Privacy Policy

This Privacy Policy explains how Wheel Income ("the Service", "we", "us") collects, uses, and protects the personal information you provide when you use the Service. We are committed to handling your data with care and transparency.

We collect only the information necessary to operate the Service:

• Account information: Your email address, collected when you register. If you sign in with Google, we also receive your name from Google. Passwords are managed entirely by Firebase Authentication (Google) and are never stored by us.
• Usage data: Paper-trading activity you enter into the Service, including watchlist tickers, simulated positions, and configuration settings.
• Tax profile (optional): If you use the Tax Estimate feature, the filing status, salary, spouse's salary, and state of residence you enter in Settings. This information is used solely to calculate your in-app tax estimate and is never shared with any third party.
• Session data: Authentication tokens managed by Firebase Authentication, stored in your browser's localStorage and IndexedDB to keep you signed in.
• Device tokens: If you enable push notifications in the native mobile app, a device token and platform (iOS or Android) used to deliver alerts about positions and watchlist items that need attention.
• Consent record: The date and time you accepted these Terms of Use, stored as an audit trail of your agreement.
• Usage analytics: Aggregate, non-identifying information about how the Service is used, such as pages viewed and general device and browser type, collected through Google Analytics.

We do not collect payment information or real brokerage credentials. Financial details you provide for the Tax Estimate feature, such as salary, are optional, used only for that calculation, and are not shared with any third party.

Your information is used to:

• Create and maintain your account
• Store and display your paper-trading data within the Service
• Authenticate your sessions securely
• Measure aggregate usage of the Service so we can improve it

We do not sell your data, use it for direct marketing, or build advertising profiles ourselves. The Service does display third-party advertisements supplied by Google AdSense, and Google may use cookies and similar technologies to serve and measure those ads. You can control personalised advertising at google.com/settings/ads.

We do not sell, rent, or trade your personal information. We use Firebase Authentication (a Google service) to manage sign-in, and Firebase Cloud Messaging (also a Google service) to deliver push notifications if you enable them in the native app; Google processes these requests under Google's own privacy policy. We do not share your paper-trading data with any third party.

The Service may fetch publicly available market data from external APIs (e.g., stock prices, earnings calendars). Those requests do not include your personal information.

Your data is stored in a cloud database hosted by Neon. Authentication is managed by Firebase (Google). We apply standard security practices including HTTPS transport encryption. No security system is infallible; we cannot guarantee absolute security.

Data is stored only as long as your account is active. When your account is deleted, your personal information and trading data are removed from the database.

You have the right to:

• Access: Request a summary of the personal data we hold about you.
• Correction: Update your name or other account details through the Settings page.
• Deletion: Request deletion of your account and all associated data at any time by contacting us at [email protected].

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has registered, we will promptly delete their account.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

For privacy-related inquiries, contact us at [email protected].

We use the following third-party services to operate the Service: Firebase Authentication (Google) for sign-in and identity verification; Firebase Cloud Messaging (Google) for push notification delivery on the native app; Neon for cloud database storage; Google Cloud Run for application hosting; Google AdSense for advertising; and Google Analytics for aggregate usage measurement. Each provider processes data under its own privacy policy. Google's policy is available at policies.google.com/privacy.

If we introduce additional third-party integrations in the future, we will update this Privacy Policy and provide appropriate notice.