Privacy Policy
Effective date: 21 July 2026 · Contact: developer@musterstocks.com · Provider: Symboyant Studios Pty Ltd, Australia
The short version: Muster stores the minimum it needs to read your own shares back to you – your email, your preferences, the watchlist and holdings you type in, and the readings generated for you. We don't run ads, we don't run analytics, we don't sell data, and we never connect to your bank, broker, or money.
Muster is a share-market companion app for Australian retail investors: daily plain-English readings of your own watchlist, paper-tracked positions, a portfolio ledger you enter yourself, share rankings, and ETF portfolio plans. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What we collect and why
| Data | Why | Where it lives |
|---|---|---|
| Email address | Your account sign-in (passwords are handled by our authentication provider and never stored by us in readable form) | Supabase (AWS Singapore, ap-southeast-1) |
| Reading time and days, timezone, theme | Delivering your morning reading at the local time you choose, remembering dark mode | Supabase |
| Watchlist tickers | The shares your daily readings cover | Supabase |
| Paper positions (entry, stop and target levels) | Practice positions you track – records only; Muster never places real trades | Supabase |
| Holdings you type in (code, units, buys and sells with dates and AUD totals) | Showing your portfolio's value, average cost and history. We have no connection to your broker | Supabase |
| Generated readings, rankings output and ETF plans | So you can review past readings and plans | Supabase |
| Email address (website waitlist) | One launch announcement email, if you signed up on this site | Supabase |
Push notifications are currently disabled – no device push token is collected in the current version. If a future version ships them and you turn them on, we would store an Expo push token to deliver them, and this page will say so first.
We do not collect: your name, payment details, bank or broker accounts or API keys, contacts, location, advertising identifiers, or usage analytics. The app contains no advertising, analytics, or tracking SDKs.
Sign-in with Google
If you choose to sign in with Google, Google shares your email address with us to create your account. We receive nothing else from your Google account.
Third parties we rely on
- Supabase – database and authentication hosting (AWS Singapore, ap-southeast-1). Processes all data in the table above on our behalf.
- Railway – hosts our backend server (United States). Your data passes through it as you use the app.
- Yahoo Finance – source of delayed market prices. Our server requests public price data for tickers; the requests carry no account identifier and none of your personal data.
- Expo – would deliver push notifications (United States), only if that currently-disabled feature ships and you enable it.
- Anthropic – can optionally turn a generated plan into a plain-English explanation (United States). This feature is off by default and currently disabled; if we enable it, the text of your generated plan would be processed under API terms that do not permit training on it, and we'd update this policy first.
All of these providers act as processors on our behalf. We do not sell or rent personal information to anyone.
Where your data goes
We operate from Australia; our providers store or process data overseas – account data and content in Singapore (Supabase, AWS ap-southeast-1), and server processing in the United States (Railway). We take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles.
Security
Your content is stored with row-level security, so each account can only reach its own rows. Traffic is encrypted in transit. Elevated database credentials are held server-side only and never shipped in the app. If a data breach occurs that is likely to result in serious harm, we will notify affected users and the OAIC under the Notifiable Data Breaches scheme.
How long we keep it
For as long as your account exists. Deleting your account removes your profile, watchlist, positions, holdings, transactions, readings and any device tokens from our database. Delete your account in the app, or email developer@musterstocks.com.
Your rights
You may request access to, and correction of, the personal information we hold about you (APPs 12 and 13). Most of it is directly visible and editable in the app; for anything else, email developer@musterstocks.com. If you have a privacy concern, contact us first and we'll respond within 30 days; if you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
Children
Muster is a financial-content app and is not available to anyone under 18. If you believe a minor has created an account, email us and we will delete it.
Future features
If we introduce paid subscriptions, payments would be processed by the app store – we would not store card details. Any such change updates this page first, with an in-app notice for material changes.
Changes
We'll update this page and the effective date when the policy changes, and note material changes in the app.