The short version
- We collect what Bacon needs to work: your email, what you track and ask, your settings, and how you use the app.
- AI providers process research requests and chat messages to generate answers. Your email address isn't sent to them.
- We don't sell your data, show you ads, or use your data to train AI models.
- Delete your account any time from inside the app: Account → Delete account.
On this page
- 1.Who we are
- 2.What we collect
- 3.How we use it
- 4.Our legal bases (EEA and UK)
- 5.How AI providers are involved
- 6.Who processes data for us
- 7.International transfers
- 8.Cookies and local storage
- 9.How long we keep it
- 10.Your choices and rights
- 11.Deleting your account
- 12.Security
- 13.Children
- 14.Changes to this policy
1. Who we are
Bacon (“we”, “us”) is responsible for your personal data (the “controller”). You can reach us about anything in this policy at contact@bacon.app.
2. What we collect
Your account
- Your email address, and when you signed up and last signed in.
- Your password, if you set one — stored only as a one-way hash by our sign-in provider. We never see it.
What you add
- Your watchlist (the names you track, and any thesis, conviction or notes you add) and your themes.
- Your settings, such as morning email, push alerts, time zone and news preferences.
- If you use the property tracker: the properties you add (a label, market, purchase price and date, and notes).
- Your chat messages and the replies, and the briefs, analyses and calls produced for your account.
How you use Bacon
- In-app events — for example which screens you open and when you run an analysis, with its subject (such as a ticker).
- AI usage records — which feature ran, which model, and its size and cost — so we can apply plan allowances and manage costs.
Your device
- If you allow notifications in the iPhone app, a push token that lets us send alerts to that device.
- Technical data in server logs, such as IP address and browser or device type, kept briefly for security and debugging.
Purchases
- Your plan, its status, billing period and renewal date, and the reference the payment provider gives us.
- We never receive or store your full card number — Stripe and Apple handle payment details.
We don't ask for your name, your brokerage accounts, the size of your holdings, or identity documents, and we don't use advertising trackers.
3. How we use it
- To run the service: build your brief, run analyses, answer chat, send the morning email and alerts you turn on.
- To apply your plan and its allowances, and to process payments.
- To keep Bacon secure and prevent fraud and abuse.
- To support you when you get in touch.
- To understand, in aggregate, which features are used, so we can improve them.
- To meet legal obligations, such as tax records.
We don't sell your personal data, use it for advertising, or use it to train AI models.
4. Our legal bases (EEA and UK)
- Contract — to provide the service you signed up for, including billing.
- Legitimate interests — security, preventing abuse, and improving the product in ways you'd expect.
- Consent — push notifications and the morning email, which you can switch off at any time.
- Legal obligation — for example keeping financial records.
5. How AI providers are involved
To produce research, we send an AI provider what that request needs: the asset or theme, relevant market data, your watchlist or themes where a feature uses them, and — for chat — your messages. We don't include your email address. The providers process this under their API terms to return a response to us.
6. Who processes data for us
We use these service providers to run Bacon. Each only receives what its job needs and processes it on our behalf.
- Supabase
- Database and sign-in. Stores your account and everything you add in the app.
- Vercel
- Hosting. Serves the website and runs the server code; keeps short-lived request logs.
- Anthropic
- AI (Claude). Receives the content of research requests and chat messages to generate responses.
- AI (Gemini API). Receives the content of some research requests to generate responses.
- xAI
- AI (Grok API). Receives the content of some research requests to generate responses.
- Stripe
- Web payments. Handles your card details, billing email and subscription.
- Apple
- App Store purchases and push notifications. Handles in-app payments; delivers notifications to your device token.
- RevenueCat
- In-app subscription status. Receives an app user ID and App Store purchase records so your plan works on every device.
- Resend
- Email delivery. Receives your email address and the content of emails we send you, such as the morning brief and sign-in links.
Market-data providers receive the symbols we look up, never who asked. Charts are embedded from TradingView: when you view one, TradingView loads in your browser under its own privacy policy and may set its own cookies.
We may also share data where the law requires it, or with a successor if Bacon is sold or merged — in which case this policy keeps applying to your data.
7. International transfers
Our providers process data in several countries, including the United States and Singapore. Where the law requires it, we rely on recognised safeguards, such as standard contractual clauses, for those transfers.
9. How long we keep it
- Your account and what you add: for as long as your account exists.
- When you delete your account: your account and its data are removed from our live database straight away. Copies in encrypted backups expire on the backup cycle, within 30 days.
- Billing records: for as long as tax and accounting law requires.
- AI cost records: kept for accounting, with the link to your account removed when you delete it.
- Server logs: for short periods — typically days to weeks.
- Push tokens: until you turn notifications off, the token stops working, or you delete your account.
10. Your choices and rights
Depending on where you live, you may have the right to:
- see the personal data we hold about you, and get a copy in a portable format;
- correct it if it's wrong;
- delete it — you can do this yourself, see below;
- object to or restrict some processing;
- withdraw consent, for example by switching off the morning email or push alerts in the app or your device settings;
- complain to your data protection authority.
Email contact@bacon.app to use any of these. We'll answer within 30 days, and may need to confirm the request comes from the account's email address.
11. Deleting your account
You can delete your account at any time from inside the app: Account → Delete account. That removes your account and the data listed above, as described under “How long we keep it”. If you subscribed through the App Store, cancel the subscription in your Apple ID settings too — only Apple can stop Apple's billing.
12. Security
Data is encrypted in transit. In our database, row-level security keeps each account's data readable only by that account. Access to production systems is limited to the people who need it to run Bacon. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.
13. Children
Bacon is for adults. It isn't meant for anyone under 18, and we don't knowingly collect their data.
14. Changes to this policy
If we change this policy we'll post the new version here with a new date, and tell you by email or in the app before material changes take effect. See also our Terms.
Questions about this document? Email contact@bacon.app.