Nepal Share Privacy Policy

This Privacy Policy explains how Brainants Technology Pvt. Ltd. ("Brainants", "we", "us") handles personal data when you use the Nepal Share mobile app for iOS and Android, the website nepal-share.com, and our support channels (together, the "Service"). It is written to meet the Individual Privacy Act, 2075 (2018) of Nepal, Apple's App Store requirements and Google Play's User Data policy.

Who we are#

Brainants Technology Pvt. Ltd., Kathmandu, Nepal, is the controller of the data described here. Address: Gairidhara, Kathmandu, Nepal. Phone: +977-9849774760. Privacy contact: support@nepal-share.com. Developer name on the App Store and Google Play: Brainants Technology Pvt. Ltd.

What we collect#

Account. When you sign in with Google, Apple, Facebook or email, we receive and store your name, email address, profile photo (if any) and a user ID. Sign in with Apple may give us a private relay address instead of your real email. If you add a phone number for a payment, we store it with the purchase. You can also use the app without signing in; a few features (portfolios, alerts, saved BOIDs, notes) need an account so they can follow you across devices.

What you add. Portfolios and their transactions (symbol, type, date, units, price, commission), price and volume alerts, watchlists, notes (including any image you attach), saved BOIDs with the name you give them, your profile photo, and feedback you send us (message, optional screenshot).

Device and usage. Install ID, push notification token, app version, platform, operating system version, device language and time zone, whether push permission is granted, and the country derived from your IP address. Which screens you open, which features you use, whether the market was open, your network type, and whether you are a Premium user. Crash reports and performance traces. Your IP address is received by our servers with every request and is attached to server-side error and usage events.

Session replay. To find bugs, about one in four app sessions on release builds is recorded by PostHog with every text field and image masked, so the recording shows layout and taps but not what you typed or what your holdings are. Email, phone, password, one-time codes and tokens are stripped from analytics events before they leave the device.

Advertising ID. On the free plan the app shows ads from Google AdMob. AdMob may use your device's advertising identifier (Apple IDFA with your permission, or the Android advertising ID) and your approximate location from your IP address to show and measure ads. Premium users are not shown ads.

Payments. When you buy Premium we store which plan you bought, the price, the payment provider, the provider's transaction ID, the date, and the status. For Khalti this includes the name, email and phone number you give the wallet. For Stripe this includes the checkout session Stripe returns to us. We never receive or store card numbers, wallet passwords or bank details; the payment provider handles those.

Live Activity (iOS, Premium). If you turn on the NEPSE Live Activity, the app sends Apple's activity push tokens to our live server so it can update the lock screen during the session.

How we collect it#

You give us data when you sign in, add portfolios, alerts, notes or BOIDs, buy Premium, or write to us. The app's software development kits (SDKs) collect device and usage data automatically. Sign-in providers (Google, Apple, Facebook) send us your basic profile when you authorize them.

Why we use it#

To run the Service: sign you in, store and sync your portfolios, alerts, watchlists, notes and BOIDs, send the alerts and notifications you asked for, show you Premium features you paid for.
To calculate your portfolio: your transactions are used to compute holdings, cost, realized and unrealized profit, and bonus, right and dividend adjustments. This happens for you only; your holdings are not pooled, analyzed for other users, or sold.
To keep the app working: crash reports, performance traces, error events and session replays are used to find and fix problems.
To understand use and improve the product: aggregated usage analytics, feature flags and app-version adoption.
To show ads on the free plan and to measure them.
To send Premium-related emails: a reminder before your pass ends, a note if a checkout did not complete, and occasional offers. Every email has an unsubscribe link.
To prevent abuse, enforce our Terms and meet legal obligations.

We do not use your portfolio, alert or watchlist contents to target advertising.

Who else receives data#

We do not sell personal data. A few service providers process it for us, each under its own privacy policy:

Google (Firebase for sign-in, notifications, crash reports and analytics; AdMob for ads on the free plan).
PostHog for product analytics and error tracking, hosted in the United States.
Your sign-in provider (Google, Apple or Facebook), only if you choose it.
Payment providers (eSewa, Khalti, Stripe, Apple), only when you buy Premium.
Brevo for Premium emails.

