Catalyst Wire SEC privacy policy

Updated 21 October 2026. This policy covers the SEC app, its supporting website/API and historical SEC subscription services. Operator: Ken Hennessy. Contact hennessyken1@gmail.com.

Data used to provide the app

The app stores preferences, saved filings and onboarding state locally. Our backend processes a pseudonymous app identity and authentication/session data to check access. RevenueCat and Google Play process store purchases, purchase identifiers, subscription status and related device/app information under their own policies. We do not receive your full payment-card number.

The server may retain subscription and lifecycle-event records, service request information such as IP address and request time, and support communications. Historical web/Telegram services may retain billing email, Stripe customer/subscription references and Telegram numeric membership identifiers. We do not ask for your contacts, precise location, financial account login or trading credentials.

Optional Android notifications

If you turn on alerts, Google Firebase Cloud Messaging processes an app installation token to deliver notifications. Our server links the token to your authenticated app session and stores your selected filing types and minimum impact score. Notification text is generic; open the app to view a filing after its access check. Paid alerts are eligible after publication and free alerts after at least 24 hours. Device settings, network availability and processing may delay or prevent delivery.

You can turn alerts off in Settings or Android notification settings. We remove server registrations after session revocation/deletion, known invalid tokens or 180 days without refresh. Delivery records are retained for up to 90 days for retries and duplicate prevention. Google may process installation information under Firebase privacy information. Firebase Analytics and advertising are disabled.

Purposes and providers

We use data to provide the feed, authenticate access, reconcile purchases and restores, prevent misuse, handle support/deletion and maintain service security. Where data-protection law applies, processing relies on providing the requested service, legitimate security/operational interests, and legal accounting obligations as applicable. Public filing information comes from SEC EDGAR. Opening a source sends a request to that external site.

RevenueCat, Google Play, our hosting provider and, for historical billing, Stripe process relevant data. Telegram and email providers process historical membership/support communications where used. Providers may process data outside your country using their applicable transfer safeguards. No advertising is enabled in the current app candidate; no advertising identifiers are intentionally sent by it. No app usage analytics or personal-data sale is part of the offering.

Retention, choices and security

Local saves remain until you remove them, clear storage or uninstall. Server access and subscription records are kept while needed to provide access, investigate disputes or satisfy legal retention obligations. Temporary session information expires or can be revoked. Access controls and HTTPS reduce risk but cannot guarantee absolute security.

You may request access, correction or deletion of your personal data, and other applicable rights including restriction, portability or objection. You may complain to your local data-protection authority. Follow these deletion instructions or email support. We may request limited evidence to verify the request. Billing records required by law or unresolved disputes may be retained; we will explain applicable exceptions. Deletion is separate from cancelling a subscription.

The service is not directed at children. Contact us if you believe a child has supplied personal data. Material policy changes will be reflected here with an updated date.