Your Data, Your Control
FolioTrackr is designed with a privacy-first architecture. We do NOT store your financial data on our servers. Your portfolio data lives exclusively in your personal Google Drive.
Last Updated: July 5, 2026
1. What Data We Collect
FolioTrackr collects and processes the following information:
Account Information
- Your Google account email address
- Your Google account display name
- Your Google profile picture URL
Authentication Tokens
- An encrypted OAuth refresh token to maintain your Google Drive connection
- This token is stored securely with AES-256 encryption and is used solely to read/write your personal Google Sheets
What We Do NOT Collect
- Your stock portfolio data (stored only in YOUR Google Drive)
- Your trade history or financial transactions
- Your investment amounts or returns
- Any other financial information whatsoever
2. How We Use Google Drive
FolioTrackr uses Google Drive API and Google Sheets API with the following limited scopes:
Permissions Requested
- drive.fileAccess only files created by FolioTrackr in your Google Drive. We cannot see or access any other files in your Drive.
- spreadsheetsRead and write to Google Sheets that FolioTrackr creates to store your portfolio data.
We use these permissions exclusively to:
- Create a private Google Sheet in your Drive when you create a new portfolio
- Read your portfolio data from that sheet to display in the app
- Write new trades and updates to that sheet when you add transactions
We NEVER access, read, modify, or delete any other files in your Google Drive.
3. Data Storage & Security
Our Server Stores
- Your email, name, and profile picture (for login purposes)
- An encrypted authentication token (to maintain your Drive connection)
- Portfolio metadata only (name, currency, and the Google Sheet ID reference)
Your Google Drive Stores
- All your actual portfolio data (trades, prices, quantities)
- This data is under YOUR Google account's security and access controls
- You can view, edit, or delete this data directly from Google Drive at any time
All authentication tokens are encrypted using AES-256-GCM encryption before being stored in our database. We use industry-standard security practices to protect your account information.
4. Data Deletion
You have full control over your data at all times:
- Delete your account:Use the "Delete Account" option in Settings to permanently remove all your data from our servers, including your profile, encrypted tokens, and portfolio references.
- Portfolio data in Google Drive: Since your financial data lives in your own Google Drive, it remains under your control even after deleting your FolioTrackr account. You can delete the Google Sheets directly from your Drive.
- Revoke access:You can revoke FolioTrackr's access to your Google account at any time through your Google Account Permissions page.
5. Third-Party Services
FolioTrackr uses the following third-party services:
- Google OAuth 2.0: For secure authentication and login
- Google Drive API: To create and manage portfolio sheets in your Drive
- Google Sheets API: To read and write portfolio data
We do not use any analytics, advertising, or tracking services. We do not share your data with any third parties.
6. Children's Privacy
FolioTrackr is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Your continued use of FolioTrackr after any changes constitutes your acceptance of the updated policy.
8. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
© 2026 FolioTrackr. All rights reserved.