SolidusPrivacy policy
Solidus keeps your portfolios on your device. This policy explains, without jargon, what leaves it, where it goes and what rights you have.
1Who is responsible
Arturo Silva · Tax ID [[PENDIENTE: NIF]] · [[PENDIENTE: address]] · soporte@soliduspm.com.
2In short
- Your portfolios, transactions and prices live on your device. The app works offline.
- There are no ads, no tracking and we do not sell data.
- If you turn on sync, an encrypted copy is uploaded with a key only you hold. We cannot open it.
- The only thing that leaves your device without you doing anything is crash reports, which do not identify you.
3What data we process and why
Data that stays on your device
Portfolios, transactions, positions, prices and settings. They are stored in a local database. On a computer it is stored encrypted, with a key in the system keychain (Keychain on Mac, Credential Manager on Windows). We do not receive it.
Crash reports
If the app closes unexpectedly, a technical report (error type, app and system version) is sent to Sentry. It does not include your portfolio and does not identify you. Legal basis: our legitimate interest in fixing errors (Art. 6.1.f GDPR).
Prices and exchange rates
Prices are downloaded by your own device from the source you choose in Settings: the data source you select; with some you supply your own key (EODHD, Twelve Data, Alpha Vantage). That source receives the asset symbols and your IP address and is governed by its own policy. Your key is stored in the device keychain and is not uploaded with sync. ECB exchange rates and company logos are requested through our service; nothing from your portfolio is sent with them.
Your account (Pro only)
To sync and use the desktop app you must sign in with Apple. We receive the stable identifier Apple gives us and, unless you hide it, an email address (real or relay). We also store your subscription level and a computer fingerprint (a technical device identifier) of the activated computer, to limit use to one per account. Legal basis: performance of the contract (Art. 6.1.b).
Encrypted sync
Your database is encrypted on your device (AES-256-GCM) with a key derived from your encryption passphrase, which is separate from your account and never leaves the device. We upload that encrypted block, its version, size and date. We cannot read it. If you lose both the passphrase and the recovery code we cannot recover it; your data stays on your devices.
Subscriptions
Payment is handled by Apple; we never see your card. We use RevenueCat to check which plan you have: it receives a user identifier and the purchase status.
4Who we share data with
| Who | Purpose | What it receives |
|---|---|---|
| Apple | Sign-in and payment | What using its service involves |
| RevenueCat | Subscription status | User identifier and purchases |
| Cloudflare | Hosting of the service and this website | Encrypted copy, account and technical logs (IP) |
| Sentry | Crash reports | Technical error data, not identifying you |
| Price source you choose | Downloading quotes | Asset symbols and your IP |
Some of these providers are in the United States. Transfers rely on GDPR safeguards (standard contractual clauses or the EU-US Data Privacy Framework).
5Tracking and advertising
Solidus does not track you, does not use advertising identifiers and includes no third-party analytics.
6How long we keep data
- On your device: until you delete it or uninstall the app.
- Account and encrypted copy: while you have the account. When you delete it they are removed from our systems.
- Crash reports: Sentry's retention period, at most 90 days.
- If you cancel your subscription we do not delete your data: you keep it on your device in read-only mode.
7Your rights
You can exercise access, rectification, erasure, restriction, objection and portability by writing to soporte@soliduspm.com. You can export your data and delete your account from within the app. If you believe we have not handled your data properly you can complain to the Spanish Data Protection Agency (AEPD).
8Children
Solidus is not directed at people under 18 and we do not knowingly collect data from minors.
9Security
Data travels over HTTPS. The sync copy is end-to-end encrypted before it leaves the device. The computer database is stored encrypted at rest.
10Changes
If we change this policy in a material way we will tell you in the app and update the date above.