Legal
Privacy Policy
Last updated 11 September 2026.
The short version
Phoebe needs enough about you to invest on your behalf: who you are, which brokerage account to act on, and the plan you wrote. We do not sell any of it, and we do not use it for advertising.
What we collect
Account information
Your email address and a Google account identifier when you sign in. A phone number if you choose to verify one.
Your brokerage connection
A token issued by Robinhood or Webull that allows Phoebe to read your account and place orders on it. We never receive or store your brokerage password. The token is encrypted and held separately for each person.
Your plan and limits
The strategy document you write, and the budget, position cap, buy-frequency and risk settings you set.
Activity
What Phoebe researched, which price zones it identified, what it bought or declined to buy, and the reasoning for each. This is what fills your journal.
Device information
A push notification token for your iPhone, and basic diagnostic information when something fails.
What we do not collect
- Your brokerage password
- Payment card details — Apple handles billing and does not share them with us
- Contacts, photos, location, or anything unrelated to investing
- Your activity on other apps or websites
Why we process it
To run the service you asked for: researching, monitoring prices, placing orders within your limits, and showing you what happened. To notify you when it buys or needs you. To keep the service secure and diagnose failures. To meet legal and record-keeping obligations.
Who it is shared with
Phoebe does not sell personal information. It is shared only with:
- Your broker (Robinhood or Webull) — to read your account and place the orders you authorised.
- Google Cloud — our hosting and database provider.
- AI model providers — the research and decision steps send market information and the text of your plan to a language model provider for analysis. Your identity, account balance, and broker credentials are not part of that.
- Apple — for push notification delivery and, at launch, billing.
- Legal authorities, where we are legally required to disclose.
Where it lives and how long
Data is stored on Google Cloud infrastructure in the United States. Account and activity data is kept while your account is open. Financial records may be kept longer where the law requires it. Diagnostic logs are kept for a short period and then discarded.
Security
Broker tokens are encrypted with keys managed separately from the database. Access is limited to the services that need it. The app requires Face ID or your passcode on every open. No system is perfect, and we will tell you promptly if something material happens.
Your choices
- See it — your journal shows every decision Phoebe has made for you.
- Correct it — your plan and limits are editable at any time.
- Disconnect — remove your broker connection in Settings, and Phoebe loses its ability to act.
- Delete it — email us and we will delete your account, plan, and stored connection.
- Turn off notifications — per kind in Settings, or entirely in iOS.
If you are in California, the EEA or the UK, you have additional rights over access, correction, deletion and portability. Write to us and we will honour them.
Children
Phoebe is not for anyone under 18 and we do not knowingly collect information from children.
Changes
If this policy changes materially we will say so in the app before the change takes effect.