Simple Alpaca - Privacy Policy

Privacy Policy for Simple Alpaca

Effective Date: September 29, 2026
Last Updated: September 29, 2026

Simple Alpaca ("we," "our," or "the App") is an independent, mobile application developed by Arunkumar Mourougappane. Simple Alpaca interfaces with the official Alpaca Markets REST V2 API to provide portfolio tracking, stock market analysis, and order management tools for US equities.

This Privacy Policy explains how Simple Alpaca collects, uses, stores, and protects your information when you use our mobile application.

1. Information We Collect & How We Use It

Simple Alpaca is designed with privacy and security as core principles. We do not operate external servers, user tracking databases, or advertising analytics networks.

A. Alpaca API Credentials

What We Collect: Your Alpaca API Key ID and Secret Key.
How It Is Used: API credentials are used exclusively to authenticate requests sent directly from your device to official Alpaca REST V2 API endpoints.
Storage & Security: Your API credentials are stored locally on your Android device using Android KeyStore AES-256 Encryption (EncryptedSharedPreferences). Credentials are never transmitted to any third-party servers operated by us.

B. Financial & Market Data

What Is Transmitted: Portfolio equity, cash balances, open positions, order execution logs, and watchlist symbols.
How It Is Used: To render real-time market quotes, portfolio performance charts, and trade execution management inside the App.
Transmission: All data is transmitted securely over encrypted Transport Layer Security (HTTPS/TLS) directly to official Alpaca API hosts (api.alpaca.markets, paper-api.alpaca.markets, and data.alpaca.markets).

C. Biometric Data (Fingerprint / Face Unlock)

How It Works: If enabled, Simple Alpaca utilizes Android's native BiometricPrompt framework to secure access to your account data.
Privacy Guarantee: Biometric authentication is handled entirely by the Android operating system on your device hardware. Simple Alpaca does not collect, store, or have access to your raw biometric data.

Simple Alpaca does not sell, rent, trade, or share your personal or financial information with third parties, advertisers, or marketing networks.

Financial data and trade orders are transmitted strictly to Alpaca Securities LLC for brokerage trade execution and account retrieval. Brokerage services are provided by Alpaca Securities LLC, a member of FINRA/SIPC. For Alpaca's regulatory privacy policy and disclosures, please visit https://alpaca.markets/disclosures.

3. Data Retention & Deletion

Local Data Clearing: You can delete your stored API credentials and user preferences at any time by tapping Log Out in the Settings screen or by clearing the App's storage in Android System Settings.
Account Termination: To close your brokerage trading account or delete server-side data held at Alpaca Securities LLC, please manage your account directly through https://alpaca.markets.

4. Security Measures

We implement industry-standard security safeguards to protect your information:

On-device encryption via Android KeyStore (AES-256 GCM).
HTTPS/TLS encrypted network communications.
Explicit disabling of Android Cloud Backups (allowBackup="false") to prevent unencrypted API key exposure during cloud sync.

5. Children's Privacy

Simple Alpaca is intended for use by adults aged 18 and older who hold an active Alpaca brokerage account. We do not knowingly collect or solicit data from individuals under the age of 18.

6. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect app updates or regulatory changes. Any changes will be published on this page with an updated "Last Updated" date.

7. Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy, please contact us at:

Developer: Arunkumar Mourougappane
App Name: Simple Alpaca (com.arunmourougappane.simplealpaca)
Support Email: amouroug.dev@gmail.com
Disclosures: https://alpaca.markets/disclosures