the service
• Authenticate you and protect account security
• Respond to support requests
• Process subscriptions and payments when you purchase a paid plan (handled by our payment provider)
• Comply with law and enforce our terms when necessary

Third-party services

We rely on service providers that process data on our behalf, including:

• Supabase for authentication and database hosting
• Stripe for subscription billing when you subscribe to a paid plan
• Hosting providers (for example, Vercel and Railway) to run the application and API

Those providers have their own privacy policies. We encourage you to review them if you want more detail on how they process data.

Data retention

We keep your information for as long as your account is active and as needed to provide the service. You may request deletion of your account by contacting us; we will delete or anonymize personal information subject to legal and legitimate business requirements (for example, tax or fraud-prevention obligations).

Security

We use industry-standard measures appropriate to the nature of the service. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Children

The service is not directed at children under 13 (or the age required in your jurisdiction). We do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

Contact

For privacy-related questions, use Contact support in the app footer while signed in, or reach out using the contact information you provide for your Google OAuth consent screen or app store listing if applicable.