If you connect Nepal Share to MeroSamriddhi, it gets read-only access to your transactions, watchlist and alerts, and only after you approve it on a screen that shows exactly what is shared. The AI market summary is generated from public market and news data; no user data is sent to the AI provider. We share data with authorities only when the law requires it.

MeroShare import and IPO results#

Import. When you import from MeroShare, the app opens CDSC's own MeroShare website inside a browser view. You sign in there, on CDSC's page. Nepal Share never sees, stores or transmits your MeroShare username, password or PIN. The app reads only the transaction list that MeroShare returns and adds those transactions to your portfolio on our servers.

IPO results. To check an allotment, the app sends the BOID you saved to CDSC's public result service through our server, which also solves the result page's image check. Only the BOID and the result pass through.

Advertising and your choices#

On the free plan, Google AdMob shows ads. In regions where the law requires it (for example the European Economic Area, the United Kingdom and Switzerland) the app asks for your consent before personalized ads are shown and you can change that choice in the app's settings. On iOS the system asks whether the app may track you across other apps; if you say no, ads are not personalized with your identifier. You can reset or limit your advertising identifier in your phone's settings at any time, and opt out of personalized ads at adssettings.google.com. Buying Premium removes ads entirely.

Payments#

Premium is a one-time pass for 3, 6 or 12 months. It does not renew and we never charge you again without a new purchase. Apple handles purchases made through In-App Purchase on iPhone outside Nepal, including refunds. eSewa, Khalti and Stripe handle purchases made through them; we receive a confirmation and the plan bought. See the Terms of Use for refunds.

How long we keep it#

Account and what you add: until you delete your account, or until we delete it under the Terms.
Device record (install ID, push token): deleted 90 days after the app was last opened on that device.
Alerts of accounts not opened for 14 days are paused until you come back.
Crash reports: Crashlytics keeps them for 90 days.
Usage analytics and session replays: PostHog keeps them according to its retention settings; replays are kept for a limited period then deleted.
Purchase records: kept for as long as the law on accounting and tax requires, even after you delete your account.
Feedback: kept for support history.
Server logs: kept for a short period for security and debugging.

Delete your account#

Open the app, go to Profile, then Delete account, and confirm. This deletes your sign-in, portfolios, transactions, alerts, watchlists, saved BOIDs and notes. If you cannot open the app, email support@nepal-share.com from the address on the account, or use the form at nepal-share.com/delete-account. We complete requests within 30 days.

After deletion we may keep purchase records (for tax and accounting), feedback you sent us, and analytics data that is no longer linked to you. Photos and attachments are removed from storage within the same period. If you have an active Premium pass, it ends with the account and is not refunded unless the payment provider's rules say otherwise.

Your rights#

Under the Individual Privacy Act, 2075 you can ask what personal data we hold about you, ask for it to be corrected, withdraw consent you gave, and ask for it to be deleted. Write to support@nepal-share.com. You can also unsubscribe from emails with the link in each email, turn off notification topics in the app's settings, and change ad consent in the app or your phone's settings.

Security#

Data travels over encrypted connections (HTTPS, secure WebSocket). Access to production data is limited to the people who run the Service. The optional biometric lock in the app runs entirely on your device; your fingerprint or face never leaves it. No system is perfectly secure, so please use a strong password with your sign-in provider.

Children#

Nepal Share is a market data tool and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, write to us and we will delete it.

Where data is stored#

Our servers and service providers are located outside Nepal. By using the Service you consent to your data being processed in those locations under this policy.

Nepal law#

We process personal data in line with the Individual Privacy Act, 2075 (2018) and the Individual Privacy Regulation, 2077 (2020). Where this policy and the Act differ, the Act applies.

Changes#

We will post changes here with a new effective date, and for material changes we will tell you in the app. The version history is in the footer of this page.

Contact#

Brainants Technology Pvt. Ltd., Gairidhara, Kathmandu, Nepal. Phone +977-9849774760. Email support@nepal-share.com.