Privacy Policy

GONG is operated by Sina Elakdar, the individual developer of the GONG app, who acts as the controller for personal data processed through the Service. For privacy questions, contact privacy@gongapp.net.

We collect information that is necessary to provide and improve the Service. The categories below describe what we may collect.

Account information

Your name, email address, account identifiers, and other basic profile information you provide.

Sign-in information

The GONG app supports two sign-in methods: Sign in with Apple and Google Sign-In. When you use one of these, we receive a limited set of identifiers and profile information (such as your name, email address, and a stable user ID) from Apple or Google as needed to create and authenticate your account. The app does not offer email/password sign-up.

Portfolio, watchlist, and holdings information

The stocks, ETFs, crypto assets, and watchlist items you add to GONG, and, if you choose to enter them, your holding details — including quantities or amounts held, purchase prices or cost basis, estimated values, total portfolio value, and gain, loss, or performance-related calculations derived from this information.

We do not connect to your brokerage, bank, or exchange accounts. Portfolio and holdings information is only what you enter or import into the app.

Notification preferences and push tokens

Your push notification token (an Expo/Apple push token used only to deliver notifications to your device), alert sensitivity (Essential/Balanced/Active), quiet hours, brief frequency (weekly, every 2 weeks, or monthly), your selected strategy preference (what GONG should watch for), and other notification settings you configure in the app.

Subscription information

Subscription status, product type, entitlement records, and renewal or cancellation information. Payments are processed by Apple through the App Store; subscription and entitlement state is managed for us by RevenueCat. GONG does not receive or store your payment card details.

We also keep a history of the subscription events RevenueCat sends us — for example a trial start, a purchase, a renewal, a cancellation, a billing issue, or an expiry — together with the product identifier, the store, the price and currency the store reported, and the related timestamps. This history is what lets us answer basic business questions such as how many trials convert, and it supports billing support, refunds, and accounting. It never includes your payment card details.

Device, app, and debug information

Device model, operating system version, app version and build number, platform, language or locale, and time zone, together with crash or debug information used to diagnose problems and improve reliability. Our servers also keep operational, security, and diagnostic logs (for example request logs and delivery status records) needed to run the Service safely.

Product analytics and usage information

Information about how you interact with app features, settings, and alerts, used to improve the Service. GONG’s product analytics are first-party: usage events are recorded by the GONG app and sent to GONG’s own servers. They are not sent to an advertising network or to a third-party analytics product.

An analytics event records what happened and when — for example that onboarding was completed, that a signal was opened, that the paywall was viewed, or that a notification was tapped — along with the device, app, and locale context described above. These events do not include your holdings, quantities, cost basis, or portfolio values.

Anonymous install identifier

When the app first launches, it generates a random identifier for that installation and stores it on your device. It lets us count installs and understand a first session that happens before anyone signs up. It is notan advertising identifier, not the IDFA, not a device serial number, and not derived from anything about your device or about you. It is never shared with an advertising network and cannot be used to recognize you in another company’s app or website. Deleting and reinstalling the app produces a new, unrelated identifier. Once you sign in, we keep a link between that identifier and your account so that activity before and after sign-up can be counted as one journey.

Support and feedback information

Messages, attachments, and other content you submit when contacting support or sending feedback.

Waitlist and launch communications

If you join the GONG waitlist on our website, we collect your email address and, optionally, your phone number if you choose to provide it for SMS launch notifications. We also record your email and SMS consent choices and basic campaign or referral parameters (such as UTM tags) from the link that brought you to our site. Providing a phone number is optional and is used only to send launch updates and early-access invitations you have opted into.

Marketing attribution

We measure which marketing efforts bring people to GONG. We never link your activity in GONG with data from other companies’ apps or websites unless you allow it through the iOS App Tracking Transparency prompt (see section 5a).

