investment.tips Privacy Policy

Effective date: October 9, 2026 Last updated: October 7, 2026

Notice of a change to this Policy — posted October 7, 2026.

We are updating this Privacy Policy to explain the product-news emails we send, how you can turn them off, and how we choose which messages are relevant. We are also describing how Postmark, our email provider, may record whether an email we send is opened and which links in it are clicked. We are also explaining two exchanges with our TSP TIPS property: information you direct TSP TIPS to send when you link your membership, and hashed email-address lists used to prevent duplicate launch mail. Finally, we are clarifying that we may advertise the Service on other platforms and read only their aggregate reports. We still do not use advertising identifiers or third-party advertising trackers, give member information to advertising platforms, or use information from the Service for ad attribution, measurement, or personalization. These changes take effect on October 9, 2026.

This Privacy Policy describes how Investry Analytics LLC (“Investry Analytics,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the investment.tips website, mobile applications, and related services (collectively, the “Service”).

investment.tips is a platform that delivers professional investment recommendations from Weisert Investments, a Registered Investment Advisor. You execute trades yourself at your own brokerage. We do not access your brokerage accounts, hold your assets, or place trades on your behalf.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Who we are and how to contact us

Operator: Investry Analytics LLC Service: investment.tips Privacy contact: privacy@investment.tips General support: support@investment.tips Mailing address: Investry Analytics LLC, 750 Walker St, Centerton, AR 72719

For privacy questions, data-access requests, or deletion requests, contact us at the addresses above. We respond to verified requests within the timeframes required by applicable law (see § 8, Your privacy rights).

2. Scope and audience

This Policy covers the investment.tips website, the investment.tips iOS application, the investment.tips Android application, and all related services we provide directly. It does not cover third-party services you may access through the Service (for example, your brokerage, your email provider, or external links to research sources) — those services are governed by their own privacy practices.

18+ only. The Service is intended for adults age 18 and older. We do not direct the Service to children and do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, please contact privacy@investment.tips and we will delete it (see § 9, Children’s privacy).

3. Information we collect

We collect only the information we need to operate the Service. We do not collect financial-account information, brokerage credentials, account balances, trade history, location data, health data, biometric data, contacts, browsing history outside the Service, search history outside the Service, or user-generated content.

3.1 Information you provide

Category	Examples	Why we collect it
Account credentials	Email address	To authenticate you and deliver account-related communications.
Profile information	Name	To personalize the in-app experience (greeting, profile screen).
Mobile phone number	The mobile number you provide if you enable text messaging	To send one-time verification codes (SMS OTP) and the SMS recommendation alerts you opt in to. Providing a mobile number is optional, is used only for these purposes, and is not a condition of purchasing any product or service (see § 4.1, SMS text-message program).
Purchase information	Subscription tier, purchase confirmation, billing identifier	To grant subscription entitlements and manage billing. We do not store full payment-card numbers; payment processing is handled by our payment processor (see § 5, How we share information).

