# Privacy Policy

**App:** US Stock Disclosure Alerts  
**Developer:** LunaticWorld  
**Last updated:** April 25, 2026

US Stock Disclosure Alerts (the "Service", "App", "we", or "us") respects your privacy. This Privacy Policy explains what information may be collected, used, shared, and retained when you use the App.

The App can be used without signing in. Some features, such as account credits, invite features, account deletion, and account-level restoration, require optional Google sign-in through Supabase Auth.

## 1. Information We Collect or Process

Depending on how you use the App, the following information may be collected or processed.

### 1.1 Account information, if you sign in

If you choose to sign in with Google, we may process:

- Display name
- Email address
- User ID or account identifier
- Supabase authentication session information
- Account settings related to the App
- Account credit balance, invite code status, reward status, and account deletion status

Signing in is optional. If you do not sign in, the App may use an anonymous session or installation-based identifier so that basic app features can work.

### 1.2 App activity and feature usage

We may process app activity information needed to provide and improve the Service, including:

- Disclosure list refreshes and disclosure detail views
- Company search requests and in-app search queries
- Favorite or watch-related actions, if used
- AI summary access, quota usage, and unsupported-summary states
- Rewarded ad flow status, reward eligibility, and server-side verification status
- Invite code redemption and anti-abuse checks
- Notification topic or preference state
- Basic analytics events such as feature usage, screen interactions, and app stability signals

Search queries are used to provide search results. We do not use search queries to build advertising profiles.

### 1.3 Device, app, and technical information

The App and its service providers may automatically process technical information such as:

- Firebase Cloud Messaging token, used for push notifications
- App installation ID or similar app instance identifier
- Hashed device-related identifier used for quota, reward, and abuse-prevention logic
- Advertising ID, if available and permitted by the device settings
- App version, operating system version, device model, language, time zone, and network state
- Diagnostic and performance information
- Approximate location inferred from IP address by advertising or analytics SDKs

The App does not request precise GPS location permission.

### 1.4 Information you provide when contacting us

If you contact us by email, we may process the email address and message content you provide so that we can respond to your request.

## 2. How We Use Information

We use information for the following purposes:

- **App functionality:** providing SEC disclosure lists, company search, push notifications, AI summary access, account credits, invite features, and account deletion.
- **Account management:** signing users in with Google through Supabase Auth, restoring account-level credits, managing account settings, and processing account deletion.
- **Analytics:** understanding app usage, feature reliability, and performance so we can improve the App.
- **Advertising or marketing:** showing ads through Google AdMob and related advertising SDKs, including rewarded ads.
- **Fraud prevention, security, and compliance:** preventing reward abuse, invite abuse, quota bypassing, invalid ad reward claims, and unauthorized account access.
- **Developer communication:** responding to user inquiries and support requests.

## 3. Third-Party Services and Data Sharing

We do not sell your personal information. We may share or transfer information to service providers and SDK partners only as needed to operate, secure, analyze, and monetize the App.

The App may use the following third-party services:

| Service provider | Purpose | Examples of data processed |
| :--- | :--- | :--- |
| Supabase | Authentication, anonymous sessions, account credits, invite features, summary access, server-side functions, account deletion | User ID, email address if signed in, account state, credit and reward state, install/device-derived identifiers, app feature requests |
| Google Sign-In / Google Identity Services | Optional Google sign-in | Google account identity token, name, email address, account identifier |
| Firebase Cloud Messaging | Push notification delivery | FCM token, app version, installation-related identifiers |
| Firebase Analytics and related Firebase SDKs | Analytics, app reliability, service improvement | App interactions, app/device metadata, installation identifiers, diagnostics |
| Google AdMob and advertising partners | Ads, rewarded ads, ad measurement, fraud prevention | Advertising ID, approximate location inferred from IP address, app interactions, diagnostics, device or account identifiers |
| Google ML Kit / on-device translation components | Optional on-device translation support | Translation processing is intended to occur on the device; model download and SDK operation may process technical app/device metadata |

Public SEC filing information shown in the App is public source data and is not user personal information.

## 4. AI Summary and Translation Features

AI summaries are generated from public SEC filing documents and are provided for convenience. The App may record summary access and quota state to provide daily views, rewarded-ad bonus views, account credits, and anti-abuse protection.

If on-device translation is enabled, translation is intended to run locally on the user's device. The translated text is used for display in the App and is not used to change the original server summary payload.

## 5. Account Deletion and Data Retention

Signed-in users can request account deletion from within the App. The account deletion option is available in the account or credits area of the App.

You can also review account deletion instructions here:

- <https://lunaticworld.github.io/stockdisclosureUS/>

When an account deletion request is processed, we delete or deactivate account-related information where reasonably possible, including:

- Supabase Auth account information associated with the App
- Account credit balance
- Invite code and reward state associated with the account
- App account settings stored on the server

Some records may be retained for a limited period when necessary for security, fraud prevention, legal compliance, backup integrity, or dispute handling. Minimal reward-claim records used to prevent repeated welcome or invite reward abuse may be retained for up to 180 days unless a longer period is required by law.

Anonymous or local-only data can generally be removed by clearing the App data or uninstalling the App from the device.

## 6. User Choices and Controls

You may control some data processing through the following options:

- Use the App without signing in, where supported.
- Sign out or delete your signed-in account from the App.
- Disable push notifications in Android system settings or in the App, where available.
- Reset or delete the Android Advertising ID in device settings.
- Limit ad personalization in Google or Android privacy settings, where available.
- Clear App data or uninstall the App to remove local app data.
- Contact us to request help with account or data deletion.

## 7. Data Security

We use encrypted transmission, such as HTTPS/TLS, when data is sent from the App to our servers or third-party services. We also limit access to account and service data to what is needed to operate, secure, and improve the App.

No method of transmission or storage is completely secure, but we take reasonable measures to protect the information processed by the Service.

## 8. Children's Privacy

The App is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, please contact us so we can review and take appropriate action.

## 9. International Processing

The App uses cloud and SDK providers that may process information in countries other than your country of residence. These providers are responsible for protecting information according to their own policies and applicable laws.

## 10. Changes to This Privacy Policy

We may update this Privacy Policy when the App's features, SDKs, data practices, or legal requirements change. Updates will be posted on this page with a new "Last updated" date.

## 11. Contact

If you have questions or requests about this Privacy Policy or your data, please contact us at:

- **Email:** j12i29j12i29@gmail.com