Privacy Policy
This Privacy Policy explains how Event Loop Labs ("we", "us", "Event Loop Labs") collects, uses, and protects your personal data when you use the Patrimoine mobile application and related backend services (together, the "Service"). Patrimoine is a personal wealth tracker that aggregates the financial positions you enter and values them in your chosen currencies.
1. Data we collect
Account & identity
Patrimoine requires sign-in with Google. When you sign in, Google provides us with your email address, name, profile picture, and Google account identifier. We use this to create and secure your account. We never receive or store your Google password.
Financial information you enter
The Service stores the holdings you add — for example asset name and type (stocks, ETFs, bonds, crypto, cash, commodities, and similar), quantity or balance, the platform or institution you group it under, and the currency. From this we compute your total net worth and a history of daily valuation snapshots. You choose what to enter; Patrimoine does not connect to your bank or broker to import data automatically.
Subscription & billing state
Subscriptions are sold and processed by Google Play Billing. We receive your subscription and entitlement status (for example: in trial, active, expired) and your trial start date. We do not receive or store your payment card details — those are handled entirely by Google.
Technical & anti-abuse data
- Google Play Integrity tokens, used to verify that requests come from a genuine, untampered installation of the app.
- A short-lived session token (issued at sign-in, expires after 24 hours).
- Operational logs (e.g. request errors), retained for a limited period for security and debugging. These are not used to profile you.
2. How we use your data
- To provide the Service: store your positions, compute net worth, and render your dashboards.
- To fetch live market prices and exchange rates (see "Market data" below).
- To authenticate you and keep your account secure (sign-in, session management, integrity checks).
- To manage your trial and subscription entitlements.
- To provide support and respond to your requests.
3. Legal bases (GDPR)
Where the GDPR applies, we process your data on these bases:
- Performance of a contract — to deliver the Service you sign up for (account, positions, valuations, subscriptions).
- Legitimate interests — to keep the Service secure and prevent abuse (integrity checks, logs).
- Consent — where specifically requested; you may withdraw it at any time.
4. Who we share data with
We do not sell your personal data. We share it only with the service providers ("processors") needed to run Patrimoine:
| Provider | Purpose | What they receive |
|---|---|---|
| Google (Sign-In, Play Integrity, Play Billing) | Authentication, anti-abuse, subscription processing | Identity & billing data as described above |
| Amazon Web Services (AWS) | Hosting, database, and storage | Your account and financial data, stored encrypted |
| EODHD | Market prices & exchange rates | Only instrument symbols (e.g. tickers/ISINs) — no personal or account data |
We may also disclose data where required by law, or to protect the rights, safety, and security of our users and the Service.
5. Market data
To value your holdings we request prices and FX rates from EODHD using only the instrument symbols involved. Your identity, holdings sizes, and net worth are never sent to the market-data provider.
6. Where your data is stored
Your account and financial data are stored on AWS infrastructure in the European Union (Stockholm region, eu-north-1) and encrypted at rest. Some processors (e.g. Google) may process data outside the EU under their own safeguards and standard contractual clauses.
7. How long we keep it
- Account and financial data: for as long as your account exists.
- Operational logs: a limited retention window (currently 30 days), then deleted.
- On account deletion, we remove your account and positions as described on our account deletion page.
8. Your rights
Subject to applicable law, you have the right to access, correct, delete, export (portability), restrict, and object to the processing of your personal data, and to withdraw consent. You may also lodge a complaint with your local data-protection supervisory authority.
To exercise any of these, email privacy@eventlooplabs.com, or request deletion via our account deletion page.
9. Security
We protect your data with encryption in transit (TLS) and at rest, short-lived sessions, Google Play Integrity verification, and least-privilege access to our infrastructure. No system is perfectly secure, but we work to keep your data safe.
10. Children
Patrimoine is not directed to children and is intended for users aged 18 and over. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy as the Service evolves. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated in-app or by email where appropriate.
12. Contact
Event Loop Labs — privacy@eventlooplabs.com