Privacy Policy

The short version

• Your account, holdings, journal, watchlists and settings are stored only on your computer. We never receive them.
• Soritch has no analytics, telemetry, advertising or crash reporting.
• To show prices, news and AI write-ups, the app contacts third-party services directly from your computer. Those services see your IP address and what was requested, such as a ticker symbol or your chat message. You choose whether to turn on news and cloud AI.
• We don’t sell, rent or share personal information.

Who is responsible

Soritch is run by Saaim Japanwala, an individual in Alberta, Canada, doing business as Soritch. He is responsible for this policy and for any personal information we handle. Contact: [email protected].

Information stored on your computer

When you set up and use Soritch, it saves the following in local files in your computer’s app-data folder. We don’t collect, receive or have access to this information.

• Profile: display name, email address, phone numbers, billing and shipping address, experience level, goals, time horizon and preferred industries.
• Sign-in: your optional passcode and recovery keyword, stored only as salted scrypt hashes. The plain values are never saved. Also a recovery hint, and a random device and user ID created on your computer.
• Financial records you enter: portfolios, holdings, purchase prices and dates, sales, the activity log, journal entries and watchlists.
• App data: settings, analysis and planner history, lesson progress, cached news, and token-usage counts for AI providers.
• API keys you add for NewsAPI, Gemini or Groq. These are stored in plain text.

Today, none of this leaves your computer unless you export it or a feature sends part of it to a service listed below. Profile details are collected now so they’re ready for the planned paid release (see below).

The paid release

This policy covers the free prerelease. Soritch plans to become a paid subscription service, and prerelease builds will stop working when it launches (see section 5 of the Terms of Use). The paid release will probably need accounts, payment processing and servers that hold some of your information. Before any of your information reaches our servers, we will publish a new privacy policy that describes it and ask for your consent. Nothing in the prerelease uploads your data in the meantime.

What the app sends to third parties

Soritch connects directly from your computer to these services. Each one receives your IP address, basic technical details such as the request headers, and the specific information below. Each one handles that information under its own privacy policy.

Always, while you use the app

• Yahoo Finance receives ticker symbols and search terms for quotes, charts, company data and symbol search, including the tickers you hold or watch. It doesn’t receive share counts, prices paid or your identity. Yahoo privacy policy
• Frankfurter (api.frankfurter.dev) receives a request for current exchange rates. frankfurter.dev
• jsDelivr provides chart libraries, and Google Fonts provides typefaces. Both receive a request for the file when the app loads. jsDelivr privacy · Google privacy

Only if you turn the feature on

• NewsAPI (newsapi.org) receives your NewsAPI key and the search terms for headlines. These are ticker symbols, company names and sector keywords, including those of your holdings and watchlist. NewsAPI privacy
• Google Gemini or Groq, if you pick a cloud AI provider, receive your API key and the prompts Soritch builds. Prompts include the ticker, its scores, signals and recent data, plus anything you type into the analysis or lesson chat. For the Planner, prompts also include the amount, horizon, sectors, markets and display currency you entered. Soritch doesn’t put your name, email, phone, address or holdings list into prompts, but anything you type into a chat box is sent as written. Depending on your plan, these providers may keep prompts and use them to improve their services. Google, for example, may do so on Gemini’s free tier. Check their terms before sending anything sensitive. Google privacy · Gemini API terms · Groq privacy
• Ollama, the default AI option, runs on your own computer at localhost. Prompts sent to it stay on your machine.
• Links you open, such as news articles, open in your web browser. The websites you visit see that visit under their own policies.

When Soritch sends a request to these services, it does so on your behalf and at your direction. We don’t receive a copy.

Our website

soritch.com doesn’t use cookies, analytics or ad trackers. It saves your light or dark theme choice in your browser’s local storage, and that choice never leaves your browser. Pages load fonts from Google Fonts, so Google receives your IP address. Our hosting provider and GitHub, which serves the app downloads, may keep standard server logs such as IP address, browser type and the time of the request, for security and operations.

When you contact us

If you email us, for example for support or a job application, we receive your email address, your message and anything you attach. We use this only to reply and to handle your request. We keep it as long as needed for that purpose and then delete it. Job applications are kept for up to 12 months unless you ask us to delete them sooner.

Why we handle information

We handle the limited information we receive (emails and server logs) to answer you, run and secure the website, and meet legal obligations. Where laws such as the GDPR require a legal basis, we rely on our legitimate interests in running Soritch and responding to you, on your consent, or on legal obligations.

Security

Soritch keeps the app’s interface separated from your system (Electron context isolation) and stores passcodes only as salted hashes. Its local files, however, are not encrypted. The passcode is a lock on the app, not encryption, and API keys and exported backups are plain text. Protect your computer with a strong account password and disk encryption, such as FileVault or BitLocker, and keep backup files somewhere safe.

Keeping and deleting your data

Data stored by the app stays on your computer until you delete it. Settings › Reset app data removes it, apart from a random device ID that the app keeps. Uninstalling may leave the data folder behind. On macOS it is in ~/Library/Application Support/Soritch, and on Windows in %APPDATA%\Soritch. Delete that folder to remove everything. To remove data held by NewsAPI, Google or Groq, contact them.

Your rights

Depending on where you live, you may have the right to see, correct or delete personal information we hold about you, to withdraw consent, and to complain to a regulator. Laws that may give you these rights include Canada’s PIPEDA and Alberta’s PIPA, the EU and UK GDPR, and US state laws such as the CCPA. Because the app’s data is stored only on your device, you already have full control of it. For anything we hold, mainly emails, write to [email protected]. We will reply within 30 days. We don’t sell or share personal information as the CCPA defines those terms, and we don’t make automated decisions about you that have legal or similarly significant effects.

If you’re in Canada and aren’t satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

Information processed outside Canada

The third-party services above, and our website host, may process information in the United States or other countries. Information there may be accessible to authorities under local law.

Children

Soritch is for adults aged 18 and over. We don’t knowingly collect information from children. If you believe a child has sent us personal information, email us and we will delete it.

Changes to this policy

We will post any changes here and update the effective date. If a change affects how your information is handled in a meaningful way, such as adding sync, we will tell you in the app before it takes effect.

Contact

[email protected] · Soritch, Alberta, Canada