Privacy Policy

1. Information We Collect

We collect the following categories of information when you use the Service:

• Account information — your name, email address, and profile photo, received from Google or Apple when you sign in, and the username, bio, and trading-experience level you enter during signup. If you sign in with email and password, Google Firebase handles your password; we never see it.
• Mobile number — collected and verified by a one-time SMS code to activate a free trial and to prevent duplicate trials.
• Portfolio and trading data — holdings and transactions you add by hand or import from MeroShare (see Section 2), paper-trading orders, trade-journal entries, watchlists, layouts, drawings, and price alerts.
• AI chat history — your conversations with the AI assistant ("Guru").
• Payment records — the plan, amount, date, wallet provider, and transaction reference of each purchase. Payments happen inside eSewa or Khalti; we never receive your wallet PIN, password, or balance.
• Support and feedback — messages you send through the in-app chat (Intercom), email, or the feedback form.
• Device and notification data — push-notification tokens if you enable alerts, and basic device and browser information.
• Usage data — pages viewed, features used, clicks, errors, approximate location from your IP address, and session recordings of how you use the web app (see Section 7).

2. MeroShare Data

Connecting MeroShare is optional. When you do, your browser or the Nepsense app signs in to MeroShare (operated by CDS and Clearing Ltd.) directly. Your MeroShare username and password are sent only to MeroShare and are never sent to or stored on Nepsense servers. If you choose to stay connected, they are saved on your own device (the iOS Keychain in the app, or your browser's local storage on the web) so the next sync can run. Anyone with access to that device or browser profile may be able to read them, so do not save them on a shared device.

• After a sync, your device sends us the resulting holdings and transaction data (securities, quantities, purchase prices, and dates) so we can show portfolio analytics and your trade journal.
• We use this data only to provide the features you asked for. We do not sell it or use it for advertising.
• You can remove saved credentials by disconnecting MeroShare, and you can delete imported portfolios at any time. To delete all imported data, contact [email protected].

3. AI Conversations

When you use the AI assistant ("Guru"), your messages and its responses are stored with your account. We use them to operate, debug, secure, and improve the Service, including the quality of our AI features. Messages are processed by our AI inference providers (see Section 5) to generate responses.

Please do not include passwords, financial account numbers, or other sensitive personal information in chat messages.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and operate the Service and its features;
• Verify your mobile number and manage free trials;
• Process and activate plan purchases;
• Send the price alerts, notifications, and emails you have turned on;
• Answer support requests;
• Analyse usage to understand, secure, and improve the Service, including our AI features;
• Measure the performance of our advertising on Meta (Facebook and Instagram) and Google; and
• Comply with legal obligations and enforce our Terms.

5. Service Providers

We use the following providers to run the Service. Each receives only the information it needs for its task:

• Sign-in — Google (Firebase Authentication) and Apple;
• Database and hosting — Supabase, Amazon Web Services, and Cloudflare;
• Payments — eSewa and Khalti (wallet payments, received by Motors Nepal Pvt. Ltd.);
• SMS — Sociair (one-time verification codes);
• Email — Resend (alert and account emails);
• Push notifications — Google Firebase Cloud Messaging and Apple Push Notification service;
• Customer support — Intercom (in-app chat);
• Product analytics and session recording — PostHog;
• Web analytics — Google Analytics;
• Advertising measurement — Meta Pixel and Meta Conversions API, which tell Meta when someone who saw our ads signs up, starts a trial, or buys a plan;
• AI inference — third-party model providers (currently including Together AI) that process Guru prompts and responses;
• Community — Discord, for plan holders who join our Discord groups (subject to Discord's own privacy policy).

We do not sell your personal information. We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of Nepsense, our users, or the public.

6. Data Retention, Security & Your Rights

We keep your information while your account is active and afterwards only as long as needed for legal, accounting, or fraud-prevention purposes (for example, payment records). We use reasonable technical and organisational measures to protect it, but no method of transmission or storage is completely secure.

Subject to applicable law, including Nepal's Individual Privacy Act, 2075, you can ask to access, correct, export, or delete your personal information, and withdraw consent where we rely on it. Write to [email protected] from the email address on your account and we will respond within 30 days.

To delete your account and its data, see Delete your Nepsense account.

7. Cookies, Tracking & Session Recording

We and the providers listed in Section 5 use cookies, local storage, and similar technologies to keep you signed in, remember your settings, secure the Service, measure usage, and measure our ads. This includes the Meta Pixel and Google Analytics on our public pages.

PostHog records anonymised sessions of how pages are used (mouse movements, clicks, scrolling, and what was on screen) so we can find and fix problems. Text you type into form fields is masked and not recorded.

You can block or delete cookies in your browser settings, use your browser's tracking protection, or use an ad blocker. Signing in and some features may not work without cookies and local storage.

8. Children's Privacy

The Service is not intended for, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Where Your Data Is Stored

Most of our providers store and process data outside Nepal, including in the United States, the European Union, and Asia. By using the Service, you agree to this transfer. We choose providers that protect data to standards consistent with this policy.

10. Changes to This Policy & Contact

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email.

Nepsense is operated by Motors Nepal Pvt. Ltd., Pulchowk, Lalitpur, Nepal. For questions or requests about this policy or your data, contact [email protected].