Privacy policy
The short version: your data is yours, we don't sell it, and we don't show you ads.
We don't sell your data
Your portfolio information is yours. We will never sell it, share it with advertisers, or let third parties use it to target you.
No ads, ever
We don't show advertisements. No banners, no sponsored content, no “partners” trying to sell you financial products. FundBlender is funded by subscriptions, not your attention.
What we collect
We keep data collection to the minimum needed to make the product work: your email address (for sign-in), any optional profile details you choose to provide such as your name, and the portfolio positions you enter. We also store the results of analyses you run (x-ray breakdowns, scenario simulations) so they load quickly on return visits.
Where your data lives
Your data is stored on servers in Europe, where strong privacy laws (GDPR) apply. Connections to FundBlender are encrypted in transit using TLS. Portfolio data is stored in a managed database with encryption at rest.
Market data
To power the x-ray, explorer, and strategy lab, we fetch publicly available market data (ETF holdings, historical prices) from third-party financial data providers. We do not share your portfolio positions or personal information with these providers — we only send the ticker symbols needed to look up prices and holdings.
Analytics
We use privacy-friendly analytics to understand how people use the app, such as which pages are visited and where people get stuck. We don't track you across the web or build a profile.
Cookies
We use a small number of cookies to keep you logged in and remember your preferences. No tracking cookies, no third-party advertising cookies.
Email communications
We only email you when necessary: verifying your email, sign-in codes, and subscription changes. No marketing newsletters.
Sharing with third parties
We don't share your data with advertisers or data brokers. We use a small number of service providers to operate the product: hosting (Railway/Fly.io), payment processing (Stripe), authentication (Appwrite), and bot protection (Cloudflare). These providers only process data as needed to deliver their service.
Shared portfolio links
If you create a share link for a portfolio, a read-only snapshot of that portfolio's data is stored and accessible via the link. You can revoke any share link at any time from your account, which immediately deletes the snapshot.
Deleting your data
You can delete your account and all associated data at any time from your account settings. When you delete, we delete. No shadow copies, no backups retained, no exceptions.
Questions?
If you have any questions about this policy, please contact us.
Last updated: April 2026