Privacy Policy

Information We Collect

Account information. When you create an account we collect your email address, an optional display name, and authentication credentials managed securely via Supabase Auth. We support email/password, Sign in with Apple, and Google sign-in. We do not store raw passwords or your social sign-in tokens.

Profile and preferences. Your name, your device’s time zone (auto-detected for scheduling), your chosen briefing length and voice, the content sections you enable, your delivery time, and your notification preferences.

Portfolio and financial holdings. The stocks, funds, and cryptocurrencies you add to your portfolio and watchlist — ticker symbols and, for holdings, the quantities you enter (including fractional cryptocurrency amounts). This is the core information used to personalize your briefings.

Brokerage account information (only if you connect one). If you choose to link a brokerage account, we use Plaid to do so. Plaid securely handles your brokerage login — we never receive or store your brokerage username or password. From Plaid we receive your account and holdings information (positions, symbols, quantities, and balances) so we can keep your portfolio in sync. The access token Plaid issues us is stored encrypted. See “Brokerage Connections (Plaid)” below.

Briefings and listening activity. The audio briefings and transcripts we generate for you, your listening history, and any insights or moments you save within a briefing.

Usage and analytics. First-party app activity such as app opens, session start/end times, which briefings and sections you play and for how long, and whether you opened a notification. This is used to operate and improve the service. This same anonymous, non-identifying product-usage activity is also processed by Google / Firebase Analytics — keyed only to a random account identifier, with advertising identifiers (IDFA) and ad personalization disabled, so this product-usage data is never used to track you across other apps or websites and is never shared with an advertising network. (Advertising measurement is a separate, permission-gated activity — see “Advertising & Measurement” below.) This analytics collection is optional: you can turn it off at any time in Settings → Privacy.

Device and performance information. Your device model and type, operating system and version, app version, network connection type, your country (derived from your device’s language/region setting, not from GPS or location services), whether the app is running in a simulator, your notification-permission status, and audio-quality measurements such as load times, buffering, and playback errors. We also collect a push-notification token (via Expo push and the Apple Push Notification service (APNs)) to deliver notifications.

Subscription information. Your subscription tier and purchase receipts, processed via the Apple App Store, Google Play, and RevenueCat. We do not receive or store your full payment-card details.

Advertising measurement. If you install Briefr after seeing one of our ads, and only with your permission, we collect your device’s advertising identifier (IDFA) and a Meta-generated anonymous install identifier so we can tell which ads brought people to Briefr. Your subscription events (trial started, subscription purchased) are also reported to Meta for the same purpose. See “Advertising & Measurement” below for the full detail and how to turn this off.

We do not collect your precise location, your contacts, your photos, or a device fingerprint, and we never collect the name you have given your device. We do not sell your personal information. We do not use your holdings, watchlist, briefing content, or listening history for advertising, and we never share those with an advertising network.

Cookies & On-Device Storage

Briefr is a mobile app and does not use advertising or cross-site tracking cookies. We use secure on-device storage (the platform keychain) to keep you signed in and to cache your preferences and recent briefings so the app works reliably and loads quickly. Clearing this data signs you out and removes the local cache; it does not delete your account.

Advertising & Measurement

We advertise Briefr on Meta’s platforms (Facebook and Instagram). To understand which of our ads actually bring people to Briefr — and so we stop paying for ads that do not work — we measure the link between an ad and what happens afterwards. This section explains exactly what that involves.

We ask first. The first time you reach our subscription screen, iOS will show you Apple’s App Tracking Transparency prompt. If you decline, we do not collect your advertising identifier (IDFA) at all. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking.

What is shared with Meta. An anonymous per-install identifier generated by the Meta SDK; your advertising identifier (IDFA), only if you granted permission above; the fact that you installed and opened the app; a small, fixed list of milestone events — completing sign-up, viewing the subscription screen, and receiving your first briefing; and your subscription events (trial started, trial converted, subscription purchased), which are sent to Meta by RevenueCat from our servers rather than from your device.

What is never shared with Meta. Your holdings, watchlist, or any portfolio values; your briefing audio, transcripts, or saved insights; your listening history; your brokerage connection or any data from it; your password or authentication tokens; and your precise location. Meta receives measurement signals about advertising only — never the financial content of your account.

How to opt out. Decline (or later revoke) the tracking prompt described above. Declining stops IDFA collection and, under Apple’s rules, blocks the app’s tracking-related network connections. You can also opt out of product analytics separately in Settings → Privacy.

