What we collect and why.

SmartKarobaar (“we”, “us”) is operated from Nepal. The data controller for the purposes of this policy is the operator of the SmartKarobaar mobile app and this website. Contact: support@smartkarobaar.com.

Your account: your email address and password (stored only as a hash), or your Google or Apple sign-in. With Apple we receive your name once; with Google, the name and photo on that account. Plus your preferences (theme, language, notification settings) and activity counters such as the last day you used the app.

Your portfolio and records: holdings, transactions and their notes, watchlists, price alerts (including any message you write for an alert), screener presets, reminders, multiple portfolio profiles, trade-journal entries, dividend confirmations, daily value history, and holdings you import via CSV.

Credentials stay on your phone: sign-in tokens are stored in encrypted secure storage (iOS Keychain or Android Keystore), behind your fingerprint, Face ID or passcode where you enable app lock. Our servers never receive your device passwords or biometric data.

What other people can see: your holdings, watchlist, alerts and account details are private. Only what you choose to share in community group chats is visible to others — your display name and the messages you post. Your email address is never shown to other users.

Collected automatically: crash and error reports with technical details; push notification tokens, platform and language via OneSignal; server logs (address, status, timing) for reliability and abuse prevention; and app update and performance checks.

What we do not collect: your device passwords, biometric data, contacts, precise location, photos or microphone — except images you explicitly attach to support requests.

To run the service: show your portfolio, compute P&L, check your price alerts on our servers, and send the notifications you turned on.

To answer AI questions: your question and the market data needed to answer it are processed to generate a response. We do not use your personal data to train AI models.

To fix and improve the app: crash reports and logs. To prevent abuse: rate limits and a temporary email hold after deletion. To contact you: service messages such as password resets. We do not send marketing email.

Our backend host runs the API behind the app, including alert checks, and stores your account and portfolio data. OneSignal delivers the push notifications you turn on. Google and Apple handle sign-in and app distribution. Market data flows to the app for display; your personal data is not sent to exchanges. We do not sell or rent personal data, and we do not work with data brokers.

SmartKarobaar shows no third-party advertising today and ships no ad SDK. No portfolio, watchlist, alert or account data is shared with advertisers. If an ad-supported tier or paid plan is introduced, this policy and the Terms will be updated first, with price and terms shown in the app before you buy.

Account and portfolio data: while your account exists. Deleting your account removes your holdings, journal and alerts after a 30-day grace period. Your email after deletion: 180 days, only to stop the same address opening a new account in that window. In-app notifications: market briefs 7 days, others 90 days. Crash reports and server logs age out under our providers' retention settings.

Wherever you live, you can use these rights: access and portability (export holdings as CSV or ask us for a copy); correction (edit anything in the app); erasure (request deletion as described on the delete-account page); objection and restriction (write to support@smartkarobaar.com — we respond within 30 days).

Data is encrypted in transit (HTTPS) and at rest by our providers. Each user's data is separated by access rules, so one user cannot read another's. The app can require your fingerprint, Face ID or passcode when it opens. Nobody at SmartKarobaar reads your holdings except to answer a support request you make.

SmartKarobaar is not meant for children under 16. There is no age check at sign-up, so if you believe a child has created an account, write to us and we will delete it.

When what the app collects changes, we update this page and its date in the same release. For material changes we also tell you in the app.

This landing site uses privacy-friendly analytics only: page views and outbound clicks to the app stores. We do not set tracking cookies, record sessions, or run advertising scripts here.

Questions, requests or complaints about this policy: support@smartkarobaar.com. You can also reach us via the contact page.