Privacy Policy | Numfolio

Who is responsible

Numfolio is operated by the person named below, who is the data controller for the personal data processed through the service.

Operator and data controller: Ahmet KARATUFAN

For questions, corrections and personal data requests, write to [email protected]. Describe your request and give the email address of your account. Never send passwords or financial account numbers.

Postal address: Zafertepe Mah. Eşrefpaşa Cad. No: 397 Ferhunde Hanım Apt. K:8 D:16 35270 Konak/İzmir

Data we collect

Account data: your name, email address, base currency, interface language and your sign-in credentials. Passwords are stored only as irreversible hashes. If you sign in with Google, Facebook or Apple, we store the account identifier that provider gives us instead of a password.
Portfolio data: the portfolios, assets, prices, trades, pension records and notes you enter yourself.
Technical data: the IP address, browser type, requested address and time of a request, kept in server logs to run and secure the service, and error reports when something fails.
Calculator inputs: values you type into the public calculators are sent in the page address to calculate the result. They are not linked to an account and are not stored in your profile.

We do not ask for bank, brokerage or card details, and we do not connect to your financial accounts.

Purposes and legal bases

To create and run your account and show your portfolio: performance of our contract with you (Article 6(1)(b) GDPR).
To keep the service secure, prevent abuse and fix errors: our legitimate interest in a reliable and secure service (Article 6(1)(f) GDPR).
To show advertising that keeps the service free, where it is enabled: your consent where the law requires it (Article 6(1)(a) GDPR), which you can withdraw at any time.
To meet legal obligations, for example responding to lawful requests from authorities (Article 6(1)(c) GDPR).

Your portfolio data is never visible to other users, never sold and never used to build advertising profiles.

Cookies and advertising

Numfolio uses the following first-party cookies and browser storage, which are strictly necessary for the service and do not need consent:

Portfo.Auth: keeps you signed in. Up to 14 days with "Remember me", otherwise until you close the browser.
.AspNetCore.Antiforgery.*: protects forms against cross-site request forgery (session cookie).
.AspNetCore.Mvc.CookieTempDataProvider: carries one-time notifications to the next page (session cookie).
Portfo.Session: used only for administrator functions (expires after 30 minutes of inactivity).
Sign in with Google, Facebook or Apple: short-lived session cookies during the sign-in flow.
portfo-theme (browser local storage): your light or dark theme preference.

Numfolio currently shows no advertising and uses no advertising cookies.

You can create an account and sign in with Google, Facebook or Apple instead of a password. The provider then sends us your name, your email address and the identifier of your account with that provider, which we use only to create your Numfolio account and recognise you when you return. We do not receive the password of that account, and we do not access your contacts, posts, photos or any other data you keep with the provider. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR).

Google: you can remove Numfolio's access at any time under "Third-party apps & services" in your Google Account.
Facebook: we request only your public profile and your email address. Because Facebook does not confirm to us that your email address is verified, signing in with Facebook never links to an existing Numfolio account that uses the same address; sign in to that account with the method you used before. You can remove Numfolio under Settings & privacy → Settings → Apps and websites in Facebook.
Apple: Apple shares your name only the first time you sign in. If you choose Hide My Email, we receive an Apple relay address that forwards messages to you instead of your real address. You can stop using Sign in with Apple for Numfolio in your Apple Account settings.

Removing Numfolio's access at the provider stops further sign-ins with that provider but does not delete your Numfolio account. To delete it, follow the steps under Deleting your account and data.

Retention and deletion

Account and portfolio data are kept for as long as your account exists. When you ask us to delete your account, we delete your account and portfolio data, except information we must keep to meet a legal obligation or to establish, exercise or defend legal claims. Server logs and error reports are kept only for as long as needed for security and troubleshooting.

Deleting your account and data

You can ask us to delete your Numfolio account and all of its data at any time, whether you signed up with a password or with Google, Facebook or Apple:

Email the contact address on this page from the email address of your Numfolio account, with the subject "Delete my account". If you cannot write from that address, for example because you used Apple's Hide My Email, tell us which sign-in method you used; we will send a confirmation request to the address linked to your account.
We may ask you to confirm the request before we act on it, so that nobody else can delete your account.
We delete your account, portfolios, assets, trades, pension records, notes and the links to your Google, Facebook or Apple sign-in, and confirm the deletion by email within one month of receiving your request.

Deletion cannot be undone. Information we must keep to meet a legal obligation or to establish, exercise or defend legal claims is kept only for as long as that purpose requires.

International transfers

Numfolio is operated from Türkiye, so personal data you provide is processed in Türkiye. Where advertising is enabled, Google may process data in the United States and other countries. Transfers from the European Economic Area or the United Kingdom rely on the safeguards available under applicable law, such as the European Commission's standard contractual clauses used by Google.

Your rights

Depending on where you live, you have the right to access your data, to have it corrected, to have it deleted, to restrict or object to its processing, to receive it in a portable format and to withdraw consent at any time without affecting earlier processing (Articles 15 to 21 GDPR). You also have the right to complain to a data protection authority, in particular in the country where you live or work. If you are in Türkiye, the Turkish Personal Data Protection Law (KVKK, Law No. 6698) gives you similar rights.

To exercise a right, write to the contact address on this page from the email address of your account. We may ask you to confirm your identity before we act on a request, and we answer without undue delay.

US state privacy rights

Residents of some US states, such as California, Colorado, Connecticut, Virginia and Utah, have the right to know what personal information is collected, to access, correct and delete it, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. Numfolio does not sell your account or portfolio data. Where advertising is enabled, Google's advertising cookies may count as "sharing" under some state laws; you can refuse advertising cookies in the cookie banner or on the cookie preferences page. We do not discriminate against you for exercising these rights.

Changes

We may update this policy when the service or the law changes. The current version is always on this page, with the date it last changed at the top. If a change materially affects how we use your data, we will inform you in the app or by email.

Contact