Holdview — Privacy Policy

Last updated: November 2026

In short

Your portfolios are end-to-end encrypted on your devices before they leave them. Our server stores them but cannot read them, and neither can the developer. There are no analytics, no advertising and no tracking, and nothing is sold or shared.

Your account

To sync between devices and share portfolios you need a Holdview account. You sign in with Apple or with an email link. The account holds:

your email address (with “Hide My Email”, the relay address Apple gives us) and the identifier Apple or our sign-in service assigns to you;
your encryption keys, only in wrapped form: they are locked by your passkey or your recovery code, which we never receive.

Where your data lives

On your devices: a local copy, protected by iOS data protection. This is the only place where your portfolios are readable, together with the devices of the people you invite.
On our server: encrypted copies of your portfolios, stored with Supabase in the European Union (Ireland). Names, symbols, amounts, notes and the value history are all encrypted with keys that only your devices hold.
With people you invite: an invite link carries what their device needs to decrypt that portfolio. You can remove a person at any time; the portfolio is then re-encrypted with new keys they don't have.

What the server can see

To work, the server necessarily sees some information that is not encrypted: your account email and identifier, how many encrypted records you have, their size and when they change, which accounts a portfolio is shared with, and the notification token of your devices. Like any web service, our provider also keeps short-lived technical logs (such as IP addresses and request times) for security and operation.

Notifications

When a portfolio changes, our server asks Apple's push service to wake your devices and those of the people you share with. The push carries no content: your device fetches the encrypted changes, decrypts them and writes any notification text itself.

Backups

Holdview also backs up the portfolios you own as files in your own iCloud Drive (the “Holdview” folder in the Files app), or on your device only when iCloud Drive is off. Portfolios shared with you are never included. These files never pass through our server; they are readable JSON, so treat them like any financial document. You can delete them in the Files app at any time.

Market data

To show prices and exchange rates, your device requests public market data directly from Yahoo Finance, CoinGecko, Coinbase and Frankfurter (European Central Bank rates). These requests contain only ticker symbols and currency codes, never your holdings, amounts or identity.

Face ID and passkeys

The optional app lock and passkeys use Apple's on-device Face ID / Touch ID. Biometric data never leaves Apple's secure hardware and is never available to the app.

If you lose your keys

Because we cannot read your data, we cannot recover it either. If you lose both your passkey and your recovery code, your encrypted portfolios cannot be opened by anyone.

Deleting your data

A portfolio: delete it in the app. It is removed from the server and the people you shared it with lose access.
Your account: Settings → Holdview account → Delete Holdview account. Your account, keys, portfolios, shares and device tokens are deleted from the server, and your Sign in with Apple authorization is revoked.
Backup files stay in your iCloud Drive until you delete them there.

Your rights

You can ask us at any time what we hold about you, or ask us to correct or delete it. Write to the address below. Since your portfolios are encrypted, what we can hand over or describe is limited to what the server can see.

Contact

[email protected]