Privacy Policy
1. Overview
Time2IPO (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal and financial tracking information you store in the Time2IPO: IPO & Demat Tracker mobile application (“the App”). This policy explains what we collect, how we use and safeguard it, and how you can exercise your data rights, including full account and data deletion.
2. Information we collect
A. Account & authentication data (optional)
If you choose Google Sign-In (via Android Credential Manager and Firebase Authentication), we collect your name, email address, profile photo URL (if available), and a unique Firebase User ID (uid). You can use the App locally without signing in; Google Sign-In is only required to back up and sync your portfolio to Cloud Firestore.
B. User-entered portfolio & financial tracking data
The App stores records you enter manually:
- Family Demat account profiles: account holder name, broker name, masked client ID, PAN identifier (for 1-application-per-PAN tracking), and manually entered capital and liquidity figures.
- IPO applications & plans: selected IPO names, bid amounts, lot counts, allotment statuses, realized profit/loss entries, and chronological activity logs.
C. AI Strategist queries
When you use the AI IPO Strategist or request an AI Market Brief, your prompt and relevant portfolio summary metrics (such as available liquidity, number of Demat accounts, and selected IPO parameters) are sent securely via Firebase AI Logic (Google Gemini API) to generate insights.
D. Device & security permissions
- Biometric authentication (USE_BIOMETRIC): used strictly on-device through Android’s system BiometricPrompt to lock and unlock the App when you enable it. Biometric templates never leave your device and are never accessible to Time2IPO.
- Internet & network state (INTERNET, ACCESS_NETWORK_STATE): used to fetch public IPO schedules, sync with Firebase Firestore, and communicate with Firebase AI Logic.
3. How we use your information
- Provide, maintain, and synchronize your IPO portfolio, ASBA liquidity matrix, and family Demat ledger across your devices.
- Enforce strict per-user isolation in Cloud Firestore so only your authenticated account can read or write your records.
- Generate personalized AI capital allocation insights when you ask.
- Respond to support inquiries and process account deletion requests.
4. Data storage, encryption & security
- Local storage: portfolio data is stored in an internal Android Room SQLite database sandboxed to the App.
- Cloud storage: when signed in, data is stored in Google Cloud / Firebase Firestore under your private user path (/users/{userId}/…), protected by zero-trust Firestore Security Rules.
- Encryption in transit: all communication between the App and Firebase/Google servers uses industry-standard HTTPS/TLS.
5. Data sharing & third-party services
We do not sell, rent, or trade your personal or financial tracking data to third parties or advertisers. The App contains no third-party advertising SDKs. We rely only on these infrastructure providers:
- Google Firebase (Authentication & Cloud Firestore): secure sign-in and cloud database synchronization.
- Firebase AI Logic (Google Gemini API): on-demand AI IPO analysis and live market search grounding.
- IPO Alerts API / public market feeds: public Mainboard and SME IPO schedules, price bands, and subscription metrics.
6. Data retention & account deletion
Your cloud data is retained only while you maintain an active account. You can permanently delete your account and all associated cloud and local data at any time in the App (Profile → Data Management & Privacy → Delete Account & Cloud Data), through our Account Deletion page, or by emailing whoishimesh@gmail.com.
7. Children’s privacy
The App is intended for adult investors aged 18 and older and does not knowingly collect personal information from children under 13.
8. Contact us
For privacy questions or data requests, email whoishimesh@gmail.com.