Privacy

Who we are

PreOpen is made by Ray Software LLC, 30 N Gould St, Sheridan, Wyoming 82801, United States ("we"). We decide how the data described here is used. Write to us at hello@preopen.com about anything on this page.

This website

The waitlist

Before launch, the site had a waitlist. If you joined it, we keep your email address, which form you used and when, for one thing: to tell you when PreOpen is available. Once we have sent that email, we delete the list. You can ask to be taken off it at any time by writing to us from the same address. Each sign-up was counted against a scrambled code made from the network (IP) address it came from, never the address itself, and that record was deleted after two days.

Nothing else

The site sets no cookies, keeps nothing in your browser's storage, and loads nothing from anyone else: no analytics, no advertising, no third-party fonts or scripts. It asks nothing of our servers either: the app screens and figures on it are examples. The site is delivered by Cloudflare, which, like any web host, sees your network address in order to send you the page.

The app, without an account

Everything you set up stays on your phone: the markets and channels you follow, your holdings, your notification times, what you have read, the finds and ideas you save, and your reading streak. None of it is sent to us, with three exceptions, all described below: if you turn on Research alerts, we keep what alerts need to choose and send them; where you allow usage analytics, the app records that you followed, held or saved something, by its name, never how much you hold; and Explore and Ideas record what you do with each find and idea, including whether you saved it, under a random ID made on your phone.

To show prices, the app asks our servers for the markets on your screen, including the ones you hold. It asks by name only, never how much you hold, and the request is not stored against you. If you follow a market nobody has followed before, we add it to the markets PreOpen prices, for everyone.

The app, with an account

You sign in with your email address and a code we send to it, or with Sign in with Apple. With an account we keep:

• Your email address, to send your sign-in codes and the emails described under Emails below, and to know which account is yours.
• Your holdings, which markets and how many units, the average price you paid and its currency if you enter them, and the currency you view them in, so they are there on a new phone. They are kept in a record that only your account can read in the app; our staff do not look at it except to fix a problem you report or where the law requires.
• What you follow and save: your watchlist, the investors and politicians you follow, and the ideas, stories and finds you save.
• Your settings: your notification settings, your answers to the setup questions (what you want from PreOpen, how much you know, what you invest in) and light or dark appearance.
• Markets you added: if you follow a market no one on PreOpen followed before, which one and when, because each account may add a limited number.

Sign in with Apple. If you use it, we ask Apple only for an email address, never your name. Apple gives us your address or, if you choose to hide it, a private relay address that Apple creates and forwards to yours; we use it as we use any account email. Apple also gives us an identifier for your account and a token, which we keep with your account for one purpose: when you delete your account, we use it to tell Apple to revoke PreOpen's access, as Apple requires. The token is deleted with your account. Apple's own privacy policy covers what Apple does when you sign in.

Sign-in sessions. Each time you sign in, Supabase, which runs our sign-in, keeps a record of that session with the network (IP) address and the device details (the app's user agent) it came from, until you sign out on that phone or delete your account. Supabase also notes each sign-in, sign-out and account change, with the same details, in a security log that we use to protect accounts.

These are kept the same way as your holdings, so they are there on a new phone. Everything else stays on your phone, as it does without an account: what you have read, your reading streak, Ask's answers kept on the phone, your choice about usage analytics and your privacy settings, which belong to each phone.

Emails

We send three emails about your account, as part of the service: the code each time you sign in, one welcome after your first sign-in, and one note confirming it if you delete your account. They carry no advertising. Replies to them reach us.

The read by email. If you turn it on, in the app (You, then Email) or on the page linked from our emails, we email you PreOpen's read: each weekday morning in your time zone and the week's read on Saturday, or on Saturdays only. It is off unless you turn it on. To send it we keep your choice, your phone's time zone, and when, on which screen and with which words you made the choice. Every one of these emails has an unsubscribe link, and mail apps that support it show their own Unsubscribe button; either stops them straight away.

