Your data, plainly explained.

The short version

Kinetiq Brief is pseudonymous by design. You need an email address and a password — no real name, no address, no phone number, no broker credentials, ever. Your display name can be anything.

Your portfolio data exists for exactly one purpose: building your own analytics and briefings. It is not sold, not shared for advertising, and not used to train AI models.

Who is responsible

NeuralKinetiq UG (haftungsbeschränkt), Frankfurt am Main, Germany is the data controller. Contact: via the contact page on neuralkinetiq.com.

What we store, and why

• ·Account: email address and a hashed password — to sign you in and send you the briefings you asked for (contract performance, Art. 6(1)(b) GDPR).
• ·Portfolio: the holdings, quantities, watchlists and investment theses you enter — to compute your analytics and generate your Brief (contract performance).
• ·Preferences: base currency, time zone, briefing day, notification choices.
• ·Saved Risk Lab plans: the scenario inputs and results you explicitly save.
• ·We do NOT collect: your real name, address, income, net worth, IDs, or broker logins. We run no advertising trackers and no analytics cookies — only the strictly necessary session cookie.

Where it lives

Your data is stored with Supabase (PostgreSQL) in Frankfurt, Germany (eu-central-1), protected by row-level security: the database itself enforces that only your account can read your rows. The application runs on EU-based servers (OVH, France/Germany).

AI processing — what the model sees

Parts of your weekly Brief are written by an AI model (Anthropic Claude). We minimize what is sent: ticker symbols, position weights as percentages, and the thesis text you wrote. The model never receives your email, your name, your account value in currency, or any identifier linking the portfolio to you.

Under our API terms, submitted data is not used to train Anthropic's models. Anthropic is US-based; transfers are covered by standard contractual clauses. If this matters to you: the entire product works without AI output — deterministic analytics never leave the EU.

Market data lookups

To price your assets we request public quotes by ticker symbol from market-data services (currently Yahoo Finance and CoinGecko) and reference FX rates from the ECB. These requests contain the symbol only — never who holds it or how much.

Retention and deletion

Your data is kept while your account exists. Deleting your account (Settings → Privacy → Delete) removes everything — portfolio, theses, briefs, plans — immediately and irreversibly via database cascade; residual backups expire within 30 days. You can export everything as JSON first, anytime.

Your rights

Access, rectification, erasure, restriction, portability, objection (Art. 15–21 GDPR) — the export and delete functions in Settings cover most of these instantly and without asking anyone. For the rest, contact us. You may also complain to the Hessian data protection authority (HBDI, Wiesbaden).

What never happens

• ·No sale or rental of your data. Ever.
• ·No advertising or tracking cookies; no consent banner needed because there is nothing to consent to.
• ·No AI training on your portfolio without your explicit, separate, revocable consent (which we currently do not even ask for).
• ·No automated decisions with legal effect — Kinetiq gives you information, never verdicts.