Privacy Policy
Last updated: September 18, 2026
Pinnacle Fi is a product of Pinnacle Fi, Inc. ("Pinnacle Fi," "we," "us"). This policy explains what information we collect, how we use it, and the choices you have. We built Pinnacle Fi to help you track investments and get orion market ideas — not to profit from your personal data. We do not sell your personal information, we do not share it for advertising, and the app contains no advertising software.
How Pinnacle Fi works
Pinnacle Fi is a mobile app backed by an internet-hosted service that we operate. Your portfolio and app data are stored on our servers — not only on your device — so that prices stay current, alerts can reach you when the app is closed, and your account works across devices. Data is encrypted in transit between the app and our service.
Information we collect
- Account information. Your email address and authentication credentials, handled on our behalf by a third-party authentication provider. Your password is never visible to us or stored on our systems.
- Portfolio and app data. The holdings you enter (symbol, quantity, purchase price and date, and any notes you add), your watchlist, your portfolio value over time, your stated risk tolerance, and any custom price or indicator alerts you create.
- Security information. If you enable two-factor authentication or biometric sign-in, we store the associated secret or a device identifier. If you create a developer API key, we store only a one-way hash of it.
- Exchange connections. If you choose to link a cryptocurrency exchange, we store the read-only API credentials you provide so we can import your balances. See "Connected exchanges" below.
- Support correspondence. If you contact us through the app or our website, we store the name, email address, and message you submit, so we can respond and keep a record of the request.
- Images you choose to import. If you use the photo-import feature, the image you select is sent for text recognition and returned to you as suggested holdings. We do not store the image.
- Account activity and recommendation history. We record a limited set of signed-in activity events using your account identifier, including app opens, screen views, subscription-status refreshes, and recommendation serve or action events. Recommendation records can include the asset symbol, score, conviction, risk class, and timestamps.
- Device and usage data. Basic technical data — device type, app version, and, if you opt in, a push-notification token — needed to operate the app and send the alerts you request.
We do not collect an advertising identifier, contact list, precise location, or browsing history, and we do not store IP addresses or browser identifiers alongside your account. Our hosting and security providers process such technical data transiently in order to deliver and protect the service.
How we use your information
- To provide core features: portfolio tracking, prices, orion analysis, and alerts.
- To send the push notifications you have enabled (you can turn each category off at any time in the app).
- To process subscriptions, if you buy one. Payment is handled entirely by the app store you installed Pinnacle Fi from; your payment details never reach our servers and we cannot see or retrieve them. We retain only the identifiers needed to know which plan your account is on.
- To respond to your support requests.
- To maintain security, prevent abuse, and comply with legal obligations.
Where your data is processed
Pinnacle Fi relies on a small number of trusted third-party service providers to function. We describe them by the category of processing they perform rather than by name, because our suppliers may change over time. Each processes data only as needed to perform its function, under contract, and none is permitted to use your data for its own purposes or for advertising.
- Authentication. Holds your email address and credentials and verifies your sign-in.
- Hosting and database. Operates the servers and database where your portfolio and app data are stored.
- orion processing. A third-party technology provider supports the private orion portfolio analysis that you open or request. See "How orion uses your portfolio" below.
- Market data. Supplies prices, charts, and news. We send only the asset symbols being looked up — never your identity, quantities, or position sizes.
- App store billing. If you buy a subscription, the app store you installed Pinnacle Fi from takes the payment under its own terms and privacy policy. We never receive your card or payment details. The store tells us only that a subscription is active and which plan it is.
- Push notification delivery. Delivers the alerts you opt into. The notification content may name assets you hold or watch.
- Text recognition. Reads text from an image you explicitly submit for import.
- Support handling. Routes your support message to our team so we can respond.
- Crash diagnostics. If you opt in, Firebase Crashlytics receives technical crash reports, an installation identifier, session information, device and operating-system state, and crash context so we can find and fix faults. We do not attach your Pinnacle Fi account identifier, name, email, holdings, support messages, or payment information. Firebase retains Crashlytics data for approximately 90 days. You can withdraw this choice at any time in Profile.
- Backups. Stores encrypted-in-transit copies of our database so the service can be restored after a failure.
How orion uses your portfolio
Public orion scores, ideas, theses, news labels, and market analysis are generated from shared market data. The underlying ranking and content are the same for every user. Your subscription tier may limit how many shared idea rows are visible, but it does not change their ranking or content.
Your holdings, risk tolerance, account activity, and private portfolio results are never used to derive, rank, select, score, change, or write public orion ideas. The underlying public orion idea universe, ordering, scores, conviction, theses, and wording come only from shared market data.
When you open or refresh a private orion portfolio analysis, sector interpretation, or risk report, Pinnacle Fi sends the information needed to generate that feature to a third-party technology provider that supports orion. This may include the portfolio's symbols, quantities, prices, and position values, together with sector allocations as percentages and amounts, and computed risk measures such as volatility, concentration, and overall risk score. On Premium, it may also include measures derived from your account's recorded history, including return and maximum drawdown. We do not send your name, email address, authentication identifier, support messages, payment information, or exchange credentials.
