Last updated: July 28, 2026
Prophit Inc. ("Prophit," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information when you use the Prophit mobile application (the "App"), visit our websites (including prophit.inc and related pages), create an account, interact with our customer support channels, or otherwise use our related services (collectively, the "Services"). This Privacy Policy is intended to give you a clear and specific understanding of our practices. Where prior versions of our privacy disclosures were shorter or less detailed, this Policy expands those disclosures so that they align with how the Services actually operate.
By accessing or using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, do not use the Services. Capitalized terms used but not defined in this Privacy Policy have the meanings given in our Terms of Service. For questions, contact us at support@prophit.investments.
Prophit Inc. is a Delaware corporation with its principal mailing address at 131 Continental Dr, Suite 305, Newark, DE 19713. Prophit operates a software and technology platform that provides investment education, market news and analysis, search and discovery tools, an AI-powered educational assistant, social and engagement features, and, where you choose to use it, an integration with a third-party brokerage that allows you to place real, self-directed orders in your own brokerage account. Leaderboards, points, rankings, and badges within the App are simulated or points-based and do not reflect real trading results.
Prophit Inc. is not a registered investment advisor, broker-dealer, bank, custodian, clearing firm, or member of FINRA, SIPC, or any similar self-regulatory organization. Prophit does not hold, custody, receive, execute, clear, or settle funds or securities. To the extent the App facilitates a connection to a third-party brokerage account, brokerage services are provided by independent financial institutions under their own terms and privacy policies, as described in Section 5 and Section 7.
This Privacy Policy applies to personal information we collect through:
This Privacy Policy does not govern the privacy practices of third parties that operate independently of Prophit, including Open to the Public Investing, Inc. ("Public Investing"), Apex Clearing Corporation, Apple, Google, Meta Platforms, Inc., our authentication provider, our product analytics provider, our subscription management provider, our market data providers, or our AI model providers. Those parties' practices are governed by their own policies. When you open or fund a brokerage account, or when you complete identity verification for that account, you are also subject to the brokerage's privacy policy and customer agreements.
We collect personal information in three primary ways: (a) information you provide directly; (b) information collected automatically when you use the Services; and (c) information we receive from third parties. The categories below describe the types of information we actually collect in connection with the Services. Not every category applies to every user. The information collected depends on how you use the App, which permissions you grant, whether you subscribe, whether you connect a brokerage account, and which features you use.
When you create or maintain an account, we may collect:
Authentication credentials (such as passwords or social sign-in tokens) are handled through our authentication provider, which stores those credentials and related legal-acceptance metadata necessary to operate your account. Prophit receives and stores account identifiers and profile fields needed to operate the Services.
We collect authentication-related telemetry, including login timestamps and related account-access events, to secure accounts, detect suspicious activity, support customer service, and maintain auditability of account access.
Depending on the features you use, we may collect:
Order records and related trading information may relate to brokerage-connected activity that is initiated through the App but executed, cleared, and custodied by third-party brokerage and clearing firms. Prophit does not custody user funds or securities.
We may collect:
Search queries may include free-text descriptions of companies, concepts, industries, or other topics you choose to explore. Voice search, if you enable microphone and speech-recognition permissions, converts spoken queries to text so we can process the resulting search query.
If you use the AI assistant (sometimes referred to in product surfaces as "Pete" or similar branding), we may collect:
User prompts and relevant context needed to generate a response are transmitted to one or more of our AI model providers as described in Section 5. You should not submit information in AI chats that you do not want processed for that purpose.
If you use social or sharing features, we may collect:
If you purchase or redeem a subscription or related entitlement, we may collect:
Payment card details for App Store purchases are processed by Apple. Prophit does not receive your full payment card number from Apple for standard in-app purchases. Our subscription management provider helps us determine what features you are entitled to use and may forward certain purchase events for advertising measurement as described in Section 5.
We may collect:
When you contact us or submit in-app feedback, we collect the content of your message, the contact information you provide, and any attachments or diagnostic details you choose to include. This may include information about bugs, feature requests, account issues, or brokerage-connection problems.
