Stock Signals.

MANIMAU STUDIOS · LEGAL

Privacy Policy

How we handle information when you use Stock Signals, receive notifications, visit our website or contact support.

Last updated:

1. Who we are and what this policy covers

Manimau Studios Pte Ltd. (“Manimau”, “we”, “us”, “our”) provides Stock Signals, also listed as “Autopilot AI Stocks Alerts” or “Stock Signals + Options”, and its associated website. This policy describes information processed when you use the app, visit its pages, receive notifications or contact support.

Our privacy contact for enquiries, requests and complaints is manimau@outlook.com. This policy explains our practices; it does not waive your privacy rights or treat your use of a website as consent to every form of processing. We obtain consent where required and may also process information on other grounds permitted by applicable law.

2. Information processed and its purposes

  • Purchases and entitlements: app-specific or pseudonymous identifiers, transaction and product identifiers, purchase dates, subscription or lifetime-access status, eligibility and restoration information. We use these to recognise purchases, deliver paid access, manage offers, handle support and prevent misuse. Apple handles payment; we do not receive your Apple Account password or full payment-card details.
  • Device, usage and diagnostic information: app and operating-system versions, device characteristics, installation identifiers, app interactions, crash and error reports, and request metadata such as IP address. This supports service delivery, diagnostics, security, reliability, usage analysis and product improvement. Technical identifiers are not necessarily anonymous; coarse location may be inferred from an IP address.
  • Research requests: ticker symbols, search terms, filter criteria, selected dates and request parameters needed to return charts, filings, news, signals or other results. These can be sent to our backend or the relevant data provider. Some filtering and caching occurs on your device.
  • Notification registration and preferences: an app-installation identifier, push-messaging token, registration/authentication information, revision and update records, whether alerts are enabled, selected stock/options/political/insider feeds, purchase/sale selections and minimum-value thresholds. Our notification backend uses these to route selected alerts, synchronise preferences, avoid duplicate processing, diagnose delivery and protect registration. It may retain event identifiers, delivery status, attempts and error records.
  • Support communications: your email address, message, form responses, screenshots, attachments and technical details you choose to submit. We use these to investigate, respond, maintain service records and handle legal requests.
  • Install and purchase attribution: attribution information made available through Apple’s advertising attribution services and purchase infrastructure may be processed to understand campaign effectiveness. Platform restrictions and any required permission apply.

The app does not require a brokerage login to browse research, and its research features do not obtain your actual brokerage positions, execute trades or access your payment-card account. Do not send passwords, full card numbers, identity-document numbers or brokerage credentials to support.

3. Service providers and other recipients

We use the following categories of providers to operate the Service. The data they receive depends on the feature used, configuration and applicable permissions:

  • Apple: App Store purchases, subscription management, platform delivery, Apple Push Notification service and available install attribution. See Apple’s privacy information.
  • Google Firebase: analytics, crash diagnostics, cloud configuration/data infrastructure and Firebase Cloud Messaging. Depending on the service, information can include installation or device identifiers, interactions, diagnostics, request metadata and messaging tokens. See Firebase’s privacy and security information.
  • RevenueCat: purchase verification, entitlement management, restoration, offer handling and available attribution. This can involve app-specific identifiers and purchase/transaction information. See RevenueCat’s privacy policy.
  • Cloudflare: backend hosting, request processing, security and storage used for research feeds and notification registration/delivery records. See Cloudflare’s privacy policy.
  • Tally and support/email providers: information you submit using the external support form or email. See Tally’s privacy policy.
  • Market-data, news and public-filing sources: request details and network metadata needed to retrieve the content you ask for. Following an external link can disclose your IP address, browser/device details and information contained in the link to that site.

We may disclose information where reasonably necessary to comply with law or valid legal process, investigate abuse, establish or defend rights, protect users or security, or carry out a corporate transaction subject to applicable safeguards. We may also disclose information at your request or with your consent. Providers can have their own legal obligations and policies; this notice does not promise that their processing is fully anonymous.

4. Public political and corporate-insider records

The Service displays information from public disclosures, such as names, official or corporate roles, transaction details and filing dates. These records concern the people identified in the disclosures and are separate from information about app users. We process them to make public financial information searchable and understandable. We do not infer that a person has engaged in wrongdoing or disclose a user’s brokerage holdings through these features.

If you believe a displayed record is inaccurate or raises a privacy concern, contact us with the ticker, filing reference and relevant details. We can investigate our presentation and processing; correction of the authoritative filing may also require contacting its publisher or filing authority. We may retain information where a lawful public-information, legal or other permitted basis applies, subject to applicable rights and exceptions.

