Privacy Policy for Graham
Last updated: October 29, 2026
Introduction
Billion Labs ("we," "our," or "us") operates the Graham mobile application, the website at getgrahamai.com and the related services (together, the "Service"). This policy explains what data we collect when you use the Service, how we use it, who we share it with, and the choices you have.
App Overview
Graham helps you keep up with the stocks you own and follow. It shows a personalised feed of the news, key market data, events and discussions around your watchlist, including short articles that are researched, written and fact-checked with the help of artificial intelligence. Graham covers stocks listed in India and the United States.
Summary
- You can use Graham without giving us your name, email address or phone number.
- We never ask for your brokerage logins, bank details, or the quantity or value of your holdings.
- We store your watchlist, which articles you read, and any messages you send us, so the app can work.
- Your personal identifiers are never sent to AI providers.
- We do not sell your personal data.
- You can delete your account and its data at any time from Settings → Delete account.
Information We Collect
Account Information
Graham signs you in with anonymous Firebase Authentication. This means:
- We do not require your name, email, phone number or any social-login profile.
- A random User ID is created when you first open the app. It links your watchlist, reading history and messages to your install.
- Because the account is anonymous, it lives on your device. If you uninstall the app or clear its data, you may not be able to recover your watchlist.
Device and App Information
- Platform and app version: whether you use Android or iOS, whether the build is a release or test build, and the app version. We use this for compatibility and to know when you update.
- Push notification token and permission status: so we can send you notifications if you allow them, and stop sending them if you uninstall.
Information You Give Us
- Your watchlist: the stocks you follow, the stocks you mark as not interested, and how each was added (picked by hand or through AI import).
- AI import text: if you use "Bring your stocks from your AI assistant," the text you paste into the app (usually an answer from ChatGPT, Gemini, Claude or a similar assistant) is sent to our servers and stored, so we can find the stocks it names and let you retry if something goes wrong. Please paste only the list of companies. Do not include account numbers, personal details or anything else you don't want us to store.
- Feedback messages: anything you write to us through the in-app Feedback screen, and our replies. These are read by members of the Graham team.
Usage Information
- Reading activity: which Graham articles you have seen in your feed or opened in full, and when. We use this to show unread stories first.
- App analytics: screens viewed, features used and similar events, collected through Google Firebase Analytics and linked to your random User ID.
- Crash and error reports: technical details of crashes and errors, collected through Firebase Crashlytics and linked to your random User ID, so we can fix problems.
Information Stored Only on Your Device
- Settings such as light or dark theme, whether you have completed onboarding, and short-lived caches that make the app faster. These stay on your device and are removed when you uninstall the app.
Information We Do Not Collect
- Your name, email address or phone number.
- Brokerage, demat, bank or trading account credentials or statements.
- The number of shares you own, what you paid for them, or your portfolio value.
- Your precise location.
- Your contacts, photos, calendar, microphone or camera.
- Your browsing history outside the app.
- Biometric data.
Device Permissions
- Internet: to load your feed, market data and articles.
- Notifications (optional): to tell you about news on your stocks. You can turn notifications on or off at any time in your device settings.
Graham does not request access to your location, contacts, camera, microphone or photo library.
How We Use Your Information
- To provide your feed: show the stocks you follow, their prices and data, and the articles about them.
- To decide what to research: we count how many people follow each stock (without identifying them) so we know which stocks to research and write about.
- To import your watchlist: identify the stocks named in text you paste in, so you can choose which to add.
- To communicate with you: reply to your feedback and send notifications you have allowed.
- To improve the Service: understand how features are used, measure the quality of AI import and articles, and fix crashes.
- To keep the Service safe: prevent abuse and enforce our Terms and Conditions.
How Graham Uses AI
Graham uses AI models from third-party providers. Which data reaches them depends on the feature:
| Feature | Provider | What is sent |
|---|---|---|
| AI import of your watchlist | Google (Gemini, via Google Cloud Vertex AI) | The text you paste, and search results from our stock catalog. Nothing else about you. |
| Researching, writing and fact-checking articles | Anthropic (Claude) | Public information only: the stock's name, its market data and public news. No user data, not even which users follow the stock. |
What Is Never Sent to AI Providers
- Your User ID, device information, push token, IP address or any other identifier.
- Your reading history or feedback messages.
- Any data from other apps on your device.
