CaribVest Ultra Privacy Policy

Effective November 2026 · Hibiscus Technologies LLC

CaribVest Ultra stores and processes the information needed to run portfolio, market, account, support, community, notification, and AI insight features. We do not sell personal financial data, and account or market pages should not invent records when real data is unavailable.

Data You Add

CaribVest works from records you choose to enter, import, or save.

  • Profile details such as name, email, and account identifiers used for sign-in and support.
  • Portfolio records, holdings, dividends, goals, budgets, watchlists, alerts, and tax export inputs you save in the app.
  • Community posts, feedback, bug reports, and support messages you choose to send.

Device & App Data

Some information is needed to keep the app reliable and secure.

  • App version, build number, device context, and diagnostics may be included when you submit a support or bug report.
  • Notification preferences, app-lock settings, and local preferences may be stored on this device.
  • CaribVest does not store fingerprint or face data; biometric authentication is handled by Android.
  • Push notifications are delivered through Firebase Cloud Messaging (Google), which uses a device token tied to your account on this phone.

Cloud & Sync

Signed-in features may use cloud services to keep your account data available.

  • Supabase is used for sign-in (email, or Google Sign-In) and stores your holdings, watchlist, dividend book and daily portfolio totals, so they are tied to your account rather than this phone.
  • Some app records (goals, budget, Net Worth entries, and Ocean Collection badges) may be included in your Android device backup, which Google stores in your Google account when backup is on.
  • Deleting your account removes your Supabase account together with your holdings, watchlist, dividend book, portfolio history, push tokens and Community profile, posts and messages.

Market Providers

Live financial surfaces depend on external data providers.

  • Market news, quotes, earnings, IPOs, institutional filings, currencies, and exchange data may come from external providers.
  • Provider requests can include symbols, date ranges, or market context needed to return the selected data.
  • When providers return no rows or errors, CaribVest shows unavailable states instead of fake fallback data.

AI Features (Hibiscus)

Hibiscus, CaribVest's AI coach, uses Claude by Anthropic, only with your permission.

  • Claude by Anthropic (third-party AI): Hibiscus uses Claude, an AI model provided by Anthropic, PBC, to generate its insights and answers. Nothing is sent to Anthropic unless you allow it in the in-app permission prompt or in Settings → Data & Privacy.
  • What's sent to Anthropic: the questions you ask Hibiscus and your recent conversation with it; your holdings (tickers, company names, share counts), their values and returns, and dividend figures; and, if you upload a JSE trade-summary PDF the app can't read on-device, that document. Your name, email, phone number, passwords, and payment details are not sent.
  • How it's sent: requests go through CaribVest's secure server, which holds the API key; Anthropic processes the data to generate Hibiscus's response under its commercial API terms. CaribVest does not sell this data or use it for advertising.
  • You can withdraw permission at any time in Settings → Data & Privacy; Hibiscus's AI answers then stay off. Permission is cleared when you sign out.

Your Controls

You can review, export, correct, and delete data from app surfaces where available.

  • Use profile, settings, export, and tax document tools to review or export records you have saved.
  • Delete account is available from Settings for signed-in users.
  • Contact privacy support for access, correction, deletion, or questions about data handling.

Contact

Questions, or requests to access, correct, export or delete your data: