Privacy Policy
What we collect
Without an account, your settings, watchlists, simulator portfolios and alerts stay on your device. If you create an account we store: your email address, display name, an optional profile photo, and a salted password hash (or your Google / Apple account identifier if you sign in with them). If you are signed in we also store the data you sync across devices (settings, watchlists, simulator portfolios, alert preferences). If you connect an exchange or broker in the web app (not available in the Android app) we store the label you choose and the API credentials you provide, encrypted. Our servers also process technical data such as your IP address to keep the service secure and to limit abuse. The Android app shows ads through Google AdMob, which collects some device data for that purpose (see below).
How we use it
To run the app: sign you in, sync your data between your devices, show the balances and holdings of the accounts you connect, send verification and password-reset emails, and protect the service against abuse. The Android app also shows ads served by Google AdMob (see below). We do not sell your data and do not build advertising profiles ourselves.
Connected accounts (web app only, read-only)
Connecting exchange or broker accounts is available only in the Tokfolio web app. The Android app does not offer it. When you connect an account on the web, Tokfolio only reads balances, holdings and open orders. It does not place, modify or cancel orders and cannot withdraw funds. Create read-only API keys at your exchange or broker, without trading or withdrawal permissions. Credentials are encrypted with AES-256-GCM on our server and are never sent back to your device. Disconnecting an account deletes its stored credentials.
Who we share data with
The Android app shows ads served by Google AdMob (Google LLC), and the web app may show ads served by Google AdSense. Google may collect your device's advertising ID or cookies, IP address and ad interactions to deliver and measure ads. Where the law requires it (EEA, UK), ads are requested only after you answered the consent form shown by the app or website, and you can change your choice in your device's Google ads settings or at https://adssettings.google.com. We do not share your account data with advertisers. We use service providers to operate Tokfolio: Google Cloud (hosting), Google and Apple (optional sign-in), and an email delivery provider (verification codes). Market data, news and on-chain information come from third-party providers such as Binance, CoinGecko, Yahoo Finance, Twelve Data, Finnhub, CryptoCompare, alternative.me, StockTwits, X, Blockchair, Etherscan and DefiLlama; their servers may see your IP address when your device or our server requests data. Charts are provided by TradingView. We may disclose data if the law requires it.
Retention and deletion
You can delete your account at any time: in the app under Account > Delete account, or on the web at tokfolio.com/delete-account without reinstalling the app. Deletion permanently removes your profile, sessions, synced data and stored exchange credentials. Disconnecting a single account removes just its credentials.
Security
Traffic is encrypted with HTTPS. Passwords are stored as salted hashes, session tokens as hashes and exchange credentials encrypted. Fingerprint / face login is handled by your device: Tokfolio never receives your biometric data.
Children
Tokfolio is not directed to children under 16 and we do not knowingly collect their personal data.
Your rights and changes
Depending on where you live (for example in the EU/EEA under the GDPR) you can ask to access, correct, export or delete your data, or object to its processing. Use the deletion options above or contact us. We will post changes to this policy on this page and update the date above.
Simulator and no real trading
Tokfolio includes a trading simulator that uses virtual money only. Simulated trades are stored as part of your synced data, are never sent to any broker, exchange or wallet, and have no effect on your real accounts, balances or money. The Android app has no feature to connect real exchange or broker accounts. Tokfolio cannot buy, sell, deposit, withdraw or transfer real money, crypto or other assets, and it never holds or custodies your funds.
Delete account
Contact
Questions about this page? Use the Contact page.