3.2 Information collected automatically

Category	Examples	Why we collect it
User identifier	An internal user ID assigned by our system	To associate your account with your entitlements and preferences.
Device identifier	A device token used for push notification delivery. A random installation identifier that the mobile app generates for itself. It is not an advertising identifier, it is not tied to your device’s hardware, and it is erased when you uninstall the app. A second, separate random value, generated by the app in the same way and with the same properties, accompanies the record we make when you open the app from a notification; it is never combined with the identifier above, and those particular records are linked to your account.	To deliver push notifications you have enabled. To count how many installs open the app and return to it, so we can measure how the app performs. To record when you open the app from a notification, so we can tell whether the messages we send are useful.
Product-interaction data	Pages viewed, the page or link that referred you to the Service, campaign parameters in the link you followed, features used, in-app events	To measure product performance, understand which content is useful, fix bugs, and improve the Service. Website and app measurement is performed by first-party analytics software that we operate ourselves on our own infrastructure, and it does not share your information with any third party. On the website, and in the app’s screen and feature analytics, it sets no cookies and assigns no persistent identifier. The mobile app’s counts of first opens and return visits use the first of the two random installation identifiers described above; those counts are not linked to your account.
Email interaction	Whether an email we sent you was opened and which links in it were clicked	To measure whether our emails are useful and to avoid sending a product-news reminder to a member whose first message was recorded as opened. Postmark performs this measurement for us. We do not combine it with data from other companies for advertising.
Crash and diagnostic data	Crash reports, error traces, performance metrics	To detect and resolve technical problems. A 10% sample of session traces is captured for performance monitoring.
Security and connection data	IP address and standard web-request metadata processed at our edge/security layer	To protect web forms against bots and abuse and to deliver the website securely (see § 5, How we share information). Our first-party website analytics also processes your IP address transiently, to distinguish repeat visits from the same browser and network within the same calendar month, without using cookies; the address itself is not stored in our analytics records.

3.3 Information we do NOT collect

For clarity, the Service does not collect any of the following:

Financial-account information. We do not access your brokerage accounts. We do not collect account balances, holdings, brokerage credentials, account numbers, trade history, or transaction data from any brokerage or financial institution.
Precise or coarse location data.
Health, fitness, biometric, or sensitive personal information (as defined under applicable U.S. state privacy laws or GDPR Article 9).
Contacts, address book, or social graph.
User-generated content (the Service does not currently include user posts, comments, uploads, or messaging).
Browsing history or search history outside the Service.
Web cookies for advertising purposes (see § 6, No tracking; no third-party advertising inside the Service).

4. How we use information

We use the information described in § 3 for the following purposes only:

To operate the Service — authenticate your account, deliver subscribed content (investment recommendations, allocations, commentary), grant subscription entitlements, and respond to your requests.
To communicate with you — send transactional emails (account confirmation, billing receipts, subscription notices), send product-news emails about the Service, deliver push notifications you have enabled, send SMS messages if you opt in (account-verification codes and recommendation alerts; see § 4.1), and respond to support inquiries.
To improve the Service — measure feature usage, identify and fix bugs, monitor performance, and inform product decisions.
To secure the Service — detect and prevent fraud, abuse, security incidents, and violations of our terms.
To comply with legal obligations — respond to lawful requests, enforce our terms, and meet recordkeeping requirements under applicable laws and financial regulations (including SEC Marketing Rule 17 CFR § 275.206(4)-1 recordkeeping obligations that apply to the recommendation content delivered through the Service).

Product-news email is on unless you turn it off. You may turn it off at any time by using the unsubscribe link in any product-news email or by opening Account → Notifications → Email → News & tips in the app or web version of the Service. Turning product news off does not turn off recommendation emails or change your account.

To decide which product-news messages are relevant, we may use your subscription plan, account status, activity within the Service, and whether a prior product-news email was recorded as opened. We make those choices ourselves. We do not give that information to another company for advertising.

We do not use your information for advertising, ad attribution, ad measurement, ad personalization, or to build behavioral advertising profiles. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising as defined under U.S. state privacy laws.

If you provide your mobile phone number and opt in, we send you text (SMS) messages of two kinds: (1) account-verification messages containing a one-time passcode that you request, and (2) recommendation-alert messages for the strategies or tracks you choose to follow. Opting in to SMS is optional and is not a condition of purchasing any product or service.

Mobile-information non-sharing. We do not share your mobile phone number or your SMS opt-in (consent) information with any third party or affiliate for their own marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We disclose your mobile number only to our SMS-delivery provider (Twilio) solely to deliver the messages you have requested, and only as needed to operate the Service (see § 5).
Message frequency. Message frequency varies and is recurring. The number of recommendation-alert messages you receive depends on the recommendation cadence of the strategies or tracks you follow — for example, a daily-signal track generates more messages than a monthly track. Account-verification messages are sent only when you request a code.
Message and data rates. Message and data rates may apply. Your carrier’s standard messaging and data charges apply to messages you send and receive.
Opt-out and help (STOP/HELP). You can cancel SMS messages at any time by replying STOP to any message. After you reply STOP, we will send a one-time confirmation and will not send further recommendation-alert messages (we may still send a verification code that you specifically request, since that completes an action you initiated). Reply HELP for help, or contact us at support@investment.tips. For information about how we handle the data in this program, see this Policy.

We share information only with the limited set of service providers we use to operate the Service. Each provider receives only the information necessary for the specific purpose described below, and uses it to provide its services to us under its agreement with us. Some providers’ terms also allow them to use information for their own purposes, such as security, fraud prevention, legal compliance, or improving their services. Each provider’s privacy practices are linked in the table.

Provider	What we share	Purpose	Provider role
Stripe	Email address, purchase information	Billing and subscription payment processing	Payment processor. Stripe’s privacy practices: https://stripe.com/privacy
RevenueCat (RevenueCat, Inc.)	User identifier (described in § 3.2), purchase and subscription information from the App Store	Processing and restoring subscriptions purchased in the iOS app	In-app purchase processor. RevenueCat’s privacy practices: https://www.revenuecat.com/privacy
Twilio	Mobile phone number, one-time verification codes, SMS message content	SMS account-verification (one-time passcode) and delivery of the SMS recommendation alerts you have enabled	Communications / SMS-delivery processor. Twilio’s privacy practices: https://www.twilio.com/en-us/legal/privacy
Postmark	Email address, message content, and email open and link-click events	Delivery of transactional email (account confirmations, receipts, subscription notices), recommendation email, and product-news email; measurement of email opens and link clicks	Email-delivery and measurement processor. Postmark’s privacy practices: https://postmarkapp.com/privacy-policy
Expo (650 Industries, Inc.)	Push token (the device token described in § 3.2) and notification content; for app updates, your device’s operating system and randomized tokens used to determine whether an update has been downloaded	Delivery of push notifications you have enabled, and of updates to the app	Push-notification and app-update processor. Expo passes each notification to Apple Push Notification service (on iOS) or Google’s Firebase Cloud Messaging (on Android), which receive your device’s push token and the notification in order to deliver it. Expo’s privacy practices: https://expo.dev/privacy
Cloudflare	IP address, bot-detection token, standard web-request metadata	Bot and abuse protection on web forms (Turnstile) and secure content delivery / edge security for the website	Security and content-delivery processor. Cloudflare’s privacy practices: https://www.cloudflare.com/privacypolicy/
Neon (Neon, LLC, a Databricks company)	Account and Service data stored in our application database	Managed PostgreSQL database hosting	Infrastructure / database-hosting processor. Privacy practices (Databricks): https://www.databricks.com/legal/privacynotice
Amazon Web Services	Encrypted audit-log and recordkeeping exports	Object storage for compliance audit-log retention	Infrastructure / storage processor. AWS privacy practices: https://aws.amazon.com/privacy/
Sentry	Crash reports, error traces, performance metrics, a 10% sample of session interaction traces	Crash detection, error monitoring, performance monitoring	Diagnostic processor. Sentry’s privacy practices: https://sentry.io/privacy/

We also operate the TSP TIPS property. At your direction, after you review its consent page and choose to continue, TSP TIPS may send us information needed to link or create your investment.tips account: your email address and legacy account identifier; Google or Apple sign-in identifiers and, when available, a legacy password hash; risk-profile selection; and product and subscription status, including applicable store or Stripe subscription identifiers. We use that information to link or create your account, sign you in, carry eligible access and preferences into the Service, and keep that access current. The properties do not use this flow for advertising.

Separately, for launch mail, the two properties may exchange allow and do-not-send lists containing only plain SHA-256 hashes of canonical email addresses, grouped by account and subscription status. We use those lists only to prevent a person from receiving the same launch message from both properties and to route the appropriate version. The lists contain no message content or advertising identifiers, and are not used for advertising.

We may also share information:

With your consent or at your direction — for example, if you authorize us to share specific information with a third party.
To comply with law — to respond to subpoenas, court orders, lawful regulatory requests, or other legal process, and to protect the rights, safety, and property of Investry Analytics, our users, and the public.
In connection with a corporate transaction — for example, a merger, acquisition, financing, reorganization, or sale of assets. In such an event, personal information would be transferred subject to the protections of this Policy or with notice to you and an opportunity to object as required by law.

We do not sell or share personal information for cross-context behavioral advertising, and we have not done so in the prior 12 months.

6. No tracking; no third-party advertising inside the Service

The Service does not track you across other apps or websites. We do not use the Apple advertising identifier (IDFA), do not invoke the App Tracking Transparency prompt, do not participate in SKAdNetwork ad attribution, and do not use Google Advertising ID for advertising purposes.

We may advertise the Service on app stores and other platforms and review only the aggregate reports those platforms provide. We do not give those platforms member information or information from the Service for advertising, ad attribution, ad measurement, or ad personalization.

We do not run third-party ads inside the Service, do not embed third-party advertising trackers (such as Meta Pixel, Google Ads tags, or similar), and do not allow third parties to collect information about you through the Service for advertising purposes.

The product-interaction and diagnostic data described in § 3.2 are used only to operate and improve the Service — not for advertising.

7. Data security

We protect your information using industry-standard safeguards:

Encryption in transit. All connections between your device and the Service use TLS encryption.
Encryption at rest. Data stored in our databases and object storage is encrypted at rest using provider-managed encryption.
Access controls. Access to production data is restricted to authorized personnel and protected by authentication and audit controls.
Vendor diligence. Our service providers (§ 5) are contractually bound to industry-standard security practices and to use the information only for the purposes we direct.

No method of transmission or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security. If we become aware of a personal-data breach affecting your information, we will notify you and applicable regulators as required by law.

8. Your privacy rights

Depending on where you live, you may have the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you.
Correction — request that we correct inaccurate personal information.
Deletion — request that we delete your account and personal information.
Portability — request a copy of your personal information in a portable format.
Restriction or objection — request that we limit or stop certain uses of your personal information.
Withdraw consent — where processing is based on your consent, withdraw it at any time.
Non-discrimination — exercise your rights without us treating you differently or denying you the Service.

8.1 How to exercise your rights

Product-news email. You may turn off product-news email at any time by using the unsubscribe link in any product-news email or by opening Account → Notifications → Email → News & tips in the app or web version of the Service. This does not turn off recommendation emails or change your account.

By email. To exercise any of the rights above — including to delete your account and personal information — send your request to privacy@investment.tips. To protect your privacy, we will verify your identity before processing certain requests (typically by confirming you control the account email address). When you request deletion, we will close your account and remove your personal information from our active systems, subject to the retention exceptions described in § 8.3 below.

We respond to verified requests within the timeframes required by applicable law (generally 30 to 45 days, with extensions in limited circumstances).

8.2 Authorized agents

If you authorize an agent to submit a request on your behalf, the agent must provide written authorization signed by you, and we may require you to verify your identity directly with us.

8.3 Limits and retention exceptions

We may retain certain information after a deletion request to:

Comply with recordkeeping obligations under applicable financial-services and securities laws and regulations (including SEC Marketing Rule 17 CFR § 275.206(4)-1 recordkeeping requirements that apply to the recommendation content delivered through the Service, which are generally retained for five years).
Resolve disputes, enforce our agreements, and protect our legal rights.
Detect and prevent fraud, security incidents, and abuse.
Comply with tax, accounting, and audit obligations.

Retained information after deletion is limited to the minimum necessary for the purpose, segregated from active production systems where practicable, and not used to re-identify you for product purposes.

