Privacy Policy

Last Updated: October 25, 2026

In plain terms: Ekonix stores research locally in iOS and processes account, subscription, and website usage information to operate its services. Research saved through account-based web or synchronization features is stored on our servers. Our website uses Google Analytics and our own traffic attribution system.

Ekonix is operated by South Shore Capital LLC ("we," "our," or "us"). This Privacy Policy covers the Ekonix mobile application ("App"), ekonixlab.com, and associated account, research, and subscription services (together, the "Services").

1. How We Use Information

We use information to deliver financial research, save the research you submit, authenticate accounts, verify purchases, provide subscription access, personalize supported features, respond to support requests, prevent abuse, and understand website usage. Financial information displayed about public companies is distinct from personal information you provide.

2. Local Research and Account-Based Research

iOS can store portfolios, notes, ratings, tags, and settings on your device. Account sign-in shares verified subscription access across supported versions. Where account-based research or synchronization is available, research you save or synchronize is transmitted to our backend and associated with your account. This may include company symbols, names, sectors, notes, ratings, tags, watchlist status, share quantities, cost bases, target allocations, and update or deletion metadata.

Feature availability depends on the platform and version; this policy does not promise that all research synchronizes or that synchronization is available in every release. Local-only research is not uploaded merely to verify a subscription. Do not put passwords, payment-card details, or other unnecessary sensitive information in research notes.

3. Information Stored Locally on Your Device

The App stores the following information locally on your iOS device using Apple's secure storage mechanisms (SwiftData and UserDefaults):

Important: Local-only data can be lost when you delete the App or lose access to your device. Data saved through supported account-based research or synchronization features also has a server copy. Deleting the App does not delete that copy or your account; see the deletion instructions below.

4. Public SEC Data Access

When you search for a company or view financial data, the App retrieves publicly available information from the U.S. Securities and Exchange Commission's EDGAR database through our backend service. This includes:

This information is already publicly available to anyone. We simply retrieve and present it in a visual format.

4.1 Network Requests

When using the App, network requests are made to our backend service. These requests:

4.2 Website Traffic Attribution

When you visit the Ekonix website, we collect limited analytics to understand where traffic comes from. This may include:

We use this information to measure traffic sources, campaigns, and landing pages. We do not sell this information.

4.3 Accounts, Login Security, and Subscriptions

When you create or use an Ekonix account, we store your email address, account identifier, verified subscription status, payment-provider customer and subscription identifiers, and purchase-ownership records needed to connect access across platforms. If you connect Sign in with Apple, we also store Apple's stable account subject to recognize that Apple identity on later sign-ins. If you use personalization features, we also store the profile, preferences, and interaction events supplied to those features. Existing anonymous iOS personalization may use a device-based identifier.

We send one-time sign-in codes through Resend. Codes expire after 10 minutes and have limited verification attempts. We store a cryptographic code hash and account session-token hashes. Web sessions use a Secure, HttpOnly cookie with a 30-day lifetime; native account tokens are stored in iOS Keychain. We keep keyed hashes of email/IP identifiers for short-lived login abuse limits, rather than raw IP addresses in those rate-limit records. Cloudflare may process the original IP to provide its services.

Apple sign-in verifies identity tokens with Apple’s public signing keys. Apple purchase linking uses Apple-signed transactions and App Store Server API verification. We store original transaction identifiers, environment, product, expiry, status, and the linked Ekonix account. Website billing uses Stripe. Ekonix’s application database does not store full card numbers or security codes.

5. Third-Party Infrastructure

5.1 Our Backend Infrastructure (Cloudflare Workers)

We use Cloudflare Workers to host our backend API that retrieves SEC data. When you make a request:

5.2 SEC EDGAR

Financial data is retrieved from the SEC's EDGAR system. The SEC's privacy policy applies to their services: sec.gov/privacy

5.3 Apple App Store and StoreKit

If you download Ekonix from the Apple App Store or purchase a subscription:

5.4 Resend and Stripe

Resend processes recipient and sender email addresses, sign-in email content, and delivery information to send your login codes. See Resend’s Privacy Policy. Stripe processes billing contact information, payment details, subscriptions, and invoices for website purchases. See Stripe’s Privacy Policy.