How the Data Is Sent
- Requests go from our servers to the AI provider, never directly from your device, over encrypted (TLS) connections.
- AI import uses Google Cloud's Vertex AI service, under which Google does not use the text to train its general models. Google's handling of it is governed by the Google Cloud Data Processing Addendum.
- Anthropic receives only public information about stocks and nothing about you. Its handling of that information is governed by Anthropic's Privacy Policy.
- We may change or add AI providers over time. If a change affects what personal data is shared, we will update this policy first.
Your Consent
When you first open Graham, the app explains how it uses AI. Tapping Get started means you agree to the processing described in this section. AI import is optional: if you don't use it, no text from you is sent to an AI provider.
Data Sharing and Disclosure
We do not sell your personal data.
We share data only in these limited cases:
- Service providers who run parts of the Service for us, under contracts that limit their use of the data (listed below).
- Legal requirements: when required by law, regulation, court order or a lawful request from authorities.
- Safety: to protect the rights, property or safety of our users, the public or Billion Labs.
- Business transfers: as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.
Third-Party Services
- Google Firebase: anonymous authentication, analytics (Firebase Analytics), crash reporting (Crashlytics) and push notifications (Firebase Cloud Messaging). See Firebase's privacy information.
- Google Cloud Vertex AI (Gemini): AI import, as described above.
- Anthropic (Claude): researching, writing and fact-checking articles from public information. Receives no user data.
- Amazon Web Services and our database host: hosting for our servers and the database that stores your watchlist, AI import text, reading activity and feedback messages.
- Market data and logo providers (for example Yahoo Finance and logo.dev): we fetch stock prices, fundamentals and company logos from them. We send them only stock symbols, never information about you.
Articles in Graham link to third-party websites (their sources). We are not responsible for the privacy practices of those websites.
Data Storage and Security
- Data is encrypted in transit (HTTPS/TLS) and stored on secured cloud infrastructure.
- Every request from the app is authenticated, and our servers only ever return your own watchlist, reading activity and messages to you.
- Access to stored data is limited to staff who need it to run the Service (for example, editors replying to feedback).
- We collect only what the Service needs.
No method of transmission or storage is completely secure, but we work to protect your data and keep improving our safeguards.
Data Retention
- Watchlist, AI import text, reading activity and feedback messages: kept while your account exists, and deleted when you delete your account.
- Analytics and crash reports: kept by Google Firebase according to its retention settings (for Analytics, no longer than 14 months).
- Legal holds: we may keep specific data longer if the law requires it.
- Backups: deleted data may remain in encrypted backups for a limited period until they are overwritten.
Your Rights and Choices
- Delete your account: go to Settings → Delete account in the app. This permanently deletes your watchlist, AI imports, reading activity, feedback messages, your account record and your anonymous login. It cannot be undone.
- Change your watchlist: add or remove stocks at any time from Settings → Manage watchlist.
- Notifications: turn them on or off in your device settings.
- Access, correction and other requests: email support@billionlabs.ai. Include your User ID if you can, since we have no other way to identify an anonymous account.
Depending on where you live, you may have further rights, such as to receive a copy of your data, to object to or restrict certain processing, to withdraw consent, or to complain to a data protection authority. We will respond to verified requests within the time required by applicable law.
Children's Privacy
Graham is meant for adults and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has used Graham and given us personal data, please contact us and we will delete it.
International Data Transfers
Our service providers may store and process your data in countries other than your own, including India, the United States and the European Union. Where we transfer data across borders, we rely on safeguards such as the providers' contractual commitments (including Standard Contractual Clauses where applicable) and their security controls.
Compliance with Laws
We designed this policy with the following in mind:
- Digital Personal Data Protection Act, 2023 (India)
- General Data Protection Regulation (GDPR) (European Union)
- California Consumer Privacy Act (CCPA) (United States)
- Apple App Store and Google Play developer policies
Changes to This Privacy Policy
We may update this policy from time to time. If we make material changes, we will tell you in the app and update the "Last updated" date above. If you keep using Graham after the changes take effect, the updated policy applies to you.
Contact Us
If you have questions about this policy or how we handle your data, contact us:
- Email: support@billionlabs.ai
- In the app: Settings → Feedback
- Website: https://getgrahamai.com
This privacy policy was last updated on October 29, 2026. It is written to meet mobile app marketplace requirements, including Apple App Store Review Guidelines 5.1.1 and 5.1.2 and Google Play's User Data policy.