Privacy Policy

Last updated: 8 April 2026

Contents

1. Who We Are 2. What Data We Collect 3. How We Use Your Data 4. Legal Basis for Processing 5. Third Party Services 6. Data Retention 7. Your Rights Under UK GDPR 8. Cookies 9. International Transfers 10. Changes to This Policy 11. Complaints

1. Who We Are

Signal (signal-app.world) is the data controller for personal data collected through this service. If you have any questions about this Privacy Policy or how we handle your data, contact us at: privacy@signal-app.world

2. What Data We Collect

We collect the following categories of personal data:

Account data: Email address and hashed password. Your password is never stored in plain text and is irreversibly hashed using bcrypt.

Usage data: Pages visited, features used, predictions generated and viewed, watchlist stocks, searches made within Signal.

Portfolio data: Stock tickers, share quantities, purchase prices, and portfolio values if you import or manually enter your holdings.

Payment data: Subscription tier and payment status. Card details are handled by Stripe and are never stored by Signal.

Technical data: IP address, browser type, device type, operating system, and timestamps of key actions.

Communication data: Email notification preferences and alert settings.

Legal compliance data: Your agreement to our Terms of Service and Privacy Policy including date, time, and IP address — retained for legal compliance.

3. How We Use Your Data

Provide the Signal service and personalise your experience
Generate AI analysis relevant to your watchlist and portfolio holdings
Send alerts and notifications you have opted into
Send the weekly digest email and other communications you have opted into
Improve Signal's prediction accuracy and model performance over time
Process subscription payments and manage your account
Detect fraud and maintain platform security
Comply with legal and regulatory obligations

We never sell your personal data to third parties.

4. Legal Basis for Processing (UK GDPR)

ContractProcessing is necessary to perform our contract with you — creating your account and providing the Signal service.

Legitimate interestsProduct improvement, security monitoring, fraud prevention, and anonymised analytics to understand how Signal is used.

ConsentFor optional marketing emails and communications. You can withdraw consent at any time by unsubscribing or emailing privacy@signal-app.world.

Legal obligationRetaining legal agreement records and payment records as required by UK law.

5. Third Party Services

Anthropic (Claude API)

Generates stock analysis and predictions from news data. Your personal details are not included in these requests.

Resend

Email delivery service. Receives your email address to send transactional emails, alerts, and the weekly digest.

Railway

Backend hosting provider. Processes and stores application data. SOC 2 Type II certified.

Vercel

Frontend hosting provider. Serves the Signal web application.

Stripe

Payment processor. Handles subscription billing and receives your email and payment details. PCI DSS Level 1 certified.

Trading 212 / Robinhood

Only if you initiate a portfolio import. Signal receives your portfolio holdings data for analysis only.

6. Data Retention

Account dataRetained for the duration of your account plus 12 months after deletion

Prediction dataRetained indefinitely for accuracy tracking. Anonymised for aggregate reporting

Legal agreement recordsRetained indefinitely for legal and regulatory compliance

Payment recordsRetained for 7 years to comply with UK financial and tax law

Usage logsRetained for 12 months

7. Your Rights Under UK GDPR

Right of access — request a copy of your personal data (Subject Access Request)
Right to rectification — ask us to correct inaccurate data
Right to erasure — request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements
Right to restriction — ask us to restrict processing in certain circumstances
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — for any consent-based processing, at any time

To exercise any of these rights, contact privacy@signal-app.world. We will respond within 30 days.

8. Cookies

Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled without breaking the service.

Analytics cookies: Used to understand how users interact with Signal to improve the product. These are optional and can be declined.

A cookie consent banner is shown on your first visit. Your choice is stored and respected. You can change your preference at any time by clearing your browser's local storage.

9. International Transfers

Some third-party services we use (including Anthropic, Vercel, and Stripe) may process data outside the United Kingdom. Where this occurs, Signal ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner's Office.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Where we make material changes we will notify you by email and require you to re-agree within the Signal app before continuing to use the service.

11. Complaints

If you have concerns about how Signal handles your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.