Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how Caydex (“we,” “us,” or “our”) collects, uses, and shares information when you use the Caydex mobile application and related services (the “App”). By using the App, you agree to this Policy.

The short version

This summary is for readability. The full detail below governs, and nothing here limits it.

1. Information We Collect

Account information: if you create an account, we collect your email address and any display name you provide.

Usage information: content you create or request in the App, such as watchlists, portfolios, generated research reports, saved items, chat messages, and preferences.

Learning preferences: if you answer the optional questions during setup or in Settings, we store how you described your experience level, how technical you want explanations to be, how long you want answers, which subjects interest you, and what you want to get better at. We use them only to choose what to show you first and how to word an explanation — never to change our analysis, ratings, or estimates, which are the same for every user. We do not ask for your finances, risk tolerance, time horizon, tax situation, or investment objectives. Personalized explanations are off until you turn them on, and you can turn them off again at any time in Settings.

Search activity (anonymous): when you tap a result in a search screen, the App tells us which ticker you picked so we can show everyone the tickers people search for most. We keep only a daily count per ticker — never who picked it: no account, device, IP address, or time of day is stored with the count, and repeat picks of the same ticker by one account are de-duplicated for a week. The words you type into search are sent only to run that search; they are not stored with your account or in these counts, though, like any request, they can appear briefly in our server and error-monitoring logs, which are kept only for those providers’ short retention periods.

Holdings you enter: if you use Portfolio Insights, the share counts or position values you type in. These are self-reported by you — we never connect to a brokerage and never see your actual account.

Support reports you send us: if you use Help Us Improve, what you type and — only if you choose to attach one — a screenshot you pick yourself. Nothing is read from your photo library unless you select an image, you can see the whole message in your mail app before it sends, and we use it solely to reproduce and fix the problem.

Device information: app version, device type, IP address, and general technical/log data used for reliability, security, and abuse prevention. A push notification token if you enable notifications.

An install identifier: a random identifier we generate on first launch and store in your device’s keychain. We send it with requests to apply fair-usage limits and to keep your learning progress before you sign in. It is not derived from your device or Apple ID, is not shared with advertisers, and is not used to track you across other apps or websites. Because it lives in the keychain it can persist if you delete and reinstall the App; signing in supersedes it.

We do not ask for or store your brokerage credentials, bank account numbers, or trading account access. Payment is handled by the Apple App Store; we do not receive your full payment card details.

2. How We Use Information

To provide and operate the App’s features, including generating AI research, syncing your preferences and content across devices, and maintaining your credit balance and subscription.

To secure the App, prevent abuse, debug issues, and improve features and performance.

To send you notifications you have enabled, and to communicate with you about your account or the service.

To show anonymous, aggregated lists in search — “Trending searches” and “Most added” over the last 7 days. A ticker appears in “Most added” only when at least three accounts added it, and in “Trending searches” only after at least three de-duplicated picks; the lists never show who, and never show counts. They describe activity in the App and are not a recommendation.

3. AI Processing

Cay AI chat sends what you type to a third-party AI provider for processing. We ask for your explicit permission before this happens for the first time, and chat does not work until you give it. You can withdraw that permission at any time in Settings → General • AI Chat Data Permission; chat then stops working until you allow it again, and the rest of the App is unaffected.

What is sent for chat: your message, the recent messages in that conversation, and market data for whatever you are viewing so the answer is relevant. What is NOT sent: your name, email, account identifier, watchlist, portfolio, or holdings.

