YourStockLife · Effective August 10, 2026

This Privacy Policy explains how CCO Labs, LLC ("we," "us"), the provider of the YourStockLife mobile application (the "App"), handles information in connection with the App. By using the App, you agree to this Policy.

• Account information. When you create an account we collect your email address and a password. Passwords are never stored in plain text — they are salted and hashed before storage.
• Password reset codes. If you request a password reset, we generate a short-lived, single-use code, store only a hashed version of it, and email it to you. Reset codes expire after 15 minutes.
• Authentication token. After you sign in, a session token is stored on your device to keep you signed in. It is not shared with third parties.

The following are stored locally on your device and are not transmitted to or stored on our servers:

• Your portfolio holdings and any cost-basis information you enter.
• Your watchlist.
• Your notification preferences.

If you delete the App or clear its data, this on-device information is removed with it.

When a stock is searched or added to a portfolio, we record only the ticker symbol (e.g. "AAPL") together with a timestamp, so we can pre-compute analysis for the stocks people look at. This record is not linked to you, your account, or your holdings — we do not store who requested a symbol or how many shares anyone owns.

• We do not collect your precise location, contacts, photos, or biometric data.
• We do not use advertising identifiers, and the App contains no third-party advertising.
• We do not sell, rent, or trade your personal information to anyone.

• To create and secure your account and keep you signed in.
• To send transactional emails, such as password-reset codes.
• To operate, maintain, and improve the App.

We rely on a small number of third-party services to run the App. They process only what is needed to provide their function:

• Railway — application hosting.
• Supabase — database hosting for your account record (email and hashed password).
• Resend — delivery of transactional emails (e.g., password-reset codes).
• Market-data providers (Polygon/Massive, Finnhub) — supply stock prices, fundamentals, and related market data. They receive the ticker symbols the App requests, not your identity.
• YouTube (Google) — returns publicly available videos related to a stock.
• USASpending.gov — public U.S. government contract data.
• Apple — App Store distribution and, if enabled, push-notification delivery.
• Expo — application build and update infrastructure.

We retain your account record until you delete your account. You can permanently delete your account at any time from within the App (Profile → Delete account), which removes your account record from our database. Password-reset codes are deleted or expire within 15 minutes.

• Delete your account. Use Profile → Delete account in the App to permanently remove it.
• Access or correct. Contact us at support@yourstocklife.com to request access to or correction of your account information.
• Notifications. You control notifications in the App and in your device settings.

We use industry-standard measures, including hashing of passwords and reset codes and encrypted connections (TLS), to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The App is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice in the App.

Questions about this Policy: support@yourstocklife.com.