What we keep about each email. That it was sent, what kind it was, its subject, whether it was delivered, bounced or marked as spam, and your address shortened (such as fi•••@gmail.com). If an email to your address bounces for good or is marked as spam, we keep the address on a list of addresses we do not write to, so that we stop. Our emails have no tracking pixels and their links are not tracked: we do not know whether you open them.

Asking PreOpen

The first time you ask, the app tells you this and asks you to agree. You can withdraw that agreement at any time in the app (You, then Your data), and Ask will ask again before your next question. When you ask a question, we send it to Anthropic, together with the last few turns of your conversation and our own stories and prices, and Claude writes the answer, sometimes searching the web to check a fact. We do not send your name, email address, account or network address with it. Anthropic deletes what it receives within 30 days under its commercial terms and does not use it to train its models. If Anthropic's safety systems flag a question as breaking its usage policy, Anthropic may keep the question and answer for longer, up to two years under its own retention policy, or as the law requires. Please leave personal details out of your questions.

We keep each question and its answer, so the next person who asks the same thing gets it straight away. With it we note who asked, as your account ID or, if you are signed out, a scrambled code made from your network address, never the address itself. That lets us count how many different people asked a question, rather than how many times it was asked, and we delete the note after 30 days. A question that several different people asked may be shown to everyone under what people are asking, never with who asked it, and a question asking for personal advice is never shown.

To stop anyone flooding Ask, each new question is also counted against your account ID or that scrambled code. That record is deleted after two days.

To keep to each person's allowance of questions (a few a month without Plus, more with it), every question is also counted against your account ID if you are signed in and a scrambled code made from your phone's random ID, never the ID itself (with neither, the scrambled code made from your network address). These counts say only when a question was asked, never what it was, and are deleted after 32 days, the length of the monthly allowance; the one under your account ID is deleted at once if you delete your account.

Reporting a wrong answer

If you report an answer as wrong or inappropriate, we keep the question, the answer as you saw it, any note you add and a random ID made on your phone, not your account, so we can put it right. Write to us and we will delete a report you sent.

Writing to us from the app

If you send us a message with the app's contact form (You, then Write to us), we keep your message, what it is about, the email address you give for our reply and, if you are signed in, your account, so we can answer you. With it go the app's version, your iPhone model and iOS version, your plan and the first characters of the random ID made on your phone, to help us look into it. The message reaches our inbox through our email provider, Resend. If you write from your own mail instead, we keep that email in our mailbox to answer you.

Research alerts

Research alerts are off until you turn them on. When you do, we keep a random ID made on your phone, your account ID if you are signed in, the push address that Apple and Expo give your phone, which kind of phone it is, and the names of the markets you hold or follow, of the ideas you follow and of the investors or politicians you follow (never how much you hold), your alert settings (how many alerts, which kinds, quiet hours and time zone) and whether you have PreOpen Plus. We use them to choose and send alerts about those markets. We keep a note of which alerts each phone was sent, so none is sent twice, and whether each was opened: the kinds of alert you open more often are favoured when your alerts are chosen, and the kinds you never open are sent less. We also note the days you opened the app over the past four weeks and when you last opened it, which sets how many alerts reach you. Notes of the alerts sent are deleted after 90 days. Turning alerts off deletes all of it, as does deleting your account; a phone Expo tells us is no longer reachable is deleted too.

To stop anyone flooding alerts, turning them on for a new phone and sending a test alert are counted against a scrambled form of the network (IP) address they came from, never the address itself, kept with the phone's random ID for up to 24 hours.

Explore and Ideas

When you use Explore or Ideas, the app records what you do with each find or idea: how long you looked at it, whether you opened, saved, shared or asked about it, and your answer when a find asks you a question. These records carry a random ID made on your phone rather than your account, and tell us which finds and ideas are worth showing. The same ID is kept with your account if you turn on Research alerts while signed in, so the two could be connected. We delete them after 90 days.