If you choose to connect or open a brokerage account through the App, we may collect and process:
Onboarding information required for identity verification — including legal name, date of birth, residential address, and government identification numbers such as a Social Security number — may be collected in the App solely to transmit to the brokerage for its KYC/AML and account-approval process. That identity-verification information is collected for brokerage onboarding, not for Prophit's independent marketing, analytics, or product-personalization purposes.
Brokerage services are provided by Open to the Public Investing, Inc. ("Public Investing"), a registered broker-dealer and member of FINRA and SIPC, with clearing and execution by Apex Clearing Corporation. Public Holdings, Inc. is the parent company of Public Investing and is not itself the broker-dealer. Your brokerage relationship, including custody of assets, trade execution, tax reporting, and regulatory identity verification, is governed by Public Investing's and Apex Clearing's agreements and privacy policies.
When you use the Services, we and our service providers automatically collect:
We derive approximate location information such as city, region, country, and timezone from IP address and device settings. We use this information to provide relevant market hours, localize content, support fraud and abuse prevention, and understand aggregate geographic usage.
You may choose to enable Face ID, Touch ID, fingerprint unlock, or other on-device biometric authentication features provided by your device's operating system. Prophit does not collect biometric identifiers or biometric information.
When you visit our websites or marketing pages, we may collect:
Website analytics and form submissions help us understand demand, operate waitlists or early-access programs, and improve our web properties. Website practices may evolve as our web surfaces expand; material changes will be reflected in updates to this Policy.
We may receive personal information from:
For ease of reading, the information described above falls into categories such as:
We use personal information for the following purposes. Each purpose below is mapped to the categories of information commonly used for that purpose.
We use account, portfolio, preference, search, AI, social, subscription, engagement, brokerage-connection, and device information to:
We use preferences, discovery interactions, search history, engagement signals, approximate location (for market hours and localization), and limited profile information to personalize educational content, ordering of discovery experiences, and in-app messaging. Personalization in the App is an analytical interpretation of limited inputs and publicly available company information. It is not personalized investment advice.
We use subscription and commercial information, together with identifiers needed to match purchases to accounts, to determine feature access, restore purchases, manage trials and rewards, and troubleshoot billing entitlement issues through Apple and our subscription management provider.
We use product analytics, including through our product analytics provider as described in Section 5.2, to understand feature adoption, diagnose friction, evaluate experiments and feature flags, monitor errors, and improve the App. This includes screen views, typed product events, application errors and exceptions, feature-flag evaluations, and AI/LLM interaction traces.
We use device identifiers (including IDFA only with App Tracking Transparency permission on iOS), app events, and related commercial signals to measure whether Prophit's own ads on Meta platforms (including Facebook and Instagram) are effective, and to optimize those campaigns. Prophit displays no third-party advertising inside the App. Advertising measurement is about Prophit's own user-acquisition campaigns, not about hosting ads for other companies inside the product.
We use contact information, notification tokens, preferences, and support content to:
We use authentication telemetry, device and technical data, IP-derived signals, brokerage-connection metadata, and support communications to detect, investigate, and prevent fraud, unauthorized access, abuse, and security incidents.
We use relevant categories of information as needed to comply with applicable law, respond to lawful requests, enforce our Terms of Service, and protect the rights, property, and safety of Prophit, our users, and others.
We may use de-identified or aggregated information to understand aggregate usage trends, develop new educational features, and improve performance. Where we create aggregated or de-identified datasets, we maintain them in a form that is not reasonably linkable to an individual and do not attempt to re-identify them, except as permitted by law for testing or compliance.
We use brokerage-connection tokens, brokerage identifiers, account status, and identity-verification information that you submit for brokerage onboarding solely to facilitate the connection or account-opening flow with Public Investing (and related clearing or verification infrastructure), and not for unrelated Prophit marketing purposes.
We share personal information with service providers and partners that help us operate the Services. We do not sell personal information to data brokers for monetary consideration. Certain advertising-measurement disclosures may constitute a "sale" or "share" under some state privacy laws; see Section 6.
We organize our recipients by purpose below. Where a recipient is a service provider, we require it to use personal information only to provide services to us or as otherwise permitted by our agreements and applicable law, except where the recipient also acts as an independent controller (for example, a brokerage with which you have a direct customer relationship, or Meta when processing advertising measurement data under its own policies).
We share account and authentication-related information with our authentication provider for user authentication, account management, identity services, and storage of credentials and legal-acceptance metadata associated with your account.