Web search in chat: in any chat, Cay AI may run a web search when you ask it to search the web, look something up, or double-check something (for example, “check the latest news”), and automatically when Caydex’s own data cannot answer your question (for example, a question about a lawsuit or a product launch). Cay AI is instructed not to use web search for prices or other market data. A short search query that Cay AI writes from your question — such as the company or its ticker, the topic, and a time period — is sent to our web search provider. Amounts, percentages, links, and email addresses are removed from the query before it is sent, and your name, email, account identifier, watchlist, portfolio, and holdings are never sent with it. Web search is available only while you are signed in, and is limited to a set number of searches per day. The answer is saved with that conversation like any other chat message, along with a note that it used a web search. The list of web sources it used (each source’s title, publisher, date, and link) is saved with the answer, so it appears again when you reopen the conversation, and it is deleted when you delete that conversation or your account. We keep no other copy of the search results, apart from a temporary in-memory copy for a few minutes so the same question is not searched twice. Web sources are third-party content that we do not control or verify: they may be outdated or wrong, they are not Caydex’s view, and their links open the publisher’s own page. Searching in any chat, and searching without being asked, happen only after you have allowed AI chat on a permission screen that describes them; until then, Cay AI searches the web only in a chat about a research report, and only when you ask.

Generated research reports are produced from public market data. They contain no content you have typed and no information about you.

Our AI provider processes this data on our behalf to return a response, and is instructed not to use it for their own purposes. Do not submit sensitive personal information you would not want processed this way. AI output is generated automatically and may be inaccurate.

4. Service Providers

We rely on the following providers to run the App: Supabase (database, authentication, and file storage); Railway (application hosting); Google (the AI processing described above); Brave Software (web search in Cay AI chat, as described above); Sentry (error and crash monitoring); and Apple (in-app purchases and push notification delivery).

Market and financial data flows the other way — we request it from data providers using a ticker symbol, and we do not send them anything about you. Those providers are listed in the App under Profile → Data Sources.

These providers may process your information only as needed to perform services for us and are bound by confidentiality and data-protection obligations. Our servers and these providers are located in the United States.

5. How We Share Information

We do not sell your personal information, and we have never sold it. We also do not “share” it for cross-context behavioural advertising — both “sell” and “share” carry specific meanings under US state privacy laws such as the CCPA/CPRA, and neither describes anything we do. We receive no money or other consideration for disclosing your information to anyone.

We disclose information only to the service providers described above (each acting on our instructions and only to run the App), when required by law or legal process, to protect our rights or users’ safety, or in connection with a business transfer such as a merger or acquisition — in which case this Policy continues to govern the information, and any successor is bound by it.

6. Data Retention

Content you create — chat conversations, generated research reports, watchlists, holdings, learning progress, and bookmarks — is kept until you delete it or delete your account. We do not expire it on a timer, so that your saved research stays available. You can delete individual conversations and reports at any time.

Short-lived operational records are cleared automatically: fair-usage counters are deleted after 7 days, anonymous search counts after 14 days, and cached market data expires on its own schedule.

Deleting your account removes your account record and everything linked to it: chat conversations and messages, research reports and their generated PDF files, watchlists, portfolios and holdings, saved items, followed entities, settings, learning progress, notification tokens, credit balance, and credit history. This happens immediately, not on a delay. Error-monitoring records may persist for a short retention period at our monitoring provider; these contain diagnostic information and a pseudonymous account identifier, not your name or email.

You can delete your account in the App under Profile → Settings → Delete Account.

7. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can update your profile in the App, manage notifications in Settings, and delete your account from the App’s settings, which removes your associated data as described above.

To exercise other rights or ask a question, contact us at support@caydexinvest.com. We will respond consistent with applicable law.

9. Push Notifications

If you enable notifications, we register a device token to deliver alerts you choose (such as research completion or watchlist activity). You can disable notifications at any time in the App or in your device settings.

10. Children’s Privacy

The App is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International Users

We may process and store information in the United States and other countries where we or our service providers operate. By using the App, you understand your information may be transferred to jurisdictions with different data-protection laws than your own, subject to appropriate safeguards where required.

12. Changes to This Policy

We may update this Policy from time to time. We will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the App after changes take effect constitutes acceptance.

13. Contact

Questions about this Privacy Policy? Contact us at support@caydexinvest.com.