How the app is used (analytics)

To learn which parts of PreOpen are useful and where it falls short, the app sends PostHog, our analytics provider, a record of how it is used: which pages are opened and for how long, and what you do there, such as following a market, saving a story, opening an alert or starting the free week. With these records go the app's version, the kind of phone and its system version, its language and region setting, the app's settings (theme, text size, your plan, whether notifications are on, and the goal and experience you chose in setup), and how many days ago the app was installed. PostHog does not keep your network address, and the app tells it not to work out where you are from it: the only place it knows is your phone's region setting (the app also removes the time zone PostHog's software would otherwise add).

The records carry a random ID made on your phone and, when you are signed in, your account ID, never your name, email address or phone number. They never include how much you hold, any amount of money, what you type into search (only how long it was, and what you opened from the results) or the questions you ask PreOpen (only how long they were).

Screen recordings. For a share of sessions (about one in five), the app also sends PostHog a recording of the screens as they were drawn, so we can see where the app is confusing. Everything you type is hidden in them, and sign-in, Ask, the Your data page, anything showing your email address and anything showing what you hold or an amount of your money (your Portfolio page, the holdings sheet, the holdings card on Now and "Your position" on a market's page) are never recorded; they show as blank boxes. Setup's question and the line on its first screen say so before anything is sent.

Your choice. If your phone is set to a region in the European Union, the European Economic Area, the United Kingdom or Switzerland, or its time zone is in Europe, nothing is sent until you say yes, which the app asks once, while you set it up. Elsewhere it is on from the start, and setup says so. Everyone can turn it off, or on, at any time in the app: You, then Privacy, then Share usage analytics. Turning it off stops it at once; the only thing sent after that is a note that it was turned off.

PostHog keeps the records for one year, on its servers in the EU. We use them only to understand and improve PreOpen. They are never sold, never shared with anyone else, never used for advertising, and never combined with data about you from other companies' apps or websites.

Other things worth knowing

• The free week's reminder, three days before a free trial ends, is scheduled on your phone (or shown in the app if notifications are off); we keep nothing for it. Research alerts are sent from our servers, as described above.
• Listen plays audio we publish for everyone, read by an AI voice. Where you allow usage analytics, the record above notes which episode you started or finished; nothing else about your listening is kept.
• Pictures of investors and members of Congress load directly from Wikimedia Commons and the congress-legislators project on GitHub, which see your network address as any website would.
• App updates. Each time it starts, the app asks Expo (650 Industries) whether there is an update to download. With each request it sends a random ID that the app makes once, when it is installed, and keeps until you delete the app, together with the kind of system (iOS), which version of the app it is running and, if the app failed to start the last time, a short description of the error. Expo, like any server, also sees your network address.
• Sources open in a browser window inside the app, where the source's own website applies its own terms.
• Crash reports. If the app crashes or a page fails, it sends us a report so we can fix it: what went wrong and where in our code, the kind of phone, its iOS version, the app's version, and the screens opened just before, with a random ID the crash reporter makes for this installation of the app, so that many crashes on one phone count as one person's problem. For about one session in ten it also sends how long screens and requests took, so we can find what is slow, with the addresses of our servers it called but never what followed in them. A report never includes your name, email, account, network address, holdings or anything you typed. We keep reports for 90 days.
• We do not use advertising services, and we do not track you across other companies' apps or websites. Apart from usage analytics (above), crash reports, the update checks, the sign-in sessions, the kind of phone kept for Research alerts and the technical details every server sees with a request (its network address and app version), which our providers keep in their logs for a short time to run and secure the service, we collect nothing about your phone.

Who else handles data for us

• Supabase runs our database, sign-in and server functions, on Amazon Web Services in the United States.
• Resend sends our emails: your sign-in codes, the welcome and account emails, and the read if you ask for it, in the United States.
• GitHub (Microsoft) keeps an encrypted weekly copy of our database, in the United States.
• Anthropic writes answers to the questions you ask, in the United States.
• Sentry (Functional Software) receives the app's crash reports, in the United States.
• PostHog (PostHog Inc.) receives the app's usage analytics and screen recordings, where you allow them, and keeps them in the European Union.
• Cloudflare delivers this website.
• Expo (650 Industries) passes Research alerts to Apple's notification service and delivers the app's updates, in the United States.
• Apple provides the App Store and shows notifications on your phone. If you use Sign in with Apple, Apple confirms who you are and gives us the email address described above, and when you delete your account we send Apple a request to revoke PreOpen's access.