We use our product analytics provider to receive detailed product analytics so we can operate and improve the App. Prior shorter privacy notices understated the depth of this processing. The following describes it more completely and honestly:
This product analytics processing is used for Prophit's product improvement. It is not used to display third-party advertisements in the App.
We share device identifiers and app events with Meta Platforms, Inc. for measurement and optimization of Prophit's own advertising campaigns only. Events may include installs, opens, completed registration, subscription activity, and brokerage funding status. On iOS, the advertising identifier (IDFA) is used only if you grant App Tracking Transparency permission. If you deny tracking, we send only limited privacy-preserving events where allowed, including via Apple's SKAdNetwork. Prophit displays no third-party advertising in the App. Meta's use of data is also governed by Meta's Data Policy at https://www.facebook.com/privacy/policy/.
We share information as needed with Apple and our subscription management provider to process in-app purchases and subscriptions, restore purchases, manage entitlements, and troubleshoot billing state. Our subscription management provider may forward purchase events to Meta for campaign measurement as described in Section 5.3.
If you choose to open or connect a brokerage account, information is shared with Open to the Public Investing, Inc. ("Public Investing"), a registered broker-dealer and member of FINRA and SIPC, with clearing and execution by Apex Clearing Corporation. Public Holdings, Inc. is the parent company and is not the broker-dealer. Shared information may include account-connection tokens, brokerage identifiers, account status, and identity-verification information you submit for KYC/AML and account approval. Your direct customer relationship for brokerage services is with Public Investing (and, as applicable, Apex Clearing), not with Prophit.
We use our market data providers to obtain market data, fundamentals, news, and related financial information displayed in the App. Your use of market-data features may cause requests associated with your session or account to be processed in connection with retrieving that data. Market data itself is generally public company and market information rather than information about you.
When you use the AI assistant, user prompts and relevant context are transmitted to one or more of our AI model providers so they can generate responses. Do not include information in prompts that you are not comfortable transmitting for that purpose. Our AI model providers process prompts to deliver the feature and may process data under their terms and data-processing terms with Prophit.
We use our cloud infrastructure provider for databases, caching, object storage, and secrets management. Personal information processed by the Services is stored in the United States on that provider's infrastructure and related systems we control or contract for.
We use our application update and push delivery provider for over-the-air application updates and for push notification delivery infrastructure that works with Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) as platform push transports. Device tokens and notification payloads are processed as needed to deliver updates and notifications you have enabled.
We may also share information:
A current list of the specific service providers Prophit uses is available on request at support@prophit.investments.
However, under some state privacy laws, "sale," "share," or "targeted advertising" / "cross-context behavioral advertising" are defined broadly. Certain advertising-measurement disclosures to Meta — including sharing of device identifiers and app events used to measure and optimize Prophit's own ad campaigns — may constitute a "sale" or "share" under those laws, even though no money is paid to Prophit specifically for selling a list of consumer profiles, and even though Prophit does not display third-party ads in the App.
If you want to opt out of sale, sharing, or targeted advertising / cross-context behavioral advertising as those terms are defined under applicable state law, contact us at support@prophit.investments with the subject line "Privacy Opt-Out," and use the device-level controls described in Section 16. Where required, we also honor Global Privacy Control and other recognized universal opt-out mechanisms.
Prophit may receive compensation from Public Investing when a user opens a new brokerage account through Prophit. This compensation is a fixed per-account marketing payment. It is not based on order flow, transaction volume, trades, or account balances. This arrangement creates a conflict of interest because Prophit has a financial incentive to encourage users to open brokerage accounts through the integration. Full details of the commercial relationship and related disclosures are set out in our Terms of Service. This Privacy Policy describes the personal-information flows associated with brokerage connection; it does not replace the conflict-of-interest disclosures in the Terms.
We may disclose personal information if we believe in good faith that disclosure is required or appropriate to:
Where legally permitted and reasonably practicable, we may attempt to provide notice of legal demands for personal information, unless notice is prohibited or would be ineffective or unsafe.
If Prophit is involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your personal information may be transferred as part of that transaction, subject to standard confidentiality arrangements and applicable law. We will require the successor to honor privacy commitments consistent with this Privacy Policy, or we will provide notice and any choices required by law.
