Last updated: October 14, 2026
At UpdraftFi, your financial data stays on your device by default. This policy explains what we collect, what stays local, and what happens if you enable optional features.
Email address and name from your Google account for authentication.
Your billing plan and subscription status (Free or Pro tier).
Basic analytics to improve our service (no personal financial details). For signed-in users this includes which actions you take in the app and the calendar days you were active, so UpdraftFi can measure retention. Daily activity stores only the date, not the time, IP address, or device. To tell crawlers and other automated traffic apart from people, page-visit analytics check the browser user-agent and keep only the result (browser or bot, plus the bot's name); the user-agent itself is not stored.
We collect your IP address, browser user-agent, browser and operating system, device type, approximate country or Tor network indicator when supplied by our infrastructure, and session activity times. These records are linked to your account and stored on our servers to show your signed-in devices and help detect unfamiliar account activity. We do not store city or region in session records. The country may reflect a VPN or Tor exit location rather than your physical location. We do not send your IP address to an additional geolocation service for these alerts.
Session records are retained while the corresponding authentication session exists, with no separate fixed time limit. They are automatically deleted when that authentication session is deleted, including when you revoke a device through the security settings, or when you delete your account.
Error logs, system diagnostics, and user identifiers (including email addresses) for troubleshooting, support purposes, and service quality improvements.
To provide and maintain your account, process transactions, and deliver core features.
We may contact you regarding service issues, account problems, technical errors, security alerts, or important service updates. This ensures we can provide proactive support when issues affect your account. We may also send periodic product updates and feature announcements. You can unsubscribe from these at any time via the link in each email.
We use session and device information to let you review and sign out devices, and to send alerts about new sessions or changes in browser, operating system, country, or Tor network status. The approximate country is derived from network information; we do not request access to your device's GPS for these alerts.
We log user identifiers (including email addresses) when errors occur to help us diagnose issues, provide support, and improve service reliability. This allows us to proactively reach out if your account experiences problems.
We use industry-standard encryption, secure cloud infrastructure (Supabase), and read-only blockchain connections. All data is encrypted at rest and in transit.
Error logs and diagnostic data are stored securely and accessed only by authorized personnel for support and troubleshooting purposes.
By default, your financial data stays in your browser's local storage (IndexedDB). This data is not encrypted for performance and usability. Your device's lock screen and browser sandboxing provide protection.
Infrastructure Layer: All database storage is encrypted at rest by default via Supabase/AWS, protecting against physical disk theft and hardware disposal.
Application-Layer Encryption: Wallet addresses are encrypted using AES-256-GCM with server-side keys to enable scheduled portfolio fetching even when you're offline. This data is NOT stored in plaintext. Accessing it would require database access AND encryption key access AND writing specific decryption code.
For more details about our encryption architecture, see our Security page.
Export your data anytime
Delete your account and all your data at any time from your account settings. This removes your snapshots, backups, and connected wallets and exchanges, and cancels your subscription.
Access and correct your information
Opt out of analytics (contact us)
Questions about privacy or a request about your data?
UpdraftFi is an independent product based in Switzerland.