• Apple Search Ads attribution — if you install GONG after seeing an ad in the App Store, the app asks Apple for an attribution token and our server exchanges that token with Apple for campaign-level information, such as the campaign, ad group, keyword, and country or region. This uses Apple’s AdServices framework, which does not require the IDFA and does not involve the App Tracking Transparency prompt. The token itself is a short-lived credential: it is kept only until it is exchanged and is then deleted.
• Our own marketing links — links we publish ourselves, such as gongapp.net/go/ios, may carry campaign parameters like utm_source, utm_medium, utm_campaign, utm_content, utm_term, a referral tag, and an advertising network’s own click identifier. When you follow one of these links we record those parameters, a random click identifier, the destination, your browser’s user agent string, and the country reported by our content delivery network. We do not store your IP address — we store a salted, one-way hash of it, used to recognize duplicate or automated clicks. We do not look up your location from your IP address, and these links set no cookies.
• Ads on other platforms — install and subscription measurement for ads we run on platforms such as Meta, TikTok, or Reddit is described in section 5a.

We use the information we collect to:

• Create and manage your account.
• Authenticate you when you sign in.
• Personalize market alerts based on your portfolio and watchlist.
• Rank the relevance of signals to your holdings and interests.
• Generate portfolio impact explanations and summaries tailored to your portfolio.
• Send push notifications you have enabled.
• Send waitlist confirmations, launch updates, and early-access invitations by email and — only if you separately opt in — by SMS.
• Apply your quiet hours, alert sensitivity, and other notification preferences.
• Manage subscriptions and provide access to paid features such as GONG+.
• Provide customer support and respond to your requests.
• Protect the Service from abuse, fraud, and security incidents.
• Improve app reliability, performance, and quality through bug diagnosis and usage analysis.
• Understand in aggregate how GONG is used — for example how many people finish onboarding or open their first signal — so we can fix what does not work.
• Measure how many trials and subscriptions start, renew, or end, and keep accurate billing and accounting records.
• Measure which marketing campaigns bring people to GONG and what they cost, so we can decide where to spend.
• Comply with legal obligations.

Some GONG features use AI processing, currently provided by Google Gemini, to generate news summaries, signal explanations, portfolio-impact assessments, periodic briefs, and on-demand deeper analysis.

News and market content is processed by these providers to produce the original GONG summaries you see in the app. When needed to produce a personalized result — for example a portfolio-impact explanation or a deeper analysis you request — relevant portfolio context may also be processed. That context can include your asset symbols, watchlist entries, which of your assets are active, and, where you have entered them, quantities or cost information. We send this data only to deliver the feature you requested, and we do not permit providers to use your data to train their general-purpose models where we can control that setting. We cannot control the internal retention practices of external providers beyond the terms they offer.

GONG is an informational product. It does not execute trades and does not give direct buy/sell instructions.

AI-generated content may be inaccurate, incomplete, biased, or unsuitable for your circumstances. It is informational only and is not financial advice. You should verify important information independently before acting on it.

• We do not sell personal data.
• We do not show third-party ads inside GONG.
• We never send your portfolio holdings, quantities, cost basis, portfolio values, or asset symbols to any advertising network, ad platform, or attribution provider.
• We do not share portfolio, holdings, or watchlist data with advertisers.

When we advertise GONG on other platforms, we measure which campaign led to an install or a subscription so we can stop paying for ads that do not work. To do this:

• The GONG iOS app includes the Meta SDK and the AppsFlyer measurement SDK. They receive app install and app-open events plus device and app information such as device model, operating system version, app version, IP address, and Apple’s vendor identifier (IDFV). The app also tells AppsFlyer when a free trial starts (without any price). AppsFlyer assigns the install a random AppsFlyer ID.
• RevenueCat, which manages subscriptions for us, reports subscription events — for example a free trial starting or converting, a subscription being purchased, renewed, cancelled, or expiring, together with the product and its price — to AppsFlyer (linked by the AppsFlyer ID) and to Meta.
• AppsFlyer passes install, trial-start, and paid-subscription events (with the subscription price) to the ad platform that showed you the ad — for example Meta, TikTok, or Reddit — so it can tell which ads work.
• GONG shows the iOS App Tracking Transparency prompt. Only if you choose “Allow” does GONG read your device’s advertising identifier (IDFA) and share it with these providers. If you do not allow it, the IDFA is never read, and measurement relies on Apple’s privacy-preserving SKAdNetwork and aggregated data. You can change this choice at any time in iOS Settings → Privacy & Security → Tracking.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, we rely on the following legal bases to process your personal data:

• Performance of a contract — to create and operate your account, deliver core Service features, and manage subscriptions you purchase.
• Consent — for push notifications and other optional choices you turn on. You can withdraw consent at any time in app or device settings.
• Legitimate interests — to keep the Service secure and reliable, support users, prevent abuse and fraud, and improve the product. We balance these interests against your rights.
• Legal obligations — to meet billing, tax, accounting, and compliance requirements, and to respond to lawful requests where applicable.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can also:

• Delete your account from within the GONG app.
• Update your portfolio, watchlist, holdings, and notification preferences in the app at any time.
• Disable push notifications in app or device settings.
• Opt out of waitlist or launch communications at any time — use the unsubscribe link in any email, reply STOP to any SMS, or contact us.
• Contact us at privacy@gongapp.net to make a privacy request.