We retain personal information for as long as reasonably necessary to provide the Services, maintain the security and integrity of the Services, comply with legal obligations, resolve disputes, enforce agreements, and for other legitimate business purposes described in this Policy. Retention is not one-size-fits-all. The following describes our actual retention approaches by category. Where a range is given, the longer end typically applies when the data remains relevant to an active account, an unresolved dispute, a security investigation, or a legal hold.
We retain account and identity information for the life of the account and for a reasonable period after account closure or deletion request — typically up to twenty-four (24) months after closure — unless a longer period is required for legal compliance, fraud prevention, dispute resolution, or accounting. Certain authentication records maintained by our authentication provider may be retained according to that provider's retention practices and our agreements with the provider.
Login timestamps and related authentication telemetry are typically retained for approximately twelve (12) to thirty-six (36) months for security, abuse-prevention, and support purposes, unless needed longer for an active investigation or legal obligation.
Portfolio names, holdings, likes and dislikes, watchlists, order records, order failure records, industry and topic preferences, and search history are generally retained for the life of the account so the product continues to function as you expect. After account deletion, we delete or de-identify this data within approximately ninety (90) days, subject to backups, legal holds, and residual copies in disaster-recovery systems that are overwritten on a rolling basis.
AI conversation threads, messages, symbols discussed, and feedback are generally retained for the life of the account to provide conversation history and improve support quality, unless you delete specific content where the product allows or you request deletion. After account deletion, we delete or de-identify AI conversation data within approximately ninety (90) days, subject to the same backup and legal-hold caveats. Our AI model providers may retain prompts for a limited period under their agreements with us for abuse monitoring, security, and service delivery; we configure provider retention according to available controls and our contracts.
Group memberships, referral relationships, and shared-portfolio records are retained for the life of the relevant relationship or account. After deletion requests, we remove or de-identify these records within approximately ninety (90) days, except where retention is needed to prevent fraud (for example, abuse of referral rewards) for a longer period of up to twenty-four (24) months.
Subscription entitlement status, trial and reward state, unlock records, and subscription-management webhook payloads are retained for the life of the account and for a period afterward sufficient for accounting, tax, chargeback, and subscription-restoration needs — typically up to seven (7) years for commercial transaction records where bookkeeping or legal retention requirements apply, and shorter periods for ephemeral webhook payloads that are needed only for reconciliation.
Streaks, check-ins, achievements, reward grants, notification preferences, notification logs, and push device tokens are generally retained for the life of the account or until the token becomes invalid. Notification logs may be retained for approximately twelve (12) to twenty-four (24) months for deliverability debugging and abuse prevention. Invalid device tokens are removed on a rolling basis when push delivery failures indicate the token is no longer valid.
Support and feedback records are typically retained for approximately twenty-four (24) to thirty-six (36) months after the ticket or submission is closed, and longer if needed for ongoing disputes, safety issues, or legal claims.
Encrypted OAuth access and refresh tokens, brokerage user and account identifiers, and account status are retained while the brokerage connection remains active and for a short wind-down period after disconnection — typically up to ninety (90) days — unless needed longer for security investigation, fraud prevention, or legal compliance. When you disconnect or we delete the connection at your request, we delete or invalidate tokens so they can no longer be used to access the brokerage relationship through Prophit.
Legal name, date of birth, residential address, and government identification numbers collected in the App for brokerage onboarding are transmitted to the brokerage for KYC/AML and account approval. Prophit does not use that information for other purposes. Prophit does not retain government identification numbers for Prophit's own ongoing product databases. Any transient processing artifacts created during transmission are deleted when no longer needed for security, troubleshooting, or compliance, and in any event are not used to build marketing profiles.
Device and technical logs, crash reports, and diagnostic data are typically retained for approximately thirty (30) days to twenty-four (24) months depending on severity and system. Product analytics events and person-profile properties associated with an identified user are retained for the life of the analytics workspace retention configuration applicable to our product analytics project and are deleted or de-identified upon verified deletion requests to the extent technically feasible within our product analytics systems and our downstream systems. Aggregated analytics may be retained indefinitely.
App events and identifiers shared with Meta for advertising measurement may be retained by Meta under Meta's policies. Prophit retains its own campaign-configuration and high-level performance records for approximately twenty-four (24) to thirty-six (36) months for marketing analytics and budget accountability.