Each of these companies, except Apple, which handles what it receives under its own privacy policy, uses your data only to provide its service to us, under written terms that require it to protect the data at least as well as this policy does.

The companies that supply our market data (Twelve Data, CoinGecko, the Federal Reserve Bank of St. Louis and others) receive no personal data from us, only the names of markets, from our servers.

We disclose data to authorities when the law requires it.

Apart from usage analytics, which PostHog keeps in the EU, your data is stored in the United States. Where UK or EU law applies, these transfers rely on our providers' data processing terms, including standard contractual clauses.

Keeping it safe

Your data travels encrypted between the app and our servers, and our providers store it encrypted. Only the people who run PreOpen can reach it, and only to run and support the service. No system is perfectly secure: if a breach affects your data, we will tell you as the law requires.

Why we are allowed to use it

Where UK or EU data protection law applies: we use your account data, including the account emails, to provide the service you asked for; we email you the read because you asked for it (your consent, which you can withdraw at any time with the link in any of them or in the app); your waitlist email because you gave it to us for that purpose; and the records that stop abuse, crash reports and the records that show us which finds and ideas are useful because we have a legitimate interest in keeping PreOpen working and worth reading. Usage analytics and screen recordings rely on your consent, which you can withdraw at any time in the app.

How long we keep it

• Account data, including the Sign in with Apple token: until you delete your account.
• Sign-in sessions, with their network address and device details: until you sign out on that phone or delete your account.
• The security log of sign-ins: as long as it is needed to protect accounts.
• Your email choices: until you change them or delete your account.
• Records of emails we sent: 180 days.
• Addresses we must not write to (an email bounced for good or was marked as spam): until you ask us to take yours off.
• Waitlist emails: until we have sent the launch email.
• Records that stop abuse: two days; the scrambled addresses counted for alerts, 24 hours.
• Ask's counts for your allowance of questions: 32 days.
• Explore and Ideas records: 90 days.
• Crash reports: 90 days.
• Usage analytics and screen recordings: one year at most.
• Who asked a question: 30 days.
• Research alerts: until you turn them off or delete your account.
• Questions and answers themselves: up to 12 months, then deleted. Ask us to remove one you asked sooner and we will.
• Reports of answers: 12 months.
• Messages sent with the app's contact form: 12 months at most, and deleted with your account.
• Backups: what is deleted leaves our daily backups within 7 days and our weekly encrypted copies within 90 days.

Your choices and rights

You can delete your account and what is kept with it in the app: You, then Your data, then Delete account and data. You can stop the read by email at any time, with the link in any of them or in the app (You, then Email). Deleting your account does not cancel a subscription; cancel that in your Apple account settings. Signing out keeps your data on our servers and removes your holdings from that phone; your watchlist, saved items and settings stay on the phone.

You can turn usage analytics off, or back on, in the app: You, then Privacy. Deleting your account also deletes the analytics tied to your account and to that phone. To have the analytics already sent about you deleted otherwise, write to us; tell us the random ID shown under deviceId when you export your data (You, then Your data, then Export my data), or your account email if you were signed in.

You can also ask us to show you what we hold about you, correct it, send it to you, or delete it, and you can object to how we use it. Write to hello@preopen.com. If you are in the UK or EU you can also complain to your data protection authority; in the UK that is the Information Commissioner's Office.

US privacy rights

We do not sell or share personal information, as California and other state laws define those terms, and we do not use it for targeted advertising or profiling. We do not respond to Do Not Track signals because we do no cross-site tracking, and we honour Global Privacy Control. Wherever you live in the US, you can ask to know, correct, delete or get a copy of your data, and appeal a refusal by replying to our answer; someone you authorise may ask for you.

Children

PreOpen is for adults. We do not knowingly collect data from anyone under 18; if you think a child has given us data, write to us and we will delete it.

Changes

When this page changes, the date at the top changes with it, and anything that matters is announced in the app.