Privacy Policy

1. Who we are

OptionYield (“OptionYield”, “we”, “us”) is the operator of the Service, a mobile-first tool for scanning covered-call and cash-secured-put opportunities. You can reach us any time at info@optionyield.app.

2. Information we collect

2.1 Information collected on the Site

• Launch-list email address. If you submit the signup form, your email address is relayed through the FormSubmit form service to our inbox at info@optionyield.app. We use it for one purpose only: sending you OptionYield launch updates. You can ask to be removed at any time.
• Theme preference. Your dark/light-mode choice is saved in your browser’s localStorage (key my-yield-theme). It never leaves your device, and clearing your browser data removes it.
• Server logs. The Site is served through Cloudflare’s network by a Cloudflare Worker delivering static pages, which processes standard technical request data (such as IP address, requested URL, timestamp, and browser user agent) to serve pages and protect against abuse.

The Site sets no advertising cookies and runs no third-party analytics or tracking scripts.

2.2 Information collected in the App

• Account and authentication data. When the App launches, you can create an account with an email address and password, or by signing in with Google. Authentication is handled by Supabase; passwords are stored only as hashes, and sign-in session tokens are kept on your device.
• Your preferences and content. The watchlist, saved scans, filter criteria, and cost-basis figures you enter. Some of this data is synced to your account so it follows you across devices (protected by row-level security so only you can read it); some — like your local watchlist — is stored only on your device.
• Subscription status. Purchases are processed by Apple or Google. Via our subscription manager (RevenueCat) we receive entitlement and renewal status — never your full payment card details.
• Device and diagnostic information. Basic device model and OS version when you request support, and information included in crash or bug reports.
• Biometric unlock. If you enable Face ID / fingerprint unlock, the check is performed entirely on your device by the operating system. We never receive and never store biometric data.

3. How we use information

We use the information above to:

• operate your account and keep you signed in securely;
• send the launch and product updates you asked for (and only those);
• sync your watchlist, scans, and filter settings across your devices;
• recognize your subscription entitlements and unlock paid features;
• answer support requests and fix bugs you report;
• keep the Service secure, prevent abuse, and comply with law.

We do not use your information for advertising profiles, and we do not sell or rent it to anyone.

4. Legal bases for processing (GDPR / UK GDPR)

If you are in the UK, the EEA, or a jurisdiction with similar laws, we rely on:

• Consent — to send you launch-list emails (withdraw any time; see §9);
• Contract — to operate your account, sync your data, and deliver features you signed up for;
• Legitimate interests — to keep the Service secure, prevent abuse, and fix bugs;
• Legal obligation — where retention or disclosure is required by law.

5. How we share information

We do not sell your personal information. We share it only with service providers that help us run the Service, each bound by their own privacy policies:

• Cloudflare — hosting the Site and delivering pages (request logs);
• FormSubmit — relaying Site signup-form submissions to our inbox;
• Supabase — App authentication and account-scoped data storage;
• RevenueCat — subscription entitlement management;
• Apple and Google — processing payments for App subscriptions;

We may also disclose information if we believe it is required by law, legal process, or to protect the rights, property, or safety of OptionYield, our users, or the public — or in connection with a merger or acquisition (in which case we will notify you before your data is transferred to a different controller).

6. Cookies and local storage

The Site uses no cookies for advertising, analytics, or tracking. The only client-side storage we use is the localStorage theme preference described in §2.1, which stays on your device. Because there is nothing tracking you, there is nothing to opt out of — but you can still clear site data in your browser settings at any time, and browser Do Not Track / Global Privacy Control signals are respected by design. The App contains no third-party advertising SDKs.

7. Data retention

• Launch-list emails are kept until you unsubscribe or ask us to delete them.
• Account data is kept while your account is active. You can delete your account at any time from the App’s account settings (or by emailing us), after which synced data is deleted except where we must retain records (e.g., transaction records) to comply with legal obligations.
• Server logs are kept only as long as needed for security and abuse prevention.

8. Security

All traffic to and from the Service is encrypted in transit (HTTPS/WSS). Account data is protected by row-level security so only you can read it, and on-device secrets (session tokens) live in the operating system’s secure storage, never in plain text. No method of transmission or storage is perfectly secure, so please guard your device and credentials, and contact us immediately if you suspect unauthorized access.

9. Your rights and choices

Depending on where you live, you may have the right to:

• access a copy of the personal information we hold about you;
• correct inaccurate information;
• delete your account and synced data (also available in-app under account settings);
• object to or restrict certain processing, and withdraw consent (e.g., unsubscribe);
• receive your data in a portable format.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and the rights above are provided to you without discrimination. EEA/UK residents: you may also lodge a complaint with your local supervisory authority. To exercise any right, email info@optionyield.app and we will respond within the timeframe your law requires.

10. Children

The Service is not directed to children, and accounts are limited to users who are at least 13 (or the equivalent minimum age in your jurisdiction — 16 in much of the EEA). If you believe a child has provided us personal information, contact us and we will delete it.

11. International transfers

We operate from the United States, and our providers (Cloudflare, Supabase, RevenueCat, FormSubmit, Apple, Google) may process data in the U.S. and other countries. Where required, transfers from the EEA/UK are safeguarded by the provider’s approved transfer mechanisms, such as the EU Standard Contractual Clauses and the UK International Data Transfer Agreement.

12. Changes to this policy

We may update this policy as the Service evolves (for example, when the App launches). When we do, we will change the “Effective” date above and, for material changes, notify you by email or in the App. Continued use after changes take effect means you accept the updated policy.

13. Contact us

Questions, requests, or complaints? Email info@optionyield.app — a real person reads every message. See also our Terms of Service.