Website logs and early-access form submissions are typically retained for approximately twelve (12) to thirty-six (36) months, unless a shorter period is configured for server logs or a longer period is required for waitlist operations or legal compliance.
Deletion from production systems does not always mean immediate erasure from encrypted backups. Backup systems are overwritten on a rolling schedule. If information is subject to a legal hold, we retain it until the hold is released, then apply the ordinary deletion process.
We implement technical and organizational measures designed to protect personal information, including:
If you believe your account has been compromised, contact us immediately at support@prophit.investments.
If we become aware of a security incident involving personal information that requires notification under applicable law, we will notify affected individuals and regulators as required by law. Notification timing, content, and method will follow the requirements of the jurisdictions that apply to the incident and the affected individuals. Where permitted and appropriate, we may provide notice through the email associated with your account, through in-app notice, through our website, or through other reasonable means. We may also take steps to contain, investigate, and remediate the incident, including resetting credentials, invalidating tokens, or requiring re-authentication.
Depending on your state of residence and applicable law, you may have some or all of the following rights with respect to personal information we hold about you:
These rights are not absolute. Applicable law may permit or require us to deny a request in whole or in part. If we deny a request, we will explain the reasons and, where required, how to appeal.
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or any other U.S. state with a comprehensive consumer privacy law in effect, you may have additional rights under that state's law. Depending on the state, those laws may include the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act ("UCPA"), the Texas Data Privacy and Security Act ("TDPSA"), the Oregon Consumer Privacy Act ("OCPA"), and other comparable state laws.
California residents have the right to know what personal information we collect, use, disclose, and "sell" or "share" (as those terms are defined under the CCPA/CPRA); the right to delete and correct personal information; the right to limit the use and disclosure of "sensitive personal information"; the right to opt out of "sales" and "sharing" for cross-context behavioral advertising; and the right to non-discrimination for exercising these rights.
We do not knowingly "sell" personal information for monetary consideration. Certain sharing of personal information with advertising measurement partners, specifically Meta for Prophit's own campaign measurement, may constitute a "sale" or "share" as those terms are broadly defined under the CCPA/CPRA. To opt out, contact us at support@prophit.investments or use a Global Privacy Control ("GPC") signal where supported. We do not knowingly collect, "sell," or "share" personal information of consumers under the age of sixteen (16) without affirmative authorization. Because the Services are intended only for users eighteen (18) and older, we do not knowingly collect personal information from anyone under eighteen (18).
The categories of personal information we collect, the purposes for which we collect them, the categories of sources, and the categories of third parties with which we share them are described in Sections 3 through 5. Retention is described in Section 10.
Under California Civil Code section 1798.83 ("Shine the Light"), California residents may request information regarding our disclosure of personal information to third parties for the third parties' direct marketing purposes. We do not currently disclose personal information to third parties for those parties' own direct marketing purposes.
Where required by applicable state law (including in California, Colorado, Connecticut, Texas, Oregon, and other states that recognize such mechanisms), we honor recognized universal opt-out mechanisms such as the Global Privacy Control (GPC) and other legally recognized opt-out preference signals for sale, sharing, or targeted advertising, to the extent such signals are technically received and reasonably associable with a consumer and browser or device.
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island may have rights to access, correct, delete, obtain a portable copy of personal information, opt out of targeted advertising, opt out of sale, and opt out of certain profiling, as well as appeal rights, subject to the scope and definitions of each state's law. The practical steps for exercising these rights are the same: contact us as described in Section 15. Where a state law uses different terminology (for example, "targeted advertising" versus "sharing"), we will apply the request to the advertising-measurement practices described in this Policy to the extent required by that law.
To exercise any privacy right, email support@prophit.investments with:
We may need to verify your identity before fulfilling certain requests. Verification may include confirming control of the email address on the account, asking for additional account information, or taking other steps reasonably necessary to prevent fraudulent requests. If we cannot verify your identity to a reasonable degree of certainty, we may deny the request.
You may designate an authorized agent to make a request on your behalf where permitted by law. We may require proof of the agent's authority, such as a power of attorney or signed permission, and may still need to verify your identity directly.
