Privacy Policy

Last updated September 26, 2026

The short version: we keep what's needed to run your account and sync it between your devices. We don't sell your data or show it to advertisers. On the free plan, Google shows ads, and they're only personalized if you allow it. You can delete everything from inside the app.

This policy covers the BullFrog app and this website, tradebullfrog.com. "BullFrog", "we" and "us" mean the people who make and run BullFrog.

What we collect

Your account

Your name and email address, and your password. Passwords are stored only as a salted hash by our authentication provider, never as the password itself.

Your plan

Whether you're on Free or Pro, and when a free trial ends. Apple tells us whether your subscription is active; we never see your payment details.

What you add to BullFrog

Your watchlist, your portfolio (symbols, trades, share counts and average costs) and your price alerts. These are stored with your account so they appear on every device you sign in on.

Brokerage accounts you link (optional)

If you choose to link a brokerage account, the connection is made through Plaid. You sign in to your brokerage on Plaid's page, not ours, so we never see your brokerage username or password. Plaid gives us:

• the name of the institution,
• the investments you hold now, and
• up to 24 months of investment transactions (buys, sells and transfers).

We turn those into trades in your BullFrog portfolio. We also keep the access token Plaid issues, only on our server, so we can refresh your holdings. It's never sent to the app. The connection is read-only: BullFrog can't place trades or move money. You can unlink an account at any time, and we then ask Plaid to revoke the connection and delete the token. Plaid's handling of your data is covered by Plaid's End User Privacy Policy.

Devices and sign-ins

For each device you sign in on, a session record with a device label (for example "iPhone app") and when it was last used. The session token itself is stored only as a hash.

If you use parts of the app without an account, such as price alerts or roadmap voting, the app creates a random device identifier to keep them attached to your device. It isn't linked to your identity, your Apple ID or any advertising identifier.

Notifications

If you turn on push notifications, your device's push token, so price alerts and your morning brief can reach you.

Feedback and bug reports

If you send a bug report or feature request, or vote on the roadmap, we keep what you write and, if you attach one, a screenshot. We also keep your device model, OS version, the app version and build, and the screen you were on, to help us reproduce the problem.

Server logs

When the app talks to our server, we log the IP address a request came from, the kind of device and what was requested. We use these logs to run and secure the service, for example to slow down repeated wrong passwords.

What we don't collect

We don't collect your location, contacts or photos (other than a screenshot you choose to attach to feedback), and we don't use analytics SDKs. The only third-party code in the app that collects data about your device is Google's ad SDK on the free plan, described under Advertising below. This website sets no cookies and runs no analytics.

How we use it

Only to provide and improve BullFrog: to sign you in, sync your data, check your price alerts and send notifications, show analysis of what you hold and watch, handle your subscription, answer you when you contact us, fix bugs, and keep the service secure.

AI summaries

Pro features such as AI summaries and the morning brief are written by a language model. The model is given market facts, such as prices, indicators and news, and the symbols you hold or watch. It is not given your name, email address, account details or brokerage data. The model may run on infrastructure operated by an AI provider we contract with, which may only process this information to produce the text for us.

Who else is involved

We share data only with service providers that help us run BullFrog, and only what each one needs:

• Supabase hosts our server, database and sign-in, and sends account emails such as password resets.
• Plaid connects brokerage accounts, if you choose to link one.
• Apple processes App Store payments and delivers push notifications through the Apple Push Notification service, which receives your push token and the text of the notification.
• An AI provider writes AI summaries, as described above.
• Market data providers (such as Yahoo Finance, Alpaca, Finnhub, the SEC and the Federal Reserve) are asked for prices, news and filings about symbols, including ones you hold. These requests come from our server and carry no information about you.
• Google serves ads on the free plan, as described under Advertising below.
• Cloudflare hosts this website.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or of BullFrog. If BullFrog is ever sold or merged, your data would move with it under this policy, and we'd tell you first.

Advertising

If you're signed in on the free plan, BullFrog shows banner ads served by Google AdMob. BullFrog Pro has no ads, and Google's ad SDK doesn't start for Pro subscribers.

To choose and measure ads, Google's SDK collects information from your device directly, not from us. This includes your IP address (and the rough location it implies), device and OS type, app information, an identifier for your device, and how you interact with ads. We never give Google, or any advertiser, your name, email address, portfolio, watchlist, alerts or brokerage data.

You choose whether ads are personalized:

• Where the law requires consent (for example the EU, UK and some US states), Google's consent form asks you first. You can change your choice later in Profile, then Settings (the gear icon), then Ad privacy choices.
• iOS then asks whether BullFrog may track you. If you allow it, Google can use your device's advertising identifier to show ads based on your activity across other apps and websites. If you decline, you still see ads, but they aren't personalized with that identifier. You can change this at any time in your iPhone's Settings, under Privacy & Security, then Tracking.

Google handles this data under its own policies. See how Google uses information from apps that use its services.

We don't sell your data

We have never sold personal data and don't sell it now, and we don't give it to data brokers. If you allow tracking, the ad data Google collects through its SDK may count as "sharing" for targeted advertising under some US state laws, such as California's. You can opt out of that by declining tracking, or by turning it off in your iPhone's Settings as described above.

Where it's stored

Our servers are run by Supabase in Canada. If you live elsewhere, your data is transferred to and processed in Canada. Some of our service providers, including Apple and Google, process data in the United States and other countries.

How long we keep it

• Account data is kept until you delete your account.
• Linked brokerage connections are kept until you unlink them or delete your account.
• Feedback is kept while it's useful for improving BullFrog. When you delete your account, it's unlinked from you.
• Server logs expire on their own after a short period.
• Backups are overwritten in the normal backup cycle.

Deleting your account

In the app, go to Profile, then Settings (the gear icon), then Delete account. We delete your account, profile, sessions, watchlist, portfolio, price alerts and badges. We disconnect any linked brokerage accounts at Plaid and unlink your devices and their push tokens from your account. Any bug reports or feature requests you sent are kept but no longer linked to you.

Subscriptions are billed by Apple, so cancel yours in your iPhone's Settings. The app takes you there before deleting your account. Deleting the app or your account doesn't cancel the subscription.

If you can't use the app, email us from the address on your account and we'll delete it for you.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it, and we'll respond within 30 days. Depending on where you live (for example the EU, UK, Canada or California), you may have further rights, such as to object to or restrict processing, to move your data to another service, or to complain to your local data protection authority. You can also opt out of personalized ads at any time, as described under Advertising. We won't treat you differently for using these rights.

Where the law asks for a legal basis, we process your data to provide the service you signed up for (contract), to keep it secure and improve it (legitimate interests), and where the law requires it (legal obligation).

Security

Data is encrypted in transit. Passwords and session tokens are stored only as hashes. Repeated wrong passwords are slowed down, and changing your password signs out your other devices. Brokerage access tokens are readable only by our server. No system is perfectly secure, but we work to protect your data, and we'll tell you promptly if a breach affects you.

Children

BullFrog is for adults 18 and over. We don't knowingly collect data from anyone younger. If you believe a child has given us data, contact us and we'll delete it.

Changes

If this policy changes in a way that matters, we'll tell you in the app before the change takes effect, and update the date at the top.

Contact

Questions, or a request for a copy of your data: privacy@tradebullfrog.com.