5. Local storage, website storage and external links

The app uses local preferences, caches and secure device storage for settings, notification selections, access state, help progress, previously loaded content and installation authentication. Some secure Keychain information can persist after an app is removed or reinstalled, depending on platform behaviour. Deleting the app does not by itself erase backend, provider or support records and does not cancel a subscription.

The current landing page does not itself add an advertising tracker, analytics script or cookie banner. Website hosting and security providers can still process request metadata such as IP addresses and browser details. App SDK storage is separate from browser cookies. External App Store pages, articles, SEC filings and support forms have their own storage and privacy practices; their links do not imply that we control them.

6. Notifications, analytics and your choices

You can change feed selections, thresholds and notification settings in the app and control notification permission in iOS Settings. Turning notifications off stops their authorised presentation or requested sending as applicable; it is not a request to erase all existing registration or delivery records. Notifications may contain ticker, signal or filing information visible on your lock screen; control previews and device access in iOS Settings.

Apple’s privacy and tracking settings govern relevant platform permissions. If a processing activity requires permission, declining or withdrawing it may limit that activity. The availability of an iOS tracking control does not mean it disables all service diagnostics or analytics. Contact us about applicable rights to object, withdraw consent or request deletion rather than assuming every SDK record is erased when a device setting changes.

We use support communications to respond to your enquiry, not to add you to an unrelated promotional mailing list. If optional marketing is offered, you can use the applicable unsubscribe or preference control. We do not use this policy as consent to unrelated marketing.

7. Retention and deletion

We retain personal data only while needed for the purposes described here and lawful business or legal requirements. Relevant criteria include whether access or notifications remain active, transaction and tax record requirements, support resolution, troubleshooting, security, fraud prevention, disputes and legal holds. Different providers and record types can have different retention periods.

Disabling notifications or uninstalling does not automatically delete a backend device registration or delivery history. You may ask us to investigate and delete or de-identify records where applicable. We may need limited installation or purchase details to locate a pseudonymous record; do not send credentials or authentication secrets. We may retain records where required or permitted by law and explain an applicable exception. Deleted records may remain temporarily in protected backups until those backups are replaced under their normal lifecycle.

8. Security and international processing

We take reasonable steps appropriate to the information and risks to protect personal data against unauthorised access, disclosure, loss or misuse. No internet transmission, device or storage system is completely secure. Keep your device, operating system and account access secure. We assess suspected breaches and notify affected persons or authorities where legally required.

We operate from Singapore and use providers with infrastructure in other countries. Your information may therefore be processed outside your place of residence, including in Singapore, the United States and other provider locations. Where transfer rules apply, we use safeguards required by applicable law, such as contractual protections or other recognised transfer arrangements. A provider’s global availability does not remove our applicable transfer obligations.

9. Privacy requests and complaints

Depending on applicable law and the circumstances, you may request access to and correction of personal data, information about its use or disclosure, deletion, restriction, portability, or object to certain processing. Where processing relies on consent, you may withdraw it, subject to lawful restrictions and notice; withdrawal does not make earlier lawful processing unlawful. Some rights apply only in particular jurisdictions or are subject to exceptions.

Send requests or complaints to manimau@outlook.com, describing your request and the information needed to locate the relevant record. We will take reasonable steps to verify your identity without requesting unnecessary sensitive information, respond within applicable legal time limits and explain a permitted exception or lawful fee if one applies. If the request concerns Apple billing, Apple Account data or another provider’s independently controlled records, we may direct you to that provider.

You may complain to the Personal Data Protection Commission of Singapore or another supervisory authority with jurisdiction. Nothing in this policy requires you to waive that right or first exhaust a contractual dispute process.

10. Children

The Service is not directed to children under 13, and we do not knowingly seek personal data from them. Where local law sets a higher age or requires parental authorisation, those requirements apply. Contact us if you believe a child has supplied personal data, so we can investigate and take appropriate action, including deletion where required. An App Store age rating does not itself establish eligibility under privacy or contract law.

11. Changes and contact

We will update this policy when our practices or applicable requirements change and show the revision date above. Where required for a material change, we will provide additional notice or obtain consent before the new processing begins. An update does not retrospectively authorise an incompatible use of information.

Privacy enquiries and requests: Manimau Studios Pte Ltd., manimau@outlook.com. For the rules governing the Service and financial-risk disclosures, read our Terms of Service.