We rely on third-party service providers to operate GONG. These providers process information on our behalf and are subject to their own terms and privacy practices. Categories of providers include:

• Authentication, database, and hosting providers — currently Supabase (authentication and database) and infrastructure hosts for our backend and website.
• Apple, for subscriptions and payments processed on iOS.
• RevenueCat, which processes subscription receipts and entitlement state on our behalf.
• Push notification delivery providers — Expo push services and Apple Push Notification service (APNs).
• Email and SMS communication providers, used to deliver waitlist and launch updates you have opted into.
• Market and news data providers.
• AI processing providers — currently Google Gemini — used to generate summaries, signal explanations, briefs, and portfolio-impact assessments as described above.
• Apple, for App Store campaign attribution through the AdServices framework and for Apple Search Ads campaign reporting.
• AppsFlyer, our mobile measurement provider, and advertising platforms we run campaigns on (for example Meta, TikTok, or Reddit). They receive the install, app-open, and subscription events described in section 5a. They do not receive your account details, portfolio, holdings, or watchlist.
• Product analytics are first-party — usage events are stored in our own database and are not sent to a third-party analytics product. Third-party crash reporting may be added in a future release.

We retain personal data for as long as needed to provide the Service and for legal, security, and billing reasons.

More specific periods apply to the records described above. Raw product analytics events are kept for up to 400 days and are then deleted; only aggregate, non-identifying summaries are kept longer. Click records from our own marketing links are kept for up to 180 days. An Apple attribution token is deleted as soon as it has been exchanged with Apple, and in any case within 7 days. Resolved campaign-level attribution and subscription event history are kept for as long as we need them for business, accounting, and legal purposes.

When you delete your account, we delete your account record and the user-specific data linked to it — including your portfolio and holdings, watchlist, notification preferences, saved analyses, notification history, push tokens, and entitlement records held in our database — except for limited records we may retain for legal, billing, fraud prevention, or security reasons. Backup copies made for reliability may persist for a limited period before they are rotated out; deleted data is not restored from backups into the live Service.

Account deletion also covers the analytics records described in this policy. The link between your anonymous install identifier and your account is deleted, your account-level milestone records are deleted, and your past analytics events are anonymized — your account identifier is detached from them and identifying fields are stripped, leaving non-identifying rows that survive only inside aggregate counts. Subscription and purchase event records are retained, because we need them to meet financial, accounting, tax, refund, fraud-prevention, and other legal obligations.

Purchase records held by Apple and subscription/entitlement records held by RevenueCat are retained separately by those providers for operational, fraud-prevention, accounting, or legal reasons and are governed by their terms. Shared, non-personal records — such as global news items, market data, and aggregated operational metrics that are not linked to your account — are account-independent and are not deleted when an individual account is removed.

You can initiate deletion of your GONG account from inside the app at Profile › Manage account › Delete account. Deletion is intended to be permanent. Some limited records may be retained as described in “Data retention” above.

See Delete account for step-by-step instructions.

At this time, our website does not use advertising cookies, tracking pixels, or analytics cookies.

Our campaign links, such as gongapp.net/go/ios, record the click on our server as described in “Marketing attribution” above. They do not set a cookie and place no tracker in your browser.

GONG and our service providers may process and store information in countries other than the country where you live. By using GONG, you understand that your information may be transferred to and processed in those countries, subject to appropriate safeguards.

We use reasonable technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

GONG is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice within the app or by other appropriate means. The “Last updated” date at the top of this page indicates when this Privacy Policy was last revised.

If you have questions about this Privacy Policy or our privacy practices, contact us at:

• Privacy: privacy@gongapp.net
• Support: support@gongapp.net