Meta’s handling of this information is governed by the Meta Privacy Policy. Because this involves sharing limited information with an advertising network, Apple classifies it as “tracking”, and our App Store privacy label reflects that.

How We Use Your Information

We use your information to: create and personalize your audio market briefings based on your holdings, watchlist, and preferences; retrieve current market data, news, earnings, and analyst information relevant to the symbols you follow; generate the spoken (text-to-speech) audio of your briefings; deliver notifications when a briefing is ready or if there is a service issue; manage your subscription and entitlements; and monitor, diagnose, and improve the reliability, performance, and cost-efficiency of the service.

Brokerage Connections (Plaid)

Linking a brokerage account is optional. When you link one, Briefr uses Plaid Inc. to establish the connection. You authenticate with your brokerage through Plaid’s interface; Briefr does not see or store your brokerage credentials. Plaid provides us with your investment account and holdings data, which we use solely to populate and refresh your portfolio inside Briefr. Plaid’s handling of your information is governed by the Plaid end-user privacy policy. You can disconnect a brokerage at any time in the app, and deleting your account removes the stored (encrypted) access token and the holdings synced from it. Brokerage connections are currently limited to U.S. institutions.

AI and Market-Data Processing

To produce your briefings, the symbols you follow and the briefing script are processed by third-party AI and market-data providers: OpenAI generates the briefing text; Perplexity supplies narrative market data (news, earnings, analyst commentary, macro context); InsightSentry and Yahoo Finance provide stock quotes and search; CoinGecko provides cryptocurrency prices (we send it only coin identifiers, never personal data); and LemonFox.ai (with Inworld.ai as a fallback) converts the briefing text to speech. We send these providers only what is needed to generate your briefing (e.g., ticker symbols and the briefing script); we do not send them your brokerage credentials, email, or password. Each provider processes data under its own privacy terms.

Third-Party Services

Briefr relies on the following service providers, each governed by its own privacy policy: Supabase (database, authentication, and file storage, hosted in the EU region); OpenAI (briefing text generation); Perplexity (narrative market data); InsightSentry and Yahoo Finance (market quotes and search); CoinGecko (cryptocurrency prices); LemonFox.ai and Inworld.ai (text-to-speech audio); Plaid (brokerage account connection); RevenueCat (subscription management); Railway (backend hosting); Expo and the Apple Push Notification service (APNs) (push-notification delivery); Google / Firebase Analytics (product-usage analytics), governed by Google's privacy policy; Sentry (crash and error diagnostics); Meta Platforms (advertising measurement only — see “Advertising & Measurement” above); and the Apple App Store / Google Play (payments).

Data Retention

We retain your account and portfolio data until you delete your account. Generated briefings and their audio are retained according to your plan’s archive window (Members retain a 90-day archive). First-party usage and device/performance analytics are retained for up to 180 days. Deleting your account removes your personal data, holdings, brokerage links, and briefings as described in “Your Rights”. When you delete your account, any associated product-usage analytics held by our analytics processor (Google / Firebase Analytics) is deleted, or its deletion is requested from that processor.

Data Storage & Security

Your data is stored securely with industry-standard encryption in transit (HTTPS/TLS) and at rest. Row-Level Security in our database ensures users can only access their own data, and privileged account fields (such as subscription and admin status) are protected from client modification. Brokerage access tokens are stored encrypted. We use trusted cloud infrastructure providers with appropriate technical and organizational safeguards.

Your Rights

You have the right to access, correct, export, or delete your personal data at any time. You can delete your account from Settings → Delete Account, or by emailing contact@briefrapp.com; deletion removes your personal data, holdings, brokerage connection links, and briefings. If you are in the European Economic Area or the United Kingdom, you have additional rights under the GDPR / UK GDPR, including data portability, the right to restrict or object to processing, and the right to lodge a complaint with your local data protection authority. If you are a California resident, you have rights under the CCPA/CPRA; note that we do not sell or share your personal information, so no “Do Not Sell or Share” action is required, and you may exercise your access and deletion rights as described above.

International Users

Briefr is operated by Astute Labs Pty Ltd in Australia and uses cloud providers that may process data in the European Union and the United States. Where required, we rely on appropriate safeguards for any cross-border transfer of personal data.

Children’s Privacy

Briefr is intended for adults making their own investment decisions and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the app and on briefrapp.com and updating the effective date above. Your continued use of Briefr after changes are posted constitutes your acceptance of the updated policy.

Contact Us

Questions or requests: contact@briefrapp.com. This service is operated by Astute Labs Pty Ltd (ABN 76 688 109 720), Victoria, Australia.