Privacy Policy
Effective 13 July 2026 · applies to the Quantfolio web app and the Quantfolio iOS/Android apps.
The short version
Quantfolio is a portfolio analytics tool. We collect only what is needed to run your account and compute your own analytics: your email, name, and the portfolio data you enter or import. We never ask for broker logins or trading credentials, we do not sell or share your data with advertisers, and you can permanently delete your account and all its data yourself at any time.
What we collect
- Account data — your email address, name, and a securely hashed password (we never store the password itself). If you enable two-factor authentication, we store the related secrets and hashed backup codes.
- Portfolio data you provide — transactions you add or import from broker CSV files (symbols, dates, quantities, prices), F&O entries, target allocations, and portfolio settings. CSV files are parsed on your device; only the normalized rows you confirm are sent to our servers.
- Derived analytics — daily portfolio-value snapshots and cached computations we generate from your data to power charts and risk metrics.
- Technical logs — standard server logs (IP address, timestamps, requested endpoints) kept briefly for security, rate-limiting, and debugging.
We do not collect broker credentials, bank details, PAN/Aadhaar numbers, contacts, location, or advertising identifiers. The mobile apps contain no ads and no third-party analytics or tracking SDKs.
How we use your data
- To operate your account: sign-in, email verification codes, two-factor and password-reset codes.
- To compute your own analytics: performance, risk, allocation, benchmarking, tax summaries, projections.
- To keep the service secure: rate limiting, abuse prevention, and debugging.
We do not sell your data, use it for advertising, or share it with third parties for their own purposes. Market prices are fetched from market-data providers using instrument symbols only — never together with your identity or holdings quantities.
How your data is protected
All traffic is encrypted in transit (HTTPS/TLS). Passwords are hashed with bcrypt. Sessions use signed tokens; on mobile the token is stored in the device's secure keychain. Optional two-factor authentication (email codes or an authenticator app) is available on every account. Your portfolio data is only ever readable by your own account.
Data retention and deleting your account
Your data is kept only while your account exists. You can permanently delete your account and everything in it — portfolios, transactions, snapshots, and settings — at any time, without contacting us:
- Web: sign in and open Settings → Danger zone → Delete account.
- Mobile app: More → Account & security → Delete account.
Deletion is immediate and irreversible. If you cannot access your account, email smitbhansali7@gmail.com from the account's email address and we will delete it for you. Transient server logs age out automatically.
Third-party services
We use infrastructure providers to run the service (hosting, email delivery for one-time codes, and market-data lookups). These providers process data only on our behalf. The app does not integrate ad networks, social SDKs, or data brokers.
Children
Quantfolio is intended for adults (18+) and is not directed at children.
Changes and contact
If this policy changes materially, we will update this page and its effective date. Questions or requests: smitbhansali7@gmail.com.
Reminder: Quantfolio is an analytics tool — not a broker, adviser, or tax consultant. Back to Quantfolio