Privacy Policy

1.1 Information You Provide Directly

When you create an account or interact with the Service, we may collect the following information:

• Account Information: Your name, email address, and profile picture, as provided through Apple Sign In or Google Sign In.
• User Preferences: Your selected market interests, asset categories, preferred analysts, watchlist configurations, and notification preferences set during onboarding and subsequent use.
• User-Generated Content: Comments, feedback, and other content you post through the Service's social features.
• Communications: Any correspondence you send to us, including support requests sent to privacy@joingist.com or through joingist.com/support.

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information:

• Usage Data: Information about how you interact with the Service, including signals viewed, AI chat queries submitted, assets followed, analysts followed, features used, session duration, and navigation patterns.
• Device Information: Device type, model, operating system version, unique device identifiers, language settings, and time zone.
• Log Data: IP address, access timestamps, app version, referring URLs, and error/crash logs.
• Subscription Data: Information about your subscription status, plan type, purchase history, and billing events, processed through Apple's App Store and RevenueCat.

1.3 Information from Third-Party Services

We may receive information from the following third-party services:

• Apple Sign In / Google Sign In: Name, email address, and profile picture associated with your Apple or Google account.
• RevenueCat: Subscription status, plan details, trial status, and billing events for subscription management purposes.

We use the information we collect for the following purposes:

Gist uses artificial intelligence technologies, including large language models (LLMs) and natural language processing (NLP), to analyze financial data sources and generate the signals, trade setups, and AI chat responses that comprise the core of the Service.

3.1 AI Chat Data

When you use the Gist AI chat feature, your queries are processed by AI models to generate responses. Your AI chat queries may be stored temporarily to provide contextual responses within a session. We do not use your individual AI chat queries to train or fine-tune our AI models.

3.2 Signal Processing

The Service analyzes publicly available financial data sources using AI to extract trading signals, sentiment, and trade setup parameters. This processing is performed on the data sources themselves and does not involve your personal data.

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service:

• Supabase: Authentication and database infrastructure. Processes account information for login and data storage.
• RevenueCat: Subscription management platform. Processes subscription status, billing events, purchase data, and restore purchase requests.
• Apple (App Store): Payment processing for in-app purchases and subscriptions.
• AI/LLM Service Providers: Process AI chat queries to generate responses. Queries are processed without personally identifiable information where technically feasible.
• Push Notification Services: Deliver push notifications to your device based on your preferences.

All service providers are contractually obligated to protect your data and use it only for the purposes for which it was shared.

4.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Gist, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, your personal information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal data.

4.4 Aggregated Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you, for purposes including analytics, research, and industry reporting.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specific retention periods:

• Account Data: Retained until you delete your account or request deletion.
• Usage and Analytics Data: Retained for up to 24 months from the date of collection, then aggregated or anonymized.
• AI Chat Session Data: Retained for the duration of the active session and deleted thereafter, unless required for service improvement in anonymized form.
• Subscription Data: Retained for the duration of your subscription and for up to 36 months after cancellation for billing dispute resolution and legal compliance.
• Log and Security Data: Retained for up to 12 months for security and fraud prevention purposes.

After the applicable retention period, data is securely deleted or irreversibly anonymized.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest.
• Regular security assessments and vulnerability testing.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Secure authentication through Apple Sign In and Google Sign In (we do not store your Apple or Google passwords).

While we strive to protect your personal data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access and Portability

You have the right to request a copy of the personal data we hold about you. You may request this by contacting us at privacy@joingist.com or through joingist.com/support.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal data.

7.3 Deletion

You have the right to request deletion of your personal data. You can delete your account directly through the Settings section in the App, or by contacting us at privacy@joingist.com. Upon deletion, we will remove or anonymize your data in accordance with Section 5 of this Privacy Policy, except where retention is required by law.

7.4 Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.

7.5 Objection

You have the right to object to the processing of your personal data for certain purposes, including direct marketing.

7.6 Withdrawal of Consent

Where processing is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.7 Complaint

You have the right to lodge a complaint with a relevant data protection authority if you believe that your personal data has been processed in violation of applicable data protection laws.

If you are located in the European Economic Area, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract: Processing necessary for the performance of our contract with you (providing the Service, managing your account and subscription).
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, analytics, and fraud prevention, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as sending marketing communications or processing optional data.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

For data transfers outside the EEA, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request deletion of your personal information.
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. Gist does not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, contact us at privacy@joingist.com. We will respond to verifiable requests within 45 days.

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to promptly delete such information. If you believe that we may have collected information from a child under 18, please contact us immediately at privacy@joingist.com.

The App does not use cookies. However, our Website (joingist.com) may use cookies and similar tracking technologies. For more information about our cookie practices on the Website, please refer to our Cookie & Tracking Policy.

The App may use device identifiers and analytics SDKs to collect usage data as described in Section 1.2. You can manage analytics and tracking permissions through your device's privacy settings.

The App does not respond to "Do Not Track" signals. However, you can manage your privacy preferences through your device settings and the App's settings.

Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for all international data transfers, including Standard Contractual Clauses and other legally approved transfer mechanisms.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy within the App and updating the "Last Updated" date. For significant changes, we may also send a notification through the App or via email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will endeavor to respond to all inquiries within 30 days.