Privacy Policy
We wrote this to be read, not skimmed past. Plain English, short sections, no lawyer-speak unless we absolutely had to. If anything's unclear, tell us and we'll fix it.
The short version
Finn is a portfolio tracker that lives on your iPhone. Your portfolio data — your transactions, holdings, custom assets, watchlists, and settings — stays on your device and syncs across your own devices through iCloud. Nothing about your portfolio is stored on our servers.
We talk to our servers for two reasons: to fetch market data (prices, fundamentals, news), and to connect you to your brokerage so transactions can be imported automatically. Both are explained in detail below.
What we never do: sell, rent, or share your personal information with anyone for marketing. Show ads inside the Finn app. Run third-party analytics on you. Track you across other apps or websites. Ever.
Who we are
Finn is made by Finn Financial LLC, a small company building portfolio tools for individual investors. For any privacy question, write to privacy@finnfinancial.co. A real person reads every message.
What this covers
This policy applies to the Finn iOS app and to this website (finnfinancial.co). It does not cover the services we link out to — your brokerage, Apple, or anyone else — each of which has its own privacy policy.
Data on your device
Almost everything Finn knows about you is stored locally, on your iPhone. That includes:
- Your transactions, holdings, and portfolios
- Custom assets you've added (real estate, crypto, cash, etc.)
- Watchlists and search history
- Your settings and preferences
- Cached market data so things load quickly when you open the app
Your iPhone protects this data with its built-in encryption. If you uninstall the app, the local copy goes with it.
Authentication tokens
When you link a brokerage, the small token we use to identify you for that connection is stored in your device's Keychain — the same secure store iOS uses for passwords. It never leaves your control.
iCloud sync
If you're signed in to iCloud, Finn syncs your portfolio across your own Apple devices so you see the same data on your iPhone, iPad, and any other device you use the app on. This sync runs through Apple's iCloud — we don't see it, we don't store it, and we don't control it. Apple does, under their privacy policy.
You can turn iCloud sync off for Finn at any time in your iPhone's Settings → Apple ID → iCloud.
Data we send to our servers
Finn talks to two services we operate. Here's exactly what each one sees.
Market data service
When the app needs a stock price, a chart, fundamentals, or news, it asks our market data service. The request contains the ticker symbols you're looking at and a date range — that's it. No identifier, no holdings, no amounts. The response (prices, news, company info) is cached on your device and isn't stored on our servers.
Brokerage linking service
If you've linked a brokerage, the app calls our brokerage service to fetch your transactions and holdings. Your transactions and holdings pass through this service into your phone — they are not stored on our servers.
What we do keep on the server is the bare minimum needed to keep your brokerage link working — essentially, the credentials that let us ask your broker for updates on your behalf. None of it includes your actual holdings or transactions. When you disconnect or delete your brokerage data from inside the app, we delete it all.
Linking a brokerage
Brokerage linking is powered by SnapTrade, a third-party service that specializes in connecting individual investors to their brokers. When you link an account, Finn opens the SnapTrade portal in a secure in-app browser and you sign in with your broker directly. Finn never sees, asks for, or stores your brokerage username or password.
Once you're connected, SnapTrade keeps the relationship with your broker and provides us with the transactions and holdings you've chosen to share. SnapTrade has its own privacy policy, which we'd encourage you to read if you link an account.
The bottom line: we never receive or store your broker login. Your broker, SnapTrade, and your iPhone do all the work. Our servers see only what's needed to keep the connection alive.
Market data
Prices, fundamentals, and news come from a third-party market data provider. We only send ticker symbols — never any information about you or your holdings.
What we don't do
A few things you won't find in Finn:
- No ads. No banners, no sponsored content, no affiliate links inside the app.
- No selling or sharing your data. Not for marketing, not for "partners," not for anyone.
- No third-party analytics. No Firebase, no Google Analytics, no Mixpanel, no crash-reporting SDK that phones home with your data.
- No advertising or tracking IDs. We don't read IDFA, we don't fingerprint your device, we don't follow you between apps.
- No accounts to create. No email, no password, no social sign-in. Your iPhone is your account.
App permissions
Finn asks for as little as possible. Each of these is optional and you can change your mind any time from your iPhone's Settings.
- Notifications — only if you want alerts for new brokerage transactions or breaking news on what you hold. Off by default unless you enable them in the app.
- Face ID or Touch ID — only if you want to lock the app behind biometrics. The check happens on your device; your face or fingerprint never leaves it.
- Background App Refresh — used to import new transactions from your brokerage in the background, roughly every few hours. Disabled by turning off Background App Refresh for Finn in iOS Settings.
We do not request access to your camera, microphone, contacts, location, photos, calendar, health data, or anything else.
Age
Finn is intended for people 18 and older. We don't knowingly collect information from anyone under 13. If you believe a child has been using the app, please email us and we'll help.
Security
We use HTTPS for every connection between the app and our services, and between our services and the third parties we work with (including SnapTrade for brokerage linking). Brokerage connection tokens are stored in your iPhone's Keychain. Server-side, we keep only what's strictly required for brokerage linking, behind access controls.
No system is ever 100% secure, and we won't pretend otherwise. If we ever discover a breach that affects you, we'll tell you promptly and explain what happened.
Your choices
You're always in control. You can:
- Delete your local data by uninstalling the app. That removes everything stored on the device.
- Disconnect a brokerage from inside the app's brokerage settings. We delete the connection token and ask SnapTrade to revoke the link with your broker.
- Delete your brokerage data entirely using the "Delete brokerage account" option in the app. That clears everything we kept on our servers to maintain your connections.
- Turn off iCloud sync for Finn in iOS Settings.
- Turn off notifications or background refresh at any time, in iOS Settings or in the app.
- Ask us anything about what we hold or how it's used by emailing privacy@finnfinancial.co.
Server logs
Our servers keep brief operational logs — things like the time of a request, the path it hit, and any error that occurred. These logs do not include your personal financial data, and they're retained for a short window (typically a week or less) for debugging and security.
Changes to this policy
If we change anything material here, we'll update the "last updated" date at the top, and — for changes that meaningfully affect what we do with your data — we'll tell you in the app before they take effect.
Contact
Questions, complaints, or just curious? Email us. We answer every message, usually within two business days.