Privacy Policy

What we collect

• Account information. Your email address, and either a password (if you sign up directly) or basic profile info from Google (your name, email, and profile picture) if you choose to sign in with Google. If you use Google sign-in, we never see or store your Google password.
• Your profile. An account ID we generate, a display name (the part of your email address before the @, or the name Google gives us), whether your address has been confirmed, and where your account stands: trial or subscriber, and when a trial ends.
• Your email settings. Whether you want each of the emails The Desk can send you: alerts when one of Gary's levels is touched, the signals digest, and the note when Gary buys. You switch them on My Account, and each of those emails links to it.
• Feedback you send. The text you type, which screen of The Desk you sent it from, when, and your email address as it was at that moment, so we know who to answer.
• Ticker requests. When you ask Gary to cover a ticker, we keep the ticker symbol, when you asked, and which account asked.
• Signals you flag. When you tap "Ask Gary about" a signal, we keep which signal, when, and the note if you wrote one, against your account.
• Charts you pull. On the website's live chart page we note the ticker symbol and time span of each chart you load, against your account, to limit how many can be pulled in an hour and a day. A nightly clean-up deletes those notes once they are 48 hours old.
• Usage of the app itself. When you're signed in, we record which parts of The Desk you use, tied to your account: pages you open, buttons and links you click (including which stock tickers you click on, and links out to Substack, the podcast and TrendSpider), and whether certain cards or upgrade prompts were shown on your screen. For searches we only note that a search happened and roughly how many results it returned — we never record what you type. We use this only to see what's useful and improve The Desk. We never sell it or use it for advertising. Detailed records are kept for 180 days, then only combined daily totals that don't identify you remain; deleting your account deletes your detailed records.
• Usage of the iPhone and Android apps. The apps record less than the website does. They do not report the screens you open or what you tap. Four things are noted, tied to your account, in the same records and for the same 180 days: that an Archive search happened and roughly how many results it returned (never what you typed), that you sent feedback, that you asked for a ticker, and that you flagged a signal.
• Anonymous site visits. We also use Vercel Web Analytics, a cookie-free service that counts anonymous page visits across the site (not tied to your account).
• A login session cookie. Just enough to keep you signed in. No tracking or advertising cookies.
• A display setting. If you choose the light or the dark look on the website, a second cookie remembers that choice on that device. It says nothing about who you are.
• In the apps, a sign-in token. The iPhone and Android apps have no cookies. To keep you signed in they hold a session token on your device, in the device's protected credential storage (the Keychain on an iPhone). Signing out removes it.

The apps do not ask for your location, your contacts, your photos, your camera or your microphone, and they do not read your device's advertising identifier.

No advertising, no tracking across apps

The Desk shows no advertising and contains no advertising software, on the website or in the apps. The only measurement is what is described above. We do not track you across other companies' apps or websites.

Who we share it with

Only the services that make The Desk work:

• Supabase, who hosts our database and handles account authentication.
• Vercel, who hosts the website itself, and the service the apps talk to.
• Google, only if you choose to sign in with Google — they confirm your identity to us, we don't get your Google password.
• Resend, who delivers the emails we send you. They receive your email address and the email itself.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

Pictures that come from somewhere else. Some pictures are hosted by another company: company logos by Financial Modeling Prep, the charts from Gary's newsletter by Substack, and the still pictures of his videos by YouTube. Your browser fetches the logos from Financial Modeling Prep directly, and the apps fetch the logos, the charts and the video pictures directly. We send those companies nothing about you or your account, but, as with any picture on the internet, the company serving it sees the request: your IP address, and which picture was asked for.

Links out. The Desk links to Gary's shows and newsletter on YouTube, Substack and the podcast apps, and to tools he uses such as TrendSpider. Once you follow a link you are on their site, under their privacy policy, not this one.

Deleting your account

You can delete your account yourself at any time from My Account, on the website or in the apps. It happens immediately and cannot be undone.

What is removed from The Desk's database, straight away:

• Your login: your email address and password, or the link to your Google account, and every session signed in to it.
• Your profile: your display name, your account's status and your email settings.
• The signals you flagged, and the notes you wrote on them.
• The notes of which charts you pulled.
• Your detailed usage records.

What is kept:

• Feedback you sent. Each message stays in our feedback list with the email address your account had when you sent it and the screen it was sent from. It is no longer linked to an account, because there is no account.
• Ticker requests. The ticker stays on Gary's request list with nothing attached that says who asked.
• Combined usage totals. The daily totals described above, which do not identify you.
• A record of the deletion, if we did it for you. When a member of our staff deletes an account on request, we keep the email address, the date, and who did it. Deleting your own account from My Account leaves no such record.

To have the feedback you sent removed as well, or anything else connected to you, write to us at dailystockpick.app@proton.me from the address the account used.

Your other choices

You can turn each email on or off from My Account. You can also ask us to delete your account for you, and anything else associated with it, by contacting us at dailystockpick.app@proton.me. If you signed up with a password, you can change it from your account; if you used Google, you manage that connection from your Google account settings.

Children's privacy

The Desk is not directed at, and is not intended for use by, anyone under 18.

Changes to this policy

We may update this policy as the product changes. We'll update the "Last updated" date above when we do.

Contact

Questions about this policy: dailystockpick.app@proton.me.