Legal

Privacy Policy

Last updated: May 8, 2026

i.Two different things

This document covers two products that are technically separate:

• The Portfolio9 app for iOS and Android. The privacy promises in this document — no servers, no accounts, no tracking — apply here.
• The Portfolio9 website at portfolio9app.com. The website is a normal marketing site. It uses standard web technologies that aren’t as private as the app. We describe what it does in section vii.

Unless a section explicitly says “website,” the rest of this policy is about the app.

ii.What stays on your device

Everything you create or enter in the app is stored locally on your phone:

• Transactions — BTC amounts, USD values, dates, tags, labels, and notes — stored in a local database on your device.
• Settings — theme, BTC goal, custom backend URL, layout preferences — stored in your device’s preferences storage.
• Extended public keys (xpubs) — stored in your device’s secure keystore (Apple Keychain on iOS, Android Keystore on Android). They never leave your device except when used to query a block explorer (see section iii).

When you delete the app, all of this data is removed by your operating system. We don’t have a copy.

iii.What goes over the network

The app makes outbound network calls in three specific situations. Each one sends as little data as possible.

Bitcoin price lookups

The app fetches current and historical BTC/USD prices from mempool.space, a public Bitcoin data service. These requests contain no information about you or your portfolio — only standard request metadata that any web traffic includes (IP address, user agent, etc.).

Wallet balance lookups (only if you import an xpub)

If you import an extended public key to track an on-chain wallet, the app sends the xpub to a Bitcoin block explorer to look up addresses and balances. The xpub itself is sent over the network as part of this request. The default explorer is Trezor’s Blockbook at btc1.trezor.io and btc2.trezor.io.

You can change the explorer by entering a custom Blockbook URL in Settings → Privacy. This lets you point at your own self-hosted instance or any compatible alternative. If you don’t import an xpub, no wallet data is sent anywhere.

What an xpub reveals: an xpub doesn’t grant the ability to spend your funds, but it does reveal the addresses derived from it and their on-chain transaction history. Anyone who has your xpub can see all transactions associated with that wallet branch on the public blockchain. This is true whether you put it in Portfolio9 or any other software. We disclose this in the app when you import.

Subscription billing (only if you subscribe)

Subscriptions are handled entirely by Apple’s App Store or Google Play. The app receives only the subscription status (active or not) from your operating system. We don’t see your name, email address, payment method, or any other billing detail. Apple’s and Google’s privacy policies govern that data.

iv.What the app doesn’t do

To be specific:

• No analytics or telemetry in the app. The app doesn’t track which screens you visit, which buttons you tap, how long you use it, or anything else about your behavior. (See section vii for what the website does — that’s a separate story.)
• No advertising. The app shows no ads and shares no data with ad networks. It has no integrations that would allow this.
• No third-party SDKs that collect data. The libraries we use are listed in the app’s open-source acknowledgments and none of them phone home with your information.
• No accounts. You don’t sign up, log in, or create credentials. There’s no central database of users because there’s no central database.
• No data sale. We have nothing to sell because we don’t collect anything from the app.

v.Children’s privacy

Portfolio9 is not directed at children under 13 (or the equivalent age in your jurisdiction). We don’t knowingly collect data from children. Since we don’t collect data from anyone through the app, this mostly means: please don’t let kids buy Bitcoin without supervision.

vi.Your rights

Because all your app data lives on your device, you have direct control:

• Access — open the app; your data is there.
• Export — Premium subscribers can export all transactions to CSV (Settings → Export CSV).
• Delete — Settings → Caution → Delete all data wipes everything from your device. Uninstalling the app does the same.

We can’t fulfill data subject requests under GDPR or CCPA in the traditional sense (rectification or erasure requests sent to a controller) because we are not the controller of your app data — you are. The “controller” in this app is you, on your device.

If you’ve imported an xpub and want to know what data you’ve sent to the block explorer service, please contact that service directly. mempool.space and Trezor have their own privacy contact channels.

---

vii.The website

The Portfolio9 website (portfolio9app.com) is a WordPress site hosted with Jetpack/WordPress.com infrastructure. It exists to tell people the app exists. Like most WordPress sites, this means the website is not as private as the app, and we want to be upfront about that.

What the website does

• Server logs. Our hosting provider records standard web server logs — visitor IP address, browser type, page requested, timestamp — for security and debugging. These are retained for a limited time.
• Jetpack site statistics. We use Jetpack’s built-in analytics to see basic visit counts. Jetpack receives your IP, referrer, browser type, and which pages you viewed. We don’t use Jetpack to identify individual visitors. Jetpack’s privacy practices.
• Image CDN. Some site images are served through Automattic’s CDN (i0.wp.com), which means image loads result in requests to Automattic’s servers.
• Cookies. WordPress sets a small number of functional cookies (e.g. for the comment form, if enabled). We don’t use advertising cookies, retargeting pixels, or third-party tracking scripts.

We do not run Google Analytics, Facebook Pixel, or any other third-party trackers on the website. We don’t sell visitor data. We don’t have an email signup form that collects your address.

If you want maximum privacy when visiting the website, a content blocker like uBlock Origin or a privacy-focused browser like Brave will block most of the third-party requests described above. The site will still work fine.

viii.Changes to this policy

If we change the policy materially — for example, if we add a new outbound network call from the app, a new data flow, or a new third-party service on the website — we’ll update this page and reflect the change in a new app version. The “Last updated” date at the top is the source of truth.

ix.Contact

Questions about this policy: contact@portfolio9app.com