Privacy Policy

Last updated: 13 October 2026

This policy explains what information Stockmates collects when you use the website (stockmates.io) or the Stockmates Android and iOS apps, why we collect it, and the choices you have. Stockmates is run by JosephJConsulting in the United Kingdom, which is the data controller. Contact us at hello@stockmates.io.

What we collect

Account details: your email address, the display name and username you choose, and your settings (display currency and email notification choices).
Sign-in details: if you continue with Google or Apple, we receive an account identifier and email address from that provider. We do not receive your Google or Apple password. Apple's Hide My Email addresses are treated as your email. If you choose to sign in with a password, it is stored only in a securely hashed form and is never visible to us.
Content you add: groups you create or join, invitations you send (including the invitee's email address), trades you record, trade notes and comments.
Messages: what you send through the contact form or to our email address, including your name and email address.
Waitlist: your email address and sign-up time, if you joined the waitlist.
Technical information: our hosting provider records requests in security and troubleshooting logs, which can include your IP address and device or browser details.

We do not collect your location, contacts, photos or payment details. Stockmates does not connect to your brokerage account: trades are entered by you. We do not use advertising, analytics or tracking tools, and we do not sell your information.

How we use it

To create your account, sign you in and keep your session secure.
To show your trades and performance to the members of groups you share them with.
To send sign-in links, group invitations and the trade notifications you choose.
To answer messages and requests you send us.
To prevent abuse, for example by limiting how many sign-in emails can be requested.

Under UK data protection law we rely on providing the service you asked for (contract), on our legitimate interest in keeping Stockmates secure, and on your consent for optional emails, which you can turn off in Account settings.

Who can see your information

Members of your groups can see your display name, username, and the trades, notes and comments you share in that group.
Amazon Web Services hosts our website, database and email sending in the London (eu-west-2) region, and stores and checks passwords for people who use them (Amazon Cognito).
Google and Apple process your sign-in if you choose to use them, under their own privacy policies.
Twelve Data supplies market prices. We send it instrument symbols only, never information about you.

We may disclose information if required by law or to protect the safety of users.

Cookies and storage on your device

The website uses one essential cookie to keep you signed in, and browser storage to sign you out after an hour of inactivity. The apps keep your session in your device's secure storage (Keychain on iOS, Android Keystore on Android). We do not use advertising or analytics cookies.

How long we keep it

Account information is kept until you delete your account.
Sign-in links and emailed codes expire after a short time and can be used only once.
Technical logs expire after seven days.
When you delete your account, your email, names, settings, password, sign-in associations, memberships, comments, notifications, invitations and trade notes are removed. Trades you shared stay in their groups beside your old username so the group's history remains accurate. Read more about account deletion.

Your rights

You can see and change your details in Account settings, and delete your account in the apps or on the website. You may also ask us for a copy of your information, ask us to correct or erase it, or object to how we use it, by emailing hello@stockmates.io. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Security

Information is sent over encrypted connections (HTTPS). You can sign in with a single-use email link, your Google or Apple account, or a password. Passwords are stored only in a securely hashed form by Amazon Cognito; Stockmates never sees or stores them in readable form. Changing or resetting your password signs out your other sessions.

Children

Stockmates is intended for adults aged 18 and over and is not directed at children. If you believe a child has created an account, contact us and we will delete it.

Changes

If we change this policy, we will update the date above. We will tell you by email before any significant change takes effect.