Privacy Policy

What we store, and whether we can read it

• Your portfolio — holdings, share counts, prices, dates, watchlist and questionnaire answers — is encrypted on your device. We store only the encrypted result and cannot read it. Neither can our database administrators, our hosting provider, or anyone who obtained a copy of our database.
• Portfolio value, gains, dividend estimates and projections are calculated on your device and are never sent to us.
• Imported statements — CSV, PDF, photo or scan — are processed entirely on your device. The original file, its filename and its extracted text are never uploaded and never stored on our servers.
• Your account — your name and email address — is stored so we can sign you in and send verification codes. This is not end-to-end encrypted, because we need your email address to deliver those codes.
• Operational analytics — non-financial, aggregate usage such as sign-ups, active users, app version and error rates. These records cannot contain your holdings, tickers, amounts, watchlist, questionnaire answers or imported content; that restriction is enforced in code, not by policy alone.

What we do not do

• We do not have a master key, a support key, or an administrator back door to your portfolio.
• We do not sell or share your personal data.
• We do not allow support staff or administrators to view your portfolio, its value, your watchlist, your questionnaire answers or your imported documents.
• We do not include third-party advertising or tracking software in the app.

Recovery — please read this part

There is no Raqib master key and no administrator recovery path. Support cannot unlock your portfolio, because Raqib never has the key. Resetting your account password does not affect your encryption key or your portfolio.

Analytics and retention

• Analytics events are limited to a fixed list of generic, non-financial facts, such as “the app was opened” or “an import succeeded”.
• Where we count how many distinct people were active, we use an identifier derived on our server that cannot be reversed into your account, and we never expose it.
• Detailed event records are deleted after 35 days. What remains after that is aggregate counts only.
• Where we show a breakdown internally, groups smaller than 20 people are withheld so a small group cannot be identified.

This website

Everything above is about the Raqib app. This website is separate, and it is not silent: serving any page leaves a technical trace, and we would rather describe it than imply there is none.

• This site is hosted on Cloudflare Pages. To serve and protect it, Cloudflare processes limited technical information on our behalf — your IP address, request metadata such as the page requested, the time, your browser and device type and an approximate location derived from the IP address, together with security logs used to block abuse. We use this only to keep the site available and defend it; we do not use it to build a profile of you, and we do not combine it with your Raqib account.
• The site sets no cookies, runs no analytics, embeds no advertising or tracking software, and loads nothing from any third-party origin. Your language and theme choices are kept in your own browser and are never sent to us.
• If you write to one of our published addresses, we receive and process your message, your email address and whatever you choose to include, for the sole purpose of answering you. Email reaches us through Cloudflare Email Routing and our mail provider. We keep correspondence only for as long as the enquiry and any follow-up need it.
• Please do not email us screenshots of your holdings or your account password. We do not need them, and an email is not encrypted the way your portfolio is.

Deleting your account

You can delete your account from inside the app at any time. Deleting it removes your encrypted portfolio, your recovery information, your sessions and your account record. Step-by-step instructions are on the Delete Account page.

Honest limits

• A device that has been compromised — by malware, or by tampering with the operating system — could read your portfolio while it is decrypted on that device. Our guarantee is that our servers and our staff cannot read it, not that a compromised phone is immune.
• Your name and email address are stored in readable form, because sign-in and verification codes require them.
• Someone with access to our database can see that an account exists, that it has an encrypted portfolio, roughly how large that encrypted block is, and when it last changed — but never what it contains.
• We describe our own security work honestly. We do not hold a security certification and we have not been independently audited.

Contacting us about privacy