Privacy Policy

Last updated: July 27, 2026

Your privacy

We store your account details, holdings, and preferences to run the app. Passwords are protected with strong one-way hashing, sensitive security data (like session tokens and two-factor secrets) is encrypted, and all traffic is encrypted in transit (HTTPS).

No advertising trackers, and we never sell your data. You can export your data or delete it any time from Settings.

1. What We Collect

Palago stores the following data:

  • Account info (email and name)
  • Portfolio holdings and transaction history
  • Watchlists, price alerts, and preferences
  • AI advisor chat history

2. What We Don't Collect

We don't use advertising trackers, analytics profiling, or any data beyond what's needed to run the app. We never sell your data.

3. How We Secure Your Account

You can sign in with email and password or with Google, and optionally turn on two-factor authentication (authenticator app plus email codes). Passwords are stored using strong one-way hashing (they can't be reversed), sensitive security data such as session tokens and two-factor secrets is encrypted at rest, and one-time email codes are stored only as hashes. Connections to the app use HTTPS.

4. Third-Party Services

Palago connects to a few outside services to work. We only share the minimum needed to fulfill your request — not your account data:

  • Market data: Yahoo Finance (stocks/ETFs); Binance, Coinbase, and Yahoo Finance (crypto); FRED / the Federal Reserve (inflation and market-cycle data)
  • AI advisor: Google Gemini — your chat messages are sent to Gemini to generate responses
  • Billing: PayPal and PayMongo (card and QRPH) for paid plans

5. Notifications

Notifications are optional and only sent if you opt in. Depending on your settings, these may go out over email (via Resend/Gmail), Telegram, or web push. You can turn them off any time.

6. Data Storage

Your data is stored securely and you stay in control of it.

7. Export & Deletion

You can export your data any time. You can also delete your holdings, transactions, watchlists, and alerts directly from the app. To fully delete your account, contact the administrator.

8. Changes

This policy may be updated at any time. Check this page for the latest version.

← Back to login