5.5 Google Analytics

We use Google Analytics on our website to measure visitors, page views, engagement, and traffic sources, including campaign links. Google Analytics receives website request information, including the IP address used to connect to Google, and uses cookies and similar identifiers to distinguish browsers and sessions and processes device and browser information and website activity. These counts are estimates and do not necessarily represent distinct people. See Google’s Privacy Policy and Google’s Analytics opt-out browser add-on.

5.6 Cookies and Browser Storage

Necessary storage supports sign-in, account security, and service preferences. Our website account session uses a Secure, HttpOnly cookie with a 30-day lifetime. Our traffic attribution script stores a random identifier in session storage, normally for the browser tab session. Google Analytics uses cookies such as _ga to distinguish browsers and measure activity; cookie lifetimes depend on Google and our property settings. Browser storage may also retain app preferences and cached research.

You can block or clear cookies and site storage through your browser, although doing so may sign you out or affect service functionality. Google's opt-out add-on linked above controls supported Google Analytics collection; it does not disable our separate traffic attribution system. Contact us about attribution information. These options do not replace any consent required by law. Visiting the website or accepting our Terms does not itself constitute consent to optional analytics.

5.7 Other Providers and International Processing

Research requests may involve financial-data and company-logo providers, including Yahoo Finance and Logo.dev, and your browser or device may connect to third-party resources used to display them. Our infrastructure and providers may process information in the United States and other countries. Applicable data protection laws may require safeguards for international transfers; contact us for information about the arrangements relevant to your request.

6. User Rights (GDPR / CCPA)

6.1 European Economic Area (EEA) Users - GDPR

If you are located in the European Economic Area, the following applies:

To exercise any rights or for questions, contact us at support@ekonixlab.com. You may also lodge a complaint with your applicable data protection authority. Rights depend on applicable law; we may need to verify your identity before acting.

6.2 California Residents - CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

To exercise any rights, contact us at support@ekonixlab.com.

7. Data Retention & Deletion

Local Device Data: Local research and settings remain on your device until you remove them or delete the App. Removing the App does not remove server copies.

Backend Cache: SEC financial data is cached on our servers for up to 7 days for performance. This data contains no personal information.

Website Traffic Attribution: We retain traffic source records for traffic and campaign analysis, subject to deletion requests and applicable requirements. Google Analytics retention depends on the property settings and type of report; contact us for current retention information. Cookie lifetimes and server-side retention are separate.

Account-Based Research: Research submitted through supported account-based features is retained while stored in your account. Deleting a synchronized entry removes its active content; revision or deletion markers may remain to prevent deleted items from reappearing. Account deletion removes server research entries.

Account and Login Records: Account details are kept while the account is in use. Expired email-code challenges are removed by daily maintenance once they are more than a day past expiry; expired abuse-limit records are also removed. Sign-in sessions expire after 30 days and are revoked on sign-out or account deletion.

Account Deletion and Billing Records: Account deletion removes the account email, profile, preferences, interaction events, and server-stored research and revokes account sessions. A pseudonymous account identifier and minimum purchase-ownership/billing records remain to prevent duplicate claims and maintain transaction integrity. Stripe and Apple may retain their transaction records under their own policies and applicable requirements. Deleting an account does not cancel an Apple subscription. See the Subscription Policy for billing effects.

How to Delete Your Data

Delete local research in the App or remove the App from your device. For server-stored account data, use Delete Account in the supported iOS account screen or on the website. Clear website storage separately in your browser. Deleting the App does not delete an account, remove server research, or cancel subscriptions. See account and data deletion instructions. Contact support@ekonixlab.com about analytics, support correspondence, or other privacy requests; analytics records may not be identifiable from an email address alone.

8. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise any rights, please contact us:

Email: support@ekonixlab.com

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

9. Data Security

Since your research data is stored locally on your device:

For our backend services:

10. Children's Privacy

The Services are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. The App is intended for adults interested in financial research and investing topics.

If you are a parent or guardian and believe your child has used the App, please contact us. We will review the request and address any account information covered by it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

We encourage you to review this Privacy Policy periodically. An updated policy does not replace any separate consent or other legal requirement that applies to a change in processing.

12. Legal Disclaimer

Ekonix is a tool for research and educational purposes only. The financial data displayed includes public SEC filings, company releases, and third-party market data. We are not registered investment advisors, and nothing in the Services constitutes financial, investment, or legal advice. Please consult with qualified professionals before making investment decisions.

This policy describes our practices; it does not waive your statutory privacy rights.

← Back to Home