InvestBuddy is built as a local-first portfolio tracker. Your portfolio files and processed financial records stay in your browser by default, and network features are kept narrow and visible.
What stays on your device
Broker files: CSV and Excel files are processed in your browser. Raw broker files are not uploaded for normal imports.
Portfolio state: Processed holdings, transactions, income events, export data, category overrides, and session metadata may be stored in this browser so the dashboard can reload.
Backups: Downloaded backups are files you control. If you connect Google Drive, backup files are uploaded directly from your browser to your own Drive.
You can remove browser-stored portfolio data from the app controls. Browser settings can also clear local site data, though that may remove saved dashboard state and cached parser settings.
When data leaves your device
Market data: Quote, dividend, and RBA FX lookups send ticker, market, base-currency, and date-window details needed to return prices or income data.
AI parser: For unsupported CSVs, the app only sends a file name, headers, row count, and a capped sample after you explicitly choose the AI parser flow.
Google Drive: Drive backup uses Google's drive.file permission so InvestBuddy can access files it creates, not your whole Drive.
Support: If you email feedback or a support request, we receive your email address and whatever details you choose to include.
Hosting and request routing are provided through Cloudflare. Normal web delivery may expose technical request details such as IP address, browser metadata, and timestamps to infrastructure logs.
Analytics
If product analytics are enabled, they are limited to coarse workflow events and traffic/performance signals. Analytics must not include raw filenames, instrument keys, holdings, transaction rows, monetary values, or broker file contents.