Privacy

The email address you sign up with, an optional display name and profile picture, and the portfolio you enter: accounts, transactions, and a daily record of what your holdings were worth.

Your password is stored only as an Argon2id hash. It cannot be reversed, and nobody here can read it or tell you what it is.

We do not connect to your exchanges, wallets or bank. There is nothing to link and no API keys to hand over, so we never see a balance you did not type in yourself.

Your portfolio, in full. It is stored as ordinary rows in our database. Anyone with database access could read it.

This is worth stating plainly because it used to be otherwise. Xtraky was built end-to-end encrypted: your data was sealed in your browser under a key derived from your password, and the server genuinely could not read it. That was removed in August 2026, because it made ordinary things — notifications, biometric unlock, password reset — impossible rather than merely difficult.

What keeps your portfolio yours now is access control, not cryptography: every query is scoped to your account, and the database is not reachable from the public internet.

Share links. When you publish a snapshot, it is encrypted in your browser under a key that lives only in the link itself, after the #. Browsers never send that part to a server, so we store a snapshot we cannot open. Anyone with the link can read it; we cannot.

Encrypted backups. If you export one with a passphrase, that file is sealed on your device and we never hold the passphrase or the file.

Nobody, and we do not sell it. There is no advertising, no analytics product, and no third party receiving your portfolio.

Two services are involved in running the app:

• Amazon Web Services hosts the app, processes requests, stores your portfolio, and delivers email — password reset links, and nothing else.
• Expo relays push notifications to your device. If you turn alerts on, the token for that device and the text of each alert pass through them on the way to Apple.

Prices come from CoinGecko for cryptocurrencies and Yahoo Finance for stocks and ETFs. Those requests ask what an asset is worth, never who is asking: one fetch serves every user, so neither provider can learn whose portfolio a holding belongs to.

If you turn on alerts, we store a push token for that device so we can reach it. Turning them off stops delivery; signing out removes the registration entirely.

Notification text never contains an amount. A lock screen is read by whoever is nearest, so an alert says your portfolio moved by a percentage, never by a figure.

A widget cannot run your account, so the app writes the few figures it needs — your total, the day's change, and a short value history — into a private container on the device that only Xtraky and its widget can read.

That file stays on your phone. It is never uploaded, and the widget itself makes no network requests: it draws whatever the app last wrote. Removing the widget or signing out clears it.

• No advertising, and no advertising identifiers.
• No selling or sharing of your data.
• No third-party analytics or session recording.
• No tracking across other apps or websites.
• No access to your contacts, location, or photos beyond a picture you choose.

Deleting an account deletes the portfolio with it — accounts, transactions, snapshots and push registrations are removed by the same operation, not left behind as orphans.

Backups you exported are yours and are not affected; we do not hold a copy.

Xtraky is not intended for anyone under 13.

If this changes in a way that affects what we can read or who receives your data, the change will be described here rather than summarised as “updated our policy”. The August 2026 change above is written out for exactly that reason.

Questions, or a request to delete your data: support@xtraky.com