Privacy Policy

MTRA, s. r. o., IČO 57541345, with its registered office at Kopčianska 3756/10, 851 01 Bratislava-Petržalka, Slovakia ("MTRA", "Auspex", "we", "us", or "our"), operates Auspex and is the controller of personal data described in this policy.

This policy applies to the Auspex website, web application, mobile applications, support channels, and related services. It does not govern third-party websites or services that have their own privacy notices.

• To create, authenticate, secure, and administer your account.
• To provide watchlists, preferences, usage limits, subscriptions, and support.
• To process purchases, synchronize entitlements, and prevent duplicate billing.
• To detect abuse, investigate errors, protect the service, and enforce our Terms.
• To comply with accounting, tax, consumer-protection, and other legal obligations.
• To analyze page usage and improve Auspex through Google Analytics, but only after you consent to optional technologies.

Where the GDPR or similar law applies, we rely on performance of our contract to provide your account and subscription; compliance with legal obligations for accounting, consumer, and regulatory duties; legitimate interests in securing, operating, and improving the service; and consent for optional analytics or other processing where consent is required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

We use providers that process data for the purposes described above, including:

• Google Firebase and Google Cloud for authentication, databases, hosting, and functions.
• Google Analytics 4 for consent-based website usage analytics.
• Google and Apple as optional identity providers.
• Stripe for web subscriptions and payment administration.
• RevenueCat, Apple App Store, and Google Play for mobile subscriptions.
• Financial Modeling Prep and other market-data providers when stock symbols or related requests are needed to provide market information.
• RapidAPI and Google Gemini-backed services for selected market indicators or news features.
• Expo/EAS for building and delivering mobile applications.
• Professional advisers or authorities where disclosure is legally required.

We do not sell personal data. We do not use personal data for third-party targeted advertising.

Some providers may process data outside Slovakia or the European Economic Area. Where required, we rely on adequacy decisions, Standard Contractual Clauses, provider data protection terms, or another lawful transfer mechanism. Provider-specific terms may also apply when you choose Google, Apple, Stripe, or an app-store service.

We keep account data while your account is active and for as long as reasonably necessary to provide the service. After deletion, we remove the Firebase account and user data under our control, subject to technical completion, backups, fraud prevention, dispute resolution, and legal retention duties. Billing providers may retain transaction records under their own legal obligations. Support records and security logs are retained only as long as reasonably necessary for their purpose.

After account deletion, we may retain a pseudonymous record of free-tier detailed-stock usage linked to your verified email address. We store a cryptographic hash of your normalized email address, not your email in readable form, together with a usage count and related timestamps. We retain this information to enforce free-tier limits described in our Terms and to prevent abuse, including repeated account creation to reset limits, based on our legitimate interest in operating the service fairly and on performance of our agreement with you where applicable.

Data stored locally on your device may remain after account deletion until you clear the app data, browser storage, or uninstall the application.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive portable data; withdraw consent; and complain to a supervisory authority. EEA users may complain to the Slovak Office for Personal Data Protection or their local authority.

You can delete your account from settings. For access, portability, or another privacy request, email us from the address associated with your account. We may need to verify your identity before completing the request.

We use administrative and technical safeguards designed to protect personal data, including authenticated access and provider security controls. No online service can guarantee absolute security.

Auspex is intended only for users aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data.

We may update this policy when the service, providers, or law changes. We will update the date above and provide additional notice where a material change requires it.