We will respond within the timeframe required by applicable law. Under many state privacy laws, that timeframe is generally forty-five (45) days, with a possible additional forty-five (45)-day extension where permitted and needed. If we extend the time, we will inform you of the extension and the reason.
If we deny your request and your state's law provides an appeal right, our response will include instructions for how to appeal. If an appeal is denied, you may have the right to contact your state attorney general or another regulator.
We will not discriminate against you for exercising privacy rights, including by denying goods or services, charging different prices, or providing a different level of service, except as permitted by law (for example, where differences are reasonably related to the value of the data).
For the fastest response on privacy requests, email support@prophit.investments with "Privacy Request" in the subject line and include the information listed above.
In addition to rights requests, you can control certain processing directly:
Deny the App Tracking Transparency prompt when shown, or later change Settings > Privacy & Security > Tracking > Prophit. If tracking is denied, we do not access your IDFA for advertising measurement and rely only on limited privacy-preserving measurement where allowed, including SKAdNetwork.
Disable push notifications in the App's settings and/or in your device settings. If you disable notifications, we may still retain historical notification logs as described in Section 10 until deleted under ordinary retention or upon a deletion request.
Contact us at support@prophit.investments to request opt-out of product analytics associated with your account, to the extent technically feasible. Some minimal operational logging needed to provide the Services and secure accounts may continue.
If you receive marketing emails from us, you may unsubscribe using the link in the email or by contacting support@prophit.investments. Transactional emails about your account, security, or legal notices may still be sent as needed.
Use device tracking controls, GPC where applicable, and/or email us at support@prophit.investments with the subject line "Privacy Opt-Out."
Biometric unlock is optional. To disable Face ID, Touch ID, or fingerprint unlock for the App, use your device settings and the App's authentication settings. Disabling biometric unlock does not delete biometric templates from your device because those templates are stored by the operating system, not by Prophit. To modify or delete enrolled biometric data on the device, use your device settings (for example, on iOS: Settings > Face ID & Passcode or Settings > Touch ID & Passcode).
Because we do not request GPS location permission, there is no location-permission toggle for Prophit in device settings for precise location. Approximate location derived from IP address is inherent to network communication. If you do not wish for IP-derived approximate location to be associated with your account, you may request account deletion.
The App requests certain device permissions. Each permission is requested for a specific purpose. You can grant or deny permissions; denying a permission may limit the related feature.
On Android, the App may request biometric permission, fingerprint permission, and record-audio permission, corresponding to biometric unlock and voice features described above.
This Section restates and expands the biometric disclosures that are critical to understanding what the App does and does not do.
You may choose to enable Face ID, Touch ID, or other on-device biometric authentication features provided by your device's operating system to unlock or authenticate within the App. Prophit Inc. does not collect, store, transmit, retain, sell, lease, trade, profit from, or otherwise have access to your biometric identifiers, biometric information, biometric templates, fingerprints, facial geometry, voiceprints, retina or iris scans, or any other biometric data, whether or not encrypted. All biometric capture, processing, matching, and storage occurs entirely on your device within the operating system's secure hardware enclave (such as Apple's Secure Enclave), under the control of the operating system provider (such as Apple Inc. or the applicable Android device manufacturer / OS provider) and subject to that provider's terms and policies. The App receives only a binary success-or-failure signal from the operating system indicating whether the authentication attempt matched the data enrolled on your device. We have no biometric-data retention schedule or destruction policy because we do not possess any biometric identifiers or biometric information. To disable, modify, reset, or delete your enrolled biometric data, please use your device's settings. Nothing in this Privacy Policy shall be construed as Prophit Inc. collecting, capturing, possessing, receiving through trade, or otherwise obtaining biometric identifiers or biometric information within the meaning of the Illinois Biometric Information Privacy Act (740 ILCS 14), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), the Washington Biometric Privacy Act (RCW 19.375), or any similar law.
The App and Services are for users eighteen (18) years of age and older. Prophit does not knowingly collect personal information from anyone under eighteen (18). If we learn that we have collected personal information from a person under eighteen (18), we will delete it promptly. If you believe a minor has provided personal information to us, contact support@prophit.investments so we can take appropriate steps.
