Privacy Policy

1Who we are

PLoutIQ is a stock research and personal financial planning platform operated by Ploutiq. This policy covers ploutiq.com and barakahway.com, which points to the same service.

Questions about this policy or about your data: privacy@ploutiq.com.

2What we collect

Three categories, and nothing outside them.

Account information

Your email address, and a securely hashed password if you sign up with email. We never see your password in readable form.

If you sign in with Google, Google sends us your email address, your name and your profile picture. That is all we ask for and all we receive. We do not get your Google password, your contacts, your Drive, or your Gmail. You can revoke our access at any time from your Google account permissions page.

Financial information you enter

This is the sensitive part, so we are specific about it. Depending on which modules you use, PLoutIQ stores:

• Portfolio — your portfolios, transactions, dividends and display settings.
• Wealth — assets, liabilities, business equity, receivables, budget categories, savings goals, allocations and your wealth profile.
• Zakat — your zakat calculation settings, if you use that feature.
• Research — tickers you follow, screens you save, and alerts you subscribe to.
• Plan — which PLoutIQ plan your account is on.

All of this is optional. PLoutIQ works as a research tool without you entering a single figure. What you enter is what we hold.

Technical information

Standard server logs from our hosting provider — IP address, browser, pages requested, timestamps — kept for security and debugging. We do not run advertising trackers or third-party analytics that profile you across the web.

3Zakat and religious observance

If you use the Zakat feature, the settings you save can reasonably be taken to indicate religious observance. Several privacy regimes treat that as a special category of data deserving extra protection, and we treat it that way: it is stored under the same per-user access controls as the rest of your financial data, it is never used for any purpose other than producing your own zakat calculation, and it is never shared.

If you would rather not have it stored at all, simply do not use the Zakat feature — every other part of PLoutIQ works without it.

4How we use it

• To run the features you asked for — showing your portfolio, computing your net worth, sending the alerts you subscribed to.
• To authenticate you and keep your account secure.
• To contact you about your account: confirmation, password resets, and material changes to the service.
• To fix problems and improve the platform, working from aggregate behaviour rather than reading individual portfolios.

5What we do not do

Stated plainly, because these are the things people worry about:

• We do not sell your data. Not to anyone, not in aggregate, not anonymised.
• We do not share your holdings, net worth or watchlists with any third party.
• We do not trade on your data, or publish it as market colour.
• We do not serve advertising, and we do not let ad networks track you here.
• We do not have access to any brokerage account. PLoutIQ cannot place a trade, and never asks for broker credentials.

6Where your data lives

Your data is stored in a managed PostgreSQL database hosted by Supabase on AWS infrastructure in the Asia Pacific (Seoul) region. Access is restricted per user at the database level, so one account cannot read another's records.

If you are outside that region, using PLoutIQ involves your data being transferred to and stored there.

7Who else touches it

We use a small number of service providers. They process data on our instructions and for no purpose of their own.

Market data flows one way. PLoutIQ requests prices, filings and fundamentals by ticker symbol, and those requests carry no user identifier. Our data provider cannot tell what you own or what you are looking at.

We will also disclose data where we are legally required to, and will tell you unless we are prohibited from doing so.

8Keeping it and deleting it

We keep your data for as long as your account is open. Delete your account and the records tied to it are removed; backups age out on their own cycle within 30 days. Server logs are retained for a short period for security purposes.

You can delete your account from your account settings, or by emailing privacy@ploutiq.com. You can also ask us for a copy of everything we hold about you, or ask us to correct it.

9Cookies and browser storage

PLoutIQ stores a session token in your browser so you stay signed in, and a few display preferences so the interface remembers how you left it. That is the extent of it. There are no advertising or cross-site tracking cookies.

10Children

PLoutIQ is not intended for anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has created an account, write to us and we will remove it.

11Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect. The effective date at the top always reflects the current version.

12Contact

Write to privacy@ploutiq.com with any question about this policy, or to exercise any of the rights described above.