-
Notifications
You must be signed in to change notification settings - Fork 0
MeritValue Privacy Policy
The current version of this document lives at www.meritvalue.com/privacy. That copy is canonical and is kept in step with the code it describes. This page is a mirror and may lag.
Last Updated: August 1, 2026
MeritValue ("we", "our", or "us") is operated by Akos Komuves. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application MeritValue (the "App") and the website at meritvalue.com (the "Site").
We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Hungarian data protection laws.
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
The App has no accounts. It asks for no name, no email, no phone number and no location. It contains no advertising SDKs and no third-party analytics SDKs of any kind.
What we do keep is a record of which companies were looked up, tied to a random identifier generated on your device — not to you. That record exists to enforce usage limits and to decide which companies to cover next.
Akos Komuves Hungary Email: komuvesakos@icloud.com
- A share price, when you choose to type one. The App never shows a market quote — you enter the price you want to test, and it is sent to our server to compute an implied return. We do not store the price you entered in our database. As with any web service, our hosting provider's standard request logs may briefly contain the request address.
That is the only information the App asks you for. There is no account, no sign-up and no profile.
- An install identifier. On first launch the App generates a random UUID and stores it in your device's Keychain. It is not derived from your device, your hardware, your Apple ID or you, and it is not the advertising identifier. Deleting the App and reinstalling produces a new one.
- An API key. Your install exchanges that identifier for its own API key, stored in the Keychain. We store only a cryptographic hash of the key, never the key itself.
- Request records. For each request, we record the endpoint called, the company ticker requested, the response status, the time, and which key made the call. This is how usage limits are enforced and how we decide which companies to prioritise.
- Registration records. When your install registers, we record a salted cryptographic hash of the IP address, a hash of the install identifier, the platform, the outcome and the time. We do not store raw IP addresses. The hash exists to stop one network minting unlimited keys.
- Your follow list and recently opened companies are stored on your device and are never transmitted to us. There is no sync and no backup on our side. Deleting the App deletes them.
- No name, email address, phone number or postal address
- No location data
- No contacts, photos, calendar, health or payment data
- No advertising identifier (IDFA), and no advertising or attribution SDKs
- No third-party analytics SDK inside the App
- No cross-app or cross-site tracking, and we do not sell personal data
The Site uses PostHog (EU-hosted) for aggregate traffic analytics — page views and navigation. It is configured not to create profiles for anonymous visitors. This applies to meritvalue.com only; the App contains no analytics SDK.
We use the information above to:
- Serve valuations and company data to the App
- Enforce per-install usage limits and prevent abuse of the API
- Understand which companies are in demand, so coverage is extended where it is used
- Diagnose faults and improve the service
We process data on the following bases:
- Contract Performance: processing necessary to deliver the App's functionality (Article 6(1)(b) GDPR)
- Legitimate Interests: preventing abuse of the API, keeping the service available, and deciding which companies to cover (Article 6(1)(f) GDPR)
We do not sell your data, and we do not share it with advertisers or data brokers.
We use third-party services that process data on our behalf:
| Service | Purpose | Data Processed | Privacy Policy |
|---|---|---|---|
| Vercel | Application hosting and delivery | Request metadata, IP address (transient, in standard server logs) | Vercel Privacy |
| Supabase | Database | Install identifier hash, key hash, request records, IP hash | Supabase Privacy |
| PostHog (EU) | Website analytics only — not used in the App | Page views, browser and country-level metadata | PostHog Privacy |
We may disclose information if required by law or in response to valid legal requests by public authorities.
- Request and registration records: kept for no longer than necessary for usage limits, abuse prevention and coverage planning, and deleted or aggregated once they no longer serve those purposes.
- Key records: kept while the key is active. Re-registering an install revokes the previous key.
- On-device data (follow list, recent companies): kept until you delete the App or clear it in the App.
As an EU resident, you have the right to:
- Access: request a copy of your personal data
- Rectification: request correction of inaccurate data
- Erasure: request deletion of your data ("right to be forgotten")
- Restriction: request limited processing of your data
- Portability: receive your data in a portable format
- Object: object to processing based on legitimate interests
- Withdraw Consent: withdraw consent at any time (where applicable)
To exercise these rights, contact us at komuvesakos@icloud.com. We will respond within 30 days.
Please note: because the App has no accounts, the data we hold is pseudonymous and we usually cannot connect it to a person. Where we cannot identify you from the data we hold, Article 11 GDPR applies and we may be unable to action a request unless you can supply information that identifies the records — for example your install identifier. We will not ask you for additional identifying information solely to comply.
We implement appropriate technical and organizational measures to protect data, including:
- Encryption of all data in transit (TLS)
- API keys stored only as cryptographic hashes on the server, and in the device Keychain on your phone, scoped so they do not transfer to another device via backup
- IP addresses salted and hashed rather than stored
- Access controls on our data systems
No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our service providers operate. These transfers are protected by:
- Standard Contractual Clauses (SCCs)
- Service providers' compliance with applicable data protection frameworks
The App is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
MeritValue is an educational tool. Valuations are computed from public SEC filings by an automated engine and are not investment advice, an offer, or a recommendation to buy or sell any security. See our Terms of Service.
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Last Updated" date
- Sending a notification through the App for significant changes
Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Akos Komuves Email: komuvesakos@icloud.com
You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or your local data protection authority.
This Privacy Policy is effective as of August 1, 2026.