When you request an investment thesis for a single asset, we send only that asset's shared market and technical data. We do not send your risk tolerance, holdings, portfolio risk, name, email address, or account identifier for that thesis.
Support messages are not sent to the third-party technology provider that supports orion.
We do not keep a transcript of your orion questions. Holding-derived information is processed only to return the private orion feature you opened or requested.
This processing is part of providing private orion portfolio analysis and is not controlled by a separate consent switch. If you do not want holding-derived information sent to the third-party technology provider, do not open or request those private orion features. You can still use portfolio tracking, shared market data, alerts, and public orion scores and ideas.
Where applicable data-protection law requires a legal basis, we process holding-derived information because it is necessary to provide the private orion portfolio-analysis feature you request and to perform our agreement with you. We do not use this basis to process portfolio information for advertising or to personalize public orion content.
Connected exchanges
Linking an exchange is entirely optional. We ask only for read-only API credentials, which allow us to see balances and never to trade, transfer, or withdraw. Your API key and secret are encrypted before they are stored, are never returned to the app or shown again after you enter them, and are used only to import your balances. You can unlink an exchange at any time, which deletes the stored credentials. When a direct exchange connection is unavailable because of a regional access restriction, the encrypted read-only credential and balance request may be routed through our fallback service in Singapore. This does not change the read-only permission or allow trading, transfers, or withdrawals.
International processing
Our providers may process information in the United States, Singapore, and other countries where they or their subprocessors operate. Those countries may have data-protection laws different from the laws where you live. Where required, we use contractual and other safeguards intended to protect international transfers.
Security
Traffic between the app and our service is encrypted in transit. Particularly sensitive values — two-factor authentication secrets and exchange API credentials — are additionally encrypted at rest, and API keys and biometric device identifiers are stored only as one-way hashes. Access to your portfolio data is scoped to your account and verified on every request. No system is perfectly secure, and we cannot guarantee absolute security.
Data retention and deletion
We keep your account and portfolio data for as long as your account is active. We cannot promise that data survives changes to the systems that store it: data may be erased when we migrate, rebuild, or retire an environment, and we will not always be able to warn you beforehand. This is most likely to affect pre-release versions of the app. You can delete individual holdings and watchlist entries at any time in the app.
Raw account-activity events are retained for up to 90 days and per-day account activity summaries for up to 400 days. Account-linked recommendation serve and action history is retained until you delete your account. Crashlytics data is retained for approximately 90 days.
You can also delete your entire account from within the app (Profile → Delete Account). This permanently removes your holdings, portfolio history, watchlist, risk profile, alerts and alert history, subscription record, push tokens and preferences, saved security settings, and any connected exchange credentials, and it deletes your sign-in account with our authentication provider. It cannot be undone.
If you cannot access the app, you can request account deletion on the web at pinnaclefi.app/delete-account.
Deleting your Pinnacle Fi account does not cancel an active App Store or Google Play subscription. Billing may continue until you cancel through the store, and store billing records remain subject to the store's terms and privacy policy.
A few things survive that deletion, and we want to be upfront about them:
- Messages sent through this website's contact form. This website has no sign-in, so a message sent here is never linked to your account and deleting your account cannot reach it.
- Support correspondence and notifications. A support message sent while signed out is not linked to an account. When a support request is delivered, copies may also remain in our support mailbox or private team-notification channel even after the account-linked database row is deleted.
- Email you have sent us directly. Email sits in our mailbox as correspondence with us rather than as data in your account, and deleting your account does not erase it.
- Backups. Residual copies of data may persist in our off-box database backups for up to about 7 days, and in our database provider's point-in-time-recovery history for up to a few hours, before they age out.
If you would like correspondence removed as well, email privacy@pinnaclefi.app and we will delete it.
Your choices
- Turn any category of push notification on or off in the app.
- Opt in to or withdraw crash diagnostics in Profile.
- Choose whether to use private orion portfolio-analysis features by opening or requesting them.
- Link or unlink an exchange at any time.
- Delete individual holdings, your watchlist, or your whole account from the app.
- Request a copy of, correction to, or deletion of your data by emailing us.
Children
Pinnacle Fi is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us data, contact privacy@pinnaclefi.app and we will delete it.
Anyone under 18 may use Pinnacle Fi only with the consent and supervision of a parent or legal guardian. A parent or guardian can contact us at the address above to review, export, or delete their child's data. In parts of the EEA the minimum age for consenting to data processing without the authorisation of a parent or legal guardian is higher (up to 16); where that applies, the higher age governs.
Changes to this policy
If we make a material change to how we handle your data, we will update this page and revise the "last updated" date above.
Contact
Questions about this policy? Reach us at privacy@pinnaclefi.app.