Stoxs101 — Privacy Policy

Last updated: 2026-07-07

Stoxs101 ("the app", "we", "us") is an educational app that teaches investing fundamentals through interactive lessons and a paper-trading simulator that uses virtual money only. This policy explains what we collect, why, and your choices.

The short version

• The whole app is usable in Preview mode with no account — your progress stays only on your device and is never sent to us. (The app still fetches market prices — those requests carry only stock ticker symbols — and, if the app crashes, an anonymous crash report; see "Third-party services".)
• If you create an account, we store your email and your learning/simulator progress so it syncs across your devices.
• We do not sell your data, show third-party ads, or handle any real money.
• You can delete your account and all its data from inside the app at any time.

Information we collect

If you use Preview mode (no account): we store nothing about you. Your progress, simulated portfolio, streak, coins, and settings are stored locally on your device only, and are removed if you reset progress or uninstall the app. The app's only network requests in this mode fetch market data (stock quotes and fundamentals) and contain nothing but ticker symbols — plus, if the app crashes, an anonymous crash report (see "Third-party services").

If you create an account, we store, via our backend provider Supabase:

• Account: your email address and an authentication record (password is handled by Supabase auth and is never stored by us in plain text).
• Learning progress: lessons completed, checkpoint results and scores, XP, streak, review history.
• Simulator state: virtual cash, virtual holdings and orders, a history of your virtual trades, your practice target allocation, virtual realized P&L, a daily history of your total virtual portfolio value, earned coins, daily quest progress, cosmetics, and rewards. All amounts are virtual. We never collect or process real payment information, bank details, or real brokerage data.
• Social features (optional): if you choose a leaderboard username we store it, plus your friend connections (requests, accepted friends, blocks) and any abuse reports you file. See "Information visible to other users" below.

We do not knowingly collect precise location, contacts, photos, health data, or device advertising identifiers.

Information visible to other users

Leaderboards are opt-in: you appear on them only after choosing a username. When you do, other players can see exactly two things about you — your username and your XP total (and your resulting rank). Your email, progress details, portfolio, and everything else stay private. You can leave the leaderboards at any time by removing your username, and you can block any player (hides you from each other everywhere) or report them from the ⋯ menu next to their name; reports are stored for moderation review. There is no chat or messaging in Stoxs101.

How we use information

• To save and sync your progress and simulator state across your devices.
• To operate core features (lessons, checkpoints, the simulator, the shop).
• To keep the app secure and debug problems (diagnostic logs that do not include your password).

We do not use your data for advertising and we do not sell it.

Third-party services

• Supabase — authentication, database, and serverless-function hosting for account data (subject to Supabase's privacy practices).
• Alpaca Market Data — provides the stock quotes shown in the simulator. Requests are proxied through our backend; we send only stock ticker symbols, never any personal data.
• Finnhub — provides the company fundamentals shown in Unit 5. Proxied the same way; only ticker symbols are sent.
• Brevo — delivers account emails (signup confirmation, password reset) and receives your email address for that purpose only.
• Sentry — crash reporting. If the app crashes, we receive a technical report (device model, OS version, stack trace, and recent technical logs such as the market-data requests the app made) so we can fix the bug. Crash reports are not linked to your account and contain no lesson-progress, account, or contact data. Sentry receives nothing unless a crash occurs.

Data retention & deletion

We keep account data until you delete it. You can permanently delete your account and all associated data at any time from the app's home screen → profile menu (top-right) → "Delete account." This removes your account and cascades to all of your stored rows. Copies of deleted data may persist in our routine database backups for up to 14 days before aging out; backups are access-restricted and used only for disaster recovery. Preview-mode data can be cleared from the same screen ("Reset preview progress") or by uninstalling the app.

Your rights

Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. The in-app deletion satisfies deletion requests; for anything else contact us at the email below.

Children

Stoxs101 is intended for a general audience and is not directed at children under 13 (or the higher applicable age in your market). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

Security

Account data is protected with row-level security so each user can only access their own rows (the only exception is the opt-in leaderboard described above, which exposes usernames and XP through controlled server functions), and is transmitted over HTTPS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

Changes to this policy

We may update this policy; we will revise the "Last updated" date above and, for material changes, surface a notice in the app.

Contact

Questions or requests: d@koita.com

Stoxs101 is operated by an independent developer; contact via the email above.