Privacy Policy

Last updated: 2025-12-25

Total Holdings is a portfolio tracking app for monitoring holdings and performance. We do not provide financial advice or brokerage services. This policy explains what data we collect, why we collect it, and how you can control it.

Data controller: Zack Luo (United Kingdom). Contact: [email protected].

Information we collect

To provide our services effectively, we collect the following categories of information:

Account and Profile Information: your email address, securely hashed password (we never see your actual password), and settings such as your base currency and display preferences.
Portfolio and Transactional Data: names of your portfolios, holdings, positions, transaction history (quantities, prices, dates), manual notes, and automated net worth snapshots.
Technical and Usage Data: when you access our services, our servers automatically log information such as your IP address, browser type, device information, and interaction history with the app to ensure security and performance.
Diagnostics: if enabled, we collect crash reports and error telemetry via Sentry to help us fix bugs and improve stability.
User Feedback: any messages, ratings, or suggestions you voluntarily submit through our feedback tools.

How we use information

We use your information for the following professional purposes:

To operate, maintain, and provide the core features of the portfolio tracking service.
To manage your account, including authentication and password recovery.
To calculate and present complex portfolio metrics, historical performance, and net worth analysis.
To protect the security of our services, prevent fraud, and debug technical issues.

We share your information only in the following circumstances:

Core Service Providers: We use trusted third-party providers for hosting (Oracle Cloud), database management, email delivery, and error monitoring. These providers process your data strictly under our instructions.
Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that professional transaction.
Legal Compliance: We may disclose information if required by law, regulation, or a valid legal request from public authorities.

We do not share your personal data with third parties for marketing purposes.

Data retention

We retain your account and portfolio data while your account is active. When you delete your account, we remove your data from our active systems. Residual backups may persist for a limited time.

Security

Data is encrypted in transit using HTTPS. Passwords are stored as salted hashes. Access to production systems is restricted and monitored.

Your choices

Update your email or password in the app under Security settings.
Delete your account using the steps on our Data Deletion page.
Contact us at [email protected] for access or questions.

Your UK data rights

You may request access, correction, deletion, restriction, or portability of your data, and you may object to certain processing. To exercise these rights, contact [email protected]. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk.

Children's privacy

Titanite Studio does not knowingly collect personal information from children under the age of 13 (or 16 in the UK/EU). If you are under this age, please do not provide any personal information. If you believe a child has provided us with information, please contact us immediately.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date on this page.