Privacy Policy
Understand what stays on your device, what you choose to share, and how to stay in control.
Offline portfolio trackingNo developer account requiredIPO Portfolio Manager does not send your portfolio, PAN, bank references or demat references to the developer. No developer-operated account, advertising, analytics or automatic cloud sync is used in this release.
1. Who this policy covers
This policy describes IPO Portfolio Manager, an app for manually organising IPO applications and money movements, with an optional online IPO market list. The developer can be contacted at ishapesolution@gmail.com. References to “we” mean the developer of this app.
2. Information you enter
The app can store investor names or nicknames; optional PAN numbers; bank names and optional last four account digits; broker and demat names and optional last four demat digits; IPO details and dates; application quantities and prices; allotment outcomes; recorded blocked, debited and released amounts; share sales and charges; and local appearance, reminder and lock preferences. You choose what to enter. PAN is optional. We do not request bank passwords, broker passwords, UPI PINs or full bank account numbers.
These records are processed on your device to display totals, holdings, money history and reminders. Enter another person’s information only with their permission and keep it accurate.
3. Local storage and security
Portfolio records are stored in an encrypted SQLCipher database. Its key is held through the device’s secure storage. Optional app lock uses the operating system’s biometric or device-passcode authentication. The app receives an authentication result; it does not receive or store your face, fingerprint or device passcode. Security also depends on your device, operating system and how you handle backups.
4. Permissions and reminders
Notification permission supports local reminders for IPOs you track and a test notification you can request in Settings. Dates may come from the market feed or your edits. Reminders cover openings, closings, pending allotments, held shares on listing day and expected fund releases. Times use Asia/Kolkata: generally 9 AM, an additional closing-day follow-up at 3 PM, and allotment follow-ups at 6 PM. Up to 60 upcoming reminders are scheduled and refreshed on app launch, record changes and enabling reminders. Generic notification text does not include PAN, investor names or amounts. Delivery depends on device settings; reminders do not confirm allotment or actual bank activity. Looking up this timezone does not use GPS.
The app does not request Camera, Photo Library, Contacts, Microphone or Location permission. Backup import opens the system document picker so you can choose a file. This is not a request to browse your photo library. You can disable notifications in the app or device Settings and change app-lock settings in the app.
5. Backups you choose to export
Backups are created only when you request an export. They contain your portfolio, including any saved PAN, and are protected using AES-256-GCM encryption with a password-derived key. The password is not stored by us and cannot be recovered by us.
You choose where the encrypted file goes using the system share sheet, such as local storage, a cloud drive or another app. This is a transfer you initiate to your selected destination, not an automatic upload to the developer. That destination’s privacy practices apply. Temporary export files are removed by the app after the sharing flow; copies saved by you or another service remain under your control.
Restore reads the file you choose, decrypts and validates it locally, and replaces current records only after confirmation. There is no automatic developer-hosted backup or cloud synchronisation.
6. PAN copying and external registrar sites
The app can copy PAN to the system clipboard when you tap Copy PAN and open selected registrar websites in your external browser. PAN is not inserted into a website URL or sent automatically by the app. You decide whether to paste or enter it on the registrar’s page. Clipboard content is subject to your device and clipboard settings.
When you open a website, that site and your browser may process information such as IP address, browser details and information you enter, under their own policies. The developer does not receive those submissions. Allotment results must be updated manually in this version.
7. Online market data and service providers
Opening the IPOs tab requests a shared public IPO list from our backend hosted on Cloudflare. The backend periodically obtains market data from IPO Guru. Your portfolio, PAN, investor names, bank and demat references, applications and money movements are not included in these requests. Search and filters run on your device. Your device does not send the provider API key or contact IPO Guru directly to fetch the list.
Cloudflare processes connection information such as IP address and technical request metadata to deliver and secure the service. Our Worker code does not record visitor IP addresses or request logs, and Worker observability is disabled. Cloudflare may process or retain infrastructure and security information according to its own practices. See Cloudflare’s privacy policy. The backend stores the latest public market snapshot and refresh quota information and sanitized refresh diagnostics (time, result, upstream status or row count), not your portfolio. The app caches market data on your device so previously fetched information may remain available offline. Opening the IPO Guru attribution link launches its website under its own privacy practices.
There is no advertising SDK, developer analytics, developer crash-reporting service or account registration. We do not sell personal information or track you across other companies’ apps and websites. Apple or Google may separately process store, diagnostic or platform information under their own policies and your settings.
8. Support email and this website
If you email us, we receive the email address, message and attachments you choose to send. We use them to respond, troubleshoot and maintain necessary support records, and retain them only as long as reasonably needed for those purposes or applicable obligations. Our email provider processes correspondence under its own terms. Do not send PAN, financial records, backup passwords or unredacted screenshots unless truly necessary; we do not need them for routine support.
This policy and support page are hosted on GitHub Pages. GitHub may process visitor IP addresses and technical request information to operate and secure hosting. This website contains no developer-added analytics, ads or tracking cookies. See GitHub’s privacy statement. Website visits and voluntary email correspondence are separate from portfolio storage and market-feed requests in the app.
9. Retention, deletion and your choices
Your local portfolio remains until you delete records, replace it through restore, or delete the app and its local data. Linked entries may need to be deleted first. Deleting the app can permanently remove records; export a backup first if you want to keep them. Operating-system secure-storage items may persist separately according to platform behaviour.
Deleting the app does not delete backup copies you saved in Files, cloud storage, email or other destinations. Delete those copies separately. We cannot view, recover or delete the portfolio stored on your device. For support correspondence or a privacy request, email ishapesolution@gmail.com. Depending on your jurisdiction, you may have additional access, correction, deletion or complaint rights for information we actually hold.
10. Children
The app is a personal finance record-keeping utility and is not specifically directed at children. We do not knowingly solicit children’s personal information through a developer-operated account or service. If you believe a child has sent us personal information by email, contact us so we can address it.
11. Policy updates
We will update this page when the app’s practices change and revise the effective date. Material changes, such as adding online services or analytics, will be reflected in the app’s disclosures and permissions as applicable. Older offline releases do not make the market-feed network requests described above.
12. Contact
Privacy and support: ishapesolution@gmail.com.