The App and Services are offered only in the United States and its territories. Prophit does not offer, market, advertise, or intend the App to be used by persons located in the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions outside the United States. Personal information processed in connection with the Services is stored in the United States, including on infrastructure operated by our cloud infrastructure provider located in the United States.
If you access the Services from outside the United States, any information you provide will be handled in the United States and may be subject to U.S. law. Unauthorized access from non-U.S. jurisdictions is at your own risk and may violate our Terms of Service.
The App and websites may contain links to third-party websites, applications, or services, and may display third-party market data, news, or brokerage interfaces. We do not control and are not responsible for the privacy practices of those third parties. Your use of third-party services is governed by their terms and privacy policies. This includes, without limitation, Public Investing, Apex Clearing, Apple, Meta, our AI model providers, and any external sites you open from the App. We encourage you to review the privacy policies of any third party whose services you use.
Some third-party interfaces, including brokerage account opening, identity verification, and bank-connection flows operated by Public Investing, are presented inside the App rather than in a separate browser. Although these screens appear within the App, they are operated by Public Investing and the providers it chooses, under their privacy policies and not this one. Prophit does not receive, observe, record, or store what you enter on those screens, including credentials, bank login details, and identity-verification documents. Prophit receives only the limited connection and account-status information described in Section 5.5.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this Policy. For material changes, we will provide additional notice as required by law, which may include in-app notice, email notice, or another reasonable method. Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acceptance of the updated Policy, except where applicable law requires a different form of consent. If you do not agree to material changes, you should stop using the Services and may request account deletion.
For questions about this Privacy Policy, to exercise privacy rights, or to request access, correction, deletion, portability, or opt-out, contact us at:
Prophit Inc.
Email: support@prophit.investments
Address: 131 Continental Dr, Suite 305, Newark, DE 19713
For California residents, you may also contact the California Department of Consumer Affairs:
California Department of Consumer Affairs
1625 North Market Blvd., Suite N 112
Sacramento, CA 95834
Phone: (916) 445-1254 or (800) 952-5210
Apple requires developers to provide a privacy nutrition label describing certain data collection and tracking practices. The following is a plain-language summary of the categories declared in our Apple privacy manifest (`PrivacyInfo.xcprivacy`) and related App Store disclosures. This summary is provided for transparency and is not a substitute for Apple's label in the App Store, which may be updated as Apple's taxonomy or our practices change.
Our privacy manifest declares that the App engages in tracking as Apple defines that term. Tracking-related collection is used for analytics and for Prophit's own developer advertising / advertising measurement (not for displaying third-party ads in the App).
Consistent with our privacy manifest, the following categories may be used to track you as Apple defines tracking:
Consistent with our privacy manifest, the following categories are declared as linked to your identity:
Apple's privacy label taxonomy is narrower and more formalized than this Privacy Policy. This Policy provides the fuller narrative of what we collect and why, including session replay and person profiles maintained by our product analytics provider, Meta advertising measurement, brokerage KYC pass-through, AI prompt transmission, and the many product databases that support portfolios, search, notifications, referrals, and support. If there is any ambiguity between a short App Store label and this Privacy Policy, this Privacy Policy is intended to be the more complete description of our practices, while the App Store label remains the disclosure formatted for Apple's required categories.
Prophit does not sell advertising inventory inside the App to third-party advertisers. The Meta integration described in this Policy is for measuring and optimizing Prophit's own campaigns that promote Prophit on Meta-owned platforms.
We may create and use de-identified or aggregated data for analytics, research, and business operations. We take reasonable measures designed to ensure that de-identified data cannot reasonably be used to identify you, and we do not attempt to re-identify de-identified data except as permitted by law.
We use automated processing, including feature flags and analytics-driven configuration, to operate experiments, roll out features, and personalize educational experiences. We do not use automated processing to make legal or similarly significant decisions about you such as credit eligibility determinations. If you believe profiling of a kind that produces legal or similarly significant effects is occurring and you wish to opt out where the law provides that right, contact us as described in Section 15.
This Privacy Policy is part of our overall legal framework together with our Terms of Service. In the event of a conflict about privacy practices, this Privacy Policy controls as to privacy disclosures. In the event of a conflict about brokerage compensation, account eligibility, arbitration, or other contractual terms, the Terms of Service control as to those subjects.
For purposes of this Privacy Policy: