Privacy Policy

Last updated: July 15, 2026. SuMarket is operated by SuMarket LLC, a limited liability company registered in the State of Indiana, with its principal place of business in Bloomington, Indiana 47401.

SuMarket is intended for users 18 years of age or older. By using this service, you confirm you are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly.

• Account information — when you sign in with Google, we receive your name, email address, profile picture, and Google user ID. When you sign in with Apple, we receive your Apple user ID and, on first sign-in only, your name and email address (Apple does not share this on subsequent logins). We store your user ID and email server-side to link your account data and manage your subscription. We do not store your password.
• Usage data — briefings you generate (sector, knowledge level, timestamp), reading streaks, total briefings read, sectors explored, time-of-day reading patterns, and AI analysis tool usage (to enforce the free plan's one-run-per-day limit on the 10 AI analysis tools and its three-per-day limit on 'Read more' story expansions), and progression data — XP points, level, streak freezes and repair tokens, banked AI-tool credits, earned reward passes and gift codes, and your weekly reading-league score.
• Saved briefings — content and timestamps of briefings you favorite.
• Portfolio data — stock ticker symbols and optional share counts you manually add to your self-reported portfolio. We do not link to any brokerage account; all holdings data is self-entered. Optionally, you may import holdings by uploading a screenshot of a brokerage or portfolio app (requiring camera or photo library access on iOS) — the image is processed by an AI provider to extract ticker/share data, is not stored after processing, and the extracted data is shown to you for review before it is saved to your portfolio.
• Following list — market topics, sectors, or companies you choose to follow via the Following feature.
• Weekly leaderboard — your XP earned each week is scored on a global weekly leaderboard visible to other signed-in users. You appear as 'Anonymous' by default; your display name is shown only if you explicitly enable 'Show my name' in the app. Weekly scoreboards are automatically deleted within 21 days.
• Subscription data — your plan status (free Snapshot tier, or Pro with access to Analyst Brief and Deep Dive depths), subscription ID, and billing period dates. We store only the subscription status and metadata — we do not store your payment card details. All payment processing is handled by Stripe, Inc.
• Browser and device storage — your selected sector and knowledge level are stored locally in your browser. If not signed in, saved favorites are also stored locally only. The SuMarket iOS app is a web-based application running inside a native shell; all data is stored server-side and in your browser's local storage.
• IP address — we briefly process your IP address to prevent abuse of certain features (for example, limiting how many verification emails or briefings can be requested in a short period). Your IP address is used only for this rate-limiting purpose, is not stored as part of your account record, and expires automatically after a short window.

We do not collect Social Security numbers, government IDs, precise geolocation, or payment card information.

• To provide the service: generating briefings, managing your account, and processing your subscription.
• To personalize your experience: reading streaks, XP, saved briefings, your personal glossary, statistics, and briefing preferences.
• To verify your subscription status and enforce plan access — Snapshot depth, one AI analysis tool run per day, and three 'Read more' story expansions per day for free accounts; Analyst Brief and Deep Dive depths and unlimited AI tool use and story expansions for Pro accounts.
• To improve and operate the service, diagnose technical issues, and prevent abuse.
• To communicate with you about your account, subscription, or service updates.
• We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Payments for SuMarket Pro are processed by Stripe, Inc. When you subscribe, you are redirected to Stripe's secure checkout. SuMarket LLC does not receive or store your full credit card number, CVV, or bank account details. Stripe retains payment data subject to their own privacy policy at stripe.com/privacy. We receive only a customer ID and subscription status from Stripe.

SuMarket uses a secure session cookie to keep you signed in for up to 30 days. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Your session cookie is HTTP-only, secure in production, and contains no sensitive personal data.

SuMarket is available as an iOS application distributed through the Apple App Store. The iOS app loads the same web service described in this policy (sumarket.info) inside a native shell. All data collection, storage, and processing described above applies equally to use of the iOS app. On iOS, SuMarket Pro may instead be purchased through Apple's In-App Purchase system, processed by Apple and managed via RevenueCat, a subscription-management platform: your subscription status, product ID, and renewal date are shared with SuMarket to grant access, using your existing SuMarket account ID (not Apple's own anonymous purchaser ID) so the purchase can be tied to your account. SuMarket LLC never receives your Apple ID, card, or bank details — that payment data is held by Apple. RevenueCat's own privacy policy governs its processing of subscription events. Apple may also collect additional device-level data (crash reports, performance metrics) subject to Apple's own privacy policy.

We use trusted service providers to operate SuMarket. These providers may process limited account, usage, subscription, technical, or briefing-request data only as needed to provide, host, secure, authenticate, bill for, support, and improve the service.

• Authentication providers (Google, Apple) — to securely sign you in and verify your account.
• Payment processors — Stripe (web) and Apple/RevenueCat (iOS In-App Purchase) — to process subscriptions, refunds, taxes, fraud prevention, and billing records.
• Cloud hosting, database, and security providers — to run the website, store account and usage records, and protect the service.
• Content generation, data enrichment, and market information providers — to create briefings, retrieve relevant market or news context, and (if you use the optional portfolio screenshot import feature) extract ticker and share data from an uploaded image.
• Customer support and operational tools — to respond to requests and operate the service.

We do not sell your personal data, and we do not authorize service providers to use your personal data for their own advertising. Our AI content-generation providers are contractually and technically restricted to processing your data solely to generate the briefings and tool outputs you request — not for any other purpose. We may disclose information when required by law, to enforce our terms, or to protect SuMarket, users, or the public.

SuMarket is based in, and your data is processed and stored in, the United States by SuMarket LLC and the service providers described in Section 7. If you are located in the European Economic Area, the United Kingdom, or Switzerland, this means your personal data is transferred to and processed in a country whose data protection laws may differ from those of your home country.

• SuMarket LLC is the data controller for the personal data described in this Privacy Policy.
• We process your data on the following legal bases: performance of a contract (creating your account, providing briefings, and managing your subscription), our legitimate interests (securing the service, preventing abuse, and improving our product), and your consent where we ask for it (for example, optional email notification preferences).
• Subject to applicable law, you have the right to access, correct, export, restrict, or object to our processing of your personal data, and to request its erasure — see Section 9 (Your Rights) for how to exercise these. You also have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect about you, to request its deletion, and to opt out of the 'sale' or 'sharing' of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The categories of personal information we collect are described in Section 2 above (identifiers such as your email and user ID, commercial information such as your subscription status, and internet or usage activity such as the briefings and tools you use). To exercise your California privacy rights, contact us at contact@sumarket.info; we will respond as required by law.

Usage and streak records are retained for up to 400 days. Weekly leaderboard scoreboards expire within 21 days. Subscription status records are retained for the duration of your subscription plus 90 days. You may request deletion of all personal data at any time by contacting us or by using the Delete Account option in your Profile. We will process deletion requests within 30 days.

You have the right to access, correct, export, or delete your personal data. You may delete your account directly from the Profile screen within the app or website — this immediately and permanently removes your usage history, favorites, streak and XP records, your personal glossary, leaderboard entries, display name, mood history, portfolio, following list, and subscription record. To exercise any other rights, contact us at contact@sumarket.info. We will respond within 30 days.

We use industry-standard security practices including HTTPS encryption, HTTP-only session cookies, and access-controlled server infrastructure. No system is 100% secure; we cannot guarantee absolute security of your data.

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the date at the top of this page. Continued use of SuMarket after changes constitutes acceptance of the updated policy.

This Privacy Policy is governed by the laws of the State of Indiana, United States, without regard to its conflict of law provisions.

SuMarket LLC · contact@sumarket.info · 619 980 1185 · Bloomington, IN 47401