Opening Bell — Privacy Policy
Effective: September 22, 2026
Operator: Frederick Fermin (“we”, “us”)
Contact: frederickfermin123@gmail.com
Opening Bell turns your habits into tickers on a personal stock exchange. This page says what the app collects, why, who processes it, and how to get it out again. The short version: your market data is the product, it is yours, you can export or delete it at any time, and we do not sell it, show ads against it, or track you across other companies’ apps.
What we collect
Your account. On first launch the app creates an anonymous account with a random identifier. Nothing else is needed to use it. If you choose to link Sign in with Apple or Google, we receive the email address and name that provider shares with us (Apple may share a private relay address). We never see or store a password.
Your market. Everything you create in the app is stored so it can follow you between devices and survive a reinstall once linked: the listings you create (habit names and tickers), their weights, your check-ins, the weekly guidance you set, your risk factors, your fund’s name, symbol and manager name, and the prices, index values, earnings reports, halts and circuit breakers the exchange derives from them.
Device and settings. Your time zone, market hours, sound and haptics preferences, and, only if you turn alerts on, a push-notification token that lets us deliver them. Widgets and the Live Activity read a snapshot that stays on your device.
Social. Invite codes you generate or redeem, the exchanges you create or join, and the shareholder links you accept. Shareholders and fellow exchange members can see your fund symbol, fund name, manager name, display name, index level, daily change and closing-bell time. For every listing you set to Open (the default for most habits) they also see its ticker, name, price history, daily move, halt state and miss streak; the price history shows which days moved it up or down. A listing you set to Private never appears to them and only moves your index. They cannot see your earnings reports, your risk factors or the labels you wrote for your habits. The Street shows aggregate figures per habit (how many funds hold it, completion rates, halts) and only once at least ten funds hold it, so no single fund is identifiable.
Purchases. Opening Bell Plus is sold and billed by Apple on iPhone and by Google Play on Android. We never receive your card or bank details. RevenueCat processes the store’s receipt and tells us whether Plus is active, together with your account identifier, the product, the store, the relevant dates and whether the purchase was a sandbox or test purchase. We keep those events as a billing ledger so your entitlement can be reconstructed.
Product analytics. We use PostHog to understand how the app is used: which screens are reached, which onboarding steps are completed, whether the paywall was shown or dismissed. Events are explicit and named; there is no automatic capture of taps, no session replay, and no advertising identifier. Events carry your account identifier, device type, operating system version and app version. This is first-party analytics and is not used to track you across other companies’ apps or websites, so the app does not ask for App Tracking Transparency permission.
Crash reports. We use Sentry to learn when the app crashes. A report carries the stack trace, device model, operating system and app version. Personal data is not attached, and performance tracing is off.
The analyst note (Plus, only if you allow it). Each week a short note is written about your fund’s earnings. If you allow AI coverage (the app asks once on the Earnings tab, and Settings → The earnings call → AI analyst note is the switch), that week’s report is sent to Anthropic to write it: your fund symbol, fund and manager name, each listing’s name, guidance, sessions, verdict and price move, whether it was halted, held by a circuit breaker or rallied, the prior week’s move, and the names of your risk factors. Anthropic generates the text under its commercial API terms, and the note is stored with your report. Until you allow it, and from the moment you turn it off, nothing is sent and the standard note is written on our own servers.
Reports. If you report a fund or an exchange, we keep your report (the reason and any note you wrote) together with a copy of the names you reported, so we can review it. The person or exchange you report is not told who reported them.
Why we use it
To run your exchange and keep it in sync across devices; to deliver the alerts you turned on; to sell, deliver and restore Plus; to understand which parts of the app work and which do not; to find and fix crashes; and to write the analyst note. Where data-protection law asks for a legal basis: performing our contract with you, our legitimate interest in keeping the app working and improving it (which includes reviewing reports), and your consent for notifications, for linking a sign-in provider and for the AI-written analyst note.
Who processes it
We use the following providers, each only for the purpose named:
| Provider | Purpose | Where |
|---|---|---|
| Supabase | Database, authentication and server functions | AWS, us-east-1 (United States) |
| Expo | Delivering push notifications you turned on | United States |
| Apple | Sign in with Apple, App Store purchases and billing | Apple’s terms apply |
| Sign in with Google, if you choose it; Google Play purchases and billing on Android | Google’s terms apply | |
| RevenueCat | Subscription status and receipt validation | United States |
| PostHog | Product analytics | United States (US cloud) |
| Sentry | Crash reporting | United States |
| Anthropic | Writing the analyst note for Plus funds | United States |
We do not sell personal data, share it with advertisers or data brokers, or use it for advertising.
How long we keep it
For as long as your account exists. Anonymous accounts that never finished onboarding are removed automatically thirty days after they were created. When an account is deleted, its billing events stay in the ledger as the record of the purchase, no longer linked to any account, and reports other people filed about a fund keep the names as they were reported. Crash reports and analytics events are kept for the retention period of the provider named above and then discarded.
Your data, your controls
Export. In the app, open Settings → Account → Export my data. You receive everything the exchange holds about your fund in JSON; Plus adds Export my statement (CSV).
Delete. In the app, open Settings → Account → Delete account & history. This removes your account, your market and your ledger from our systems, and asks RevenueCat to forget your subscriber record. An active Plus subscription is billed by Apple or Google Play and is not cancelled by deleting the account: cancel it in that store’s subscription settings. Without the app, email the contact address above from the address linked to your account and we delete it within 30 days; the support page has the steps.
Alerts. Turn notifications off in Settings under Market hours & alerts, or in your phone’s settings; the push token is dropped when you do.
AI analyst note. Turn it off in Settings → The earnings call → AI analyst note. Nothing further is sent to Anthropic once it is off.
Your rights. Depending on where you live you may have the right to access, correct, export, delete or restrict the use of your personal data, and to complain to a supervisory authority. Write to us at the contact address above and we will respond.
Children
Opening Bell is not directed at children under 13 (or the age of digital consent where you live) and we do not knowingly collect their data.
Security
Data travels over TLS, is stored with row-level access rules so one account cannot read another’s market, and server credentials are kept out of the app. No system is perfectly secure; if we learn of a breach that affects you we will tell you.
Changes
If this policy changes we will publish the new version at this address with a new effective date. Material changes are also announced in the app.