8.4 California, Colorado, Connecticut, Delaware, Iowa, Montana, Oregon, Texas, Utah, Virginia, and other U.S. state residents

If you are a resident of a U.S. state with a comprehensive privacy law, your rights are described above and may be exercised at no charge. We do not sell or share personal information for cross-context behavioral advertising. We do not use sensitive personal information for inferring characteristics about you. You may appeal an adverse decision on your privacy request by responding to our determination email with the subject line “Appeal.”

8.5 European Economic Area, United Kingdom, and Swiss residents

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights described above under the EU General Data Protection Regulation, UK GDPR, and Swiss Federal Act on Data Protection. The legal bases on which we process your personal information are: performance of a contract (to operate the Service you signed up for), legitimate interests (to secure and improve the Service), consent (where you have provided it, such as for push notifications or SMS messages), and legal obligation (to comply with applicable law). You also have the right to lodge a complaint with your local data-protection authority.

9. Children’s privacy

The Service is intended for adults age 18 and older. We do not direct the Service to children under 18, do not knowingly collect personal information from children under 18, and do not market the Service to children. If you are under 18, please do not use the Service or provide any information to us. If you are a parent or guardian and believe your child has provided us personal information, please contact privacy@investment.tips and we will delete it.

10. International data transfers

We are based in the United States. The service providers listed in § 5 may process information in the United States or in other countries. Where personal information of EEA, UK, or Swiss residents is transferred outside those regions, we rely on Standard Contractual Clauses or other transfer mechanisms approved under applicable law.

11. Data retention

We retain personal information only for as long as necessary to provide the Service and for the purposes described in this Policy. Specifically:

Account information (email, name, mobile number, user ID) — retained while your account is active; deleted on verified deletion request, subject to the retention exceptions in § 8.3.
Purchase information — retained as required by tax, accounting, and recordkeeping obligations (generally up to seven years).
Diagnostic and crash data — retained on a rolling basis (Sentry default retention; generally 30 to 90 days, configurable by provider).
Product-interaction data — retained in aggregated, account-linked, and installation-keyed forms as needed to operate and improve the Service; account-linked records are deleted on verified deletion request, subject to § 8.3. Installation-keyed app counts are not linked to your account, so they cannot be located from an account-based request; the identifier itself ends when you uninstall the app.
Recommendation-content records — retained for the period required by SEC recordkeeping obligations (generally five years).

12. Cookies and similar technologies

The investment.tips website uses a minimal set of strictly-necessary cookies to authenticate sessions and remember basic preferences (such as theme or login state). We do not use third-party advertising cookies, analytics cookies that share data with ad networks, or any cookie used for cross-context behavioral advertising. The investment.tips mobile applications do not use web cookies; they use the identifiers described in § 3.2 — the push token only for push-notification delivery, and the installation identifiers only for first-party measurement. Software from the service providers listed in § 5 that runs inside the app may also keep its own random identifier on your device to provide its service.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email, by an in-app or website notice, or by other reasonable means before the changes take effect. The “Effective date” at the top of this Policy reflects the most recent update. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Important context: investment.tips is not your financial advisor

For the avoidance of doubt: this Privacy Policy governs the collection, use, and protection of your personal information. It does not establish an advisory relationship between Investry Analytics LLC, investment.tips, or Weisert Investments and you.

The recommendations and content delivered through the Service are educational and are not investment advice. We are not your investment advisor, broker, or fiduciary. All investment decisions are your responsibility. Past performance does not guarantee future results.

For more information about the Service, the relationship between investment.tips, Investry Analytics LLC, and Weisert Investments (the Registered Investment Advisor partner whose recommendations are delivered through the Service), and the not-investment-advice posture, please review our Terms of Service and our Disclaimer & Disclosures.

15. Contact

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Investry Analytics LLC Privacy inquiries: privacy@investment.tips General support: support@investment.tips Mailing address: 750 Walker St, Centerton, AR 72719

End of Policy.