Privacy Policy

Last updated: October 3, 2026

This policy explains what History of Market: Heat Map (“the app”), provided by GREP ADVISORY PTE. LTD. (“we”), sends to our servers, why, and how long we keep it. It covers the app on iPhone and iPad and its widgets. We use this data only as described here, and we do not sell it.

What the App Sends

1. App integrity check. On devices that support it, the app creates a key with Apple’s App Attest service and registers it with our server, so the server can tell requests from a genuine copy of the app apart from automated scraping. The server stores the key’s identifier, its public key, a signature counter, the environment (production or development), when the key was first and last seen, how many sessions it opened that day and whether it is blocked. This record is not connected to your name, email, Apple Account or IP address. One-time challenge values expire after 5 minutes and are deleted when used or within a day.
2. Access tokens. After the integrity check, our server gives the app a session token that expires after 1 hour and a device token that expires after 30 days, which the app shares with its widgets. A token names only the key identifier above. The server does not store tokens.
3. Market data requests. To show prices, charts and market history, the app and its widgets request data from our servers with one of these tokens. Like any internet request, these carry your IP address and a user-agent string; a request for a stock page or a search names the ticker or the search text. Our servers use the IP address only to limit request rates over one-minute windows and do not store it, and they log errors with the address requested. When the main source cannot answer, our server gets the same market data from our backup data service; those requests name the ticker or the search text and nothing about you or your device.
4. Price alerts and the close-of-day note (Supporter features, only if you use them). When you create your first price alert or turn on the close-of-day note, the app asks for permission to send notifications. If you allow it, Apple issues a push token for this installation, and the app sends our server that token, each alert you create (the ticker, the condition and the value) and whether you want the close-of-day note. The server stores exactly these, linked to the key identifier above, only to check your alerts against market prices and deliver them through Apple Push Notification service; it also records when an alert was sent and at what price.
5. Purchases. The app asks the App Store, through Apple’s StoreKit, which Supporter plans are offered and whether you have one, and checks this on your device. Apple processes payments. We do not receive your payment details or purchase history, and our server keeps no record of your purchases.
6. Statistics. Our server keeps aggregate counts, such as the number of sessions or alerts sent in a day. They contain no key identifier, token or IP address and cannot be traced to an installation.

Service Providers

Our servers, database and storage run with a cloud hosting and network provider, which handles the app’s network traffic, including IP addresses, only to provide its service to us. Our backup data service runs with another hosting provider and receives requests only from our servers. Both are bound by data processing terms that require them to protect this data at least as well as this policy does. Apple handles App Attest, push notifications, purchases and iCloud under Apple’s privacy policy.

What Stays on Your Device

• Your watchlists are saved on the device and, if you use iCloud, synced through your own iCloud account. We cannot read them.
• Display settings, cached market data and the data shared with the widgets stay on the device. If iOS gives the widgets a push token, it stays on the device too.
• When you take a screenshot in the app, it offers a share image of the same screen. The app draws that image itself, does not read your screenshots or photos, and sends it only where you choose.

How Long We Keep It

• An installation’s integrity record, its alerts and its push token are deleted 90 days after the app was last opened on that device.
• An alert you delete in the app is deleted from our server at once. When your Supporter subscription ends, the app deletes your alerts from our server the next time it opens and keeps them on your device, paused, until you subscribe again. Alerts of an installation whose push token Apple reports as no longer valid, for example after the app is deleted, are deleted with the token.
• Aggregate counts contain nothing about you and are kept as long as they are useful.

Your Choices

• You can turn off notifications for the app in iOS Settings at any time.
• Deleting the app deletes everything it saved on the device; its record on our server is then deleted as described above.
• Nothing on our server is linked to your identity, so we cannot look up a record by your name or email.

Children. The app is not directed at children and collects no information about them.

Changes. If we change this policy, we post the new version here with a new date before the app behaves differently.

Contact. hi@historyofmarket.com