Privacy Policy

Effective date: July 25, 2026. This Privacy Policy describes how Pruett Productions LLC, a Florida limited liability company (“we,” “us,” “our”) collects, uses, discloses, and protects information when you use BullPicks™ (the “Service”), including our website at bullpicks.com and our mobile applications for iOS and Android. BullPicks™ is operated by Pruett Productions LLC, a Florida limited liability company.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Who we are

The Service is operated by Pruett Productions LLC, a Florida limited liability company. For privacy-related questions, requests, or complaints, contact us through our Support page.

2. Information we collect

We collect the following categories of information:

• Account and authentication data: email address, authentication identifiers, and session tokens. Sign-in may use email and password and, where available, Sign in with Apple or Google. Authentication is processed through Supabase at our auth subdomain (auth.bullpicks.com).
• Profile and preferences: strategy profile selections, default profile, market-cap bucket preferences, broker shortcut preferences, onboarding choices, and the version of our Terms and Privacy Policy you accepted.
• User content you provide: My Trades journal entries (tickers, dates, prices, share counts, notes, links to picks) and related fields you enter in the app.
• Optional brokerage connection data: if you choose to connect a brokerage through SnapTrade (our brokerage-connection provider), we store connection references (such as SnapTrade user and account identifiers) and may sync account summaries, positions, and order status needed to show connection status and optional in-app order routing. We do not store your brokerage username/password. Credentials for the brokerage login portal are handled by SnapTrade and your broker, not by Bull Picks.
• Subscription and entitlement data: subscription status, trial state, product identifiers, and entitlement records. We receive this from Apple, Google, and RevenueCat (our subscription management provider). We do not receive or store your full payment card number.
• Referral program data: referral codes we assign to your account, referral links you share, codes you redeem, attribution timestamps, and bonus entitlement history when applicable.
• Device and technical data: app version, operating system, browser type (on web), IP address, and similar technical data that may appear in server or security logs when you use the Service.
• Push notification tokens (mobile): if you use the iOS or Android app and allow notifications, we store a device push token (an Expo push token linked to your account and platform) so we can deliver optional alerts such as trade hold-window reminders and brokerage order or connection updates. Tokens are used only to send Service-related notifications you enable via the OS permission prompt. We do not sell push tokens. Tokens are removed when you delete your account; signing out alone does not remove them (so you can still receive alerts if the app remains installed and notifications stay allowed).
• Communications: messages you send us through our Support form and our replies.

Research content (screener results, AI-generated analyses, shared pick lists, and performance rollups) is produced from market and public filing sources for all subscribers. That content is not personal information about you. It is not deleted when you delete your account.

3. How we use information

We use information to:

• Provide, operate, maintain, and secure the Service.
• Authenticate you and sync your preferences, trades, and entitlements across devices.
• If you enable brokerage connect: maintain your SnapTrade connection, sync account/order summaries you authorize, and transmit order instructions you submit in-app to your broker via SnapTrade.
• Process subscriptions, free trials, renewals, and referral bonuses.
• Send Service notifications you allow on mobile (for example, reminders when an open trade is near or past the AI-suggested hold window, and optional brokerage order or connection alerts), using push delivery providers described below.
• Send transactional messages (such as sign-up confirmation and password reset) through our email provider.
• Respond to support requests and enforce our Terms of Service.
• Monitor reliability, diagnose errors, and protect against fraud or abuse.
• Comply with legal obligations.

We do not sell your personal information. We do not use your data for third-party advertising or cross-context behavioral advertising.

4. How we share information

We share information only as described below:

• Service providers that process data on our behalf under contractual obligations, including Supabase (authentication and database), Vercel (web hosting), RevenueCat (subscriptions), SnapTrade (optional brokerage connection and order routing), Expo (mobile push notification relay), Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) for delivering those notifications to devices, Apple and Google (app distribution and in-app purchases), and email delivery providers used for authentication messages.
• Optional SnapTrade brokerage connect: if you connect a brokerage, we share the minimum account and order data needed with SnapTrade so you can link accounts and, where enabled, place orders from the Service. SnapTrade and your broker process the brokerage relationship. For portal, connection, or trade-execution issues with a linked brokerage, contact SnapTrade and/or your broker in addition to our Support page.
• Broker shortcuts (no connect): if you enable optional broker shortcuts instead of (or in addition to) SnapTrade connect, the Service may open a third-party app or website with a ticker symbol you choose. Shortcut mode does not give us access to your brokerage account; we do not receive brokerage credentials or account data from those third parties for shortcuts alone.
• Legal and safety: when required by law, legal process, or to protect rights, safety, and security of users, the public, or the Service.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

5. Retention

We retain account and user-owned data while your account is active. When you delete your account through the in-app flow (Account → Delete account), we delete or anonymize user-owned data such as preferences, My Trades, SnapTrade connection references we store, push notification tokens, referral attributions tied to your account, and entitlement rows, and we remove your authentication user. We also attempt to unregister your SnapTrade user where applicable. Limited data may remain in encrypted backups, security logs, or billing records of our providers for a period required by law or operational necessity.

6. Your choices and rights

• Access and correction: update My Trades and profile settings in the app. Contact us for other access or correction requests.
• Deletion: delete your account in the app as described above.
• Subscriptions: manage or cancel subscriptions in your Apple App Store or Google Play account settings. Deleting the app does not cancel a subscription.
• Push notifications: on iOS and Android you can allow or deny notifications in the system permission prompt and later change that in your device Settings. Signing out of the app does not by itself revoke notification permission or delete stored push tokens; account deletion does.
• Marketing: we do not send promotional email today. If we introduce marketing communications, we will provide an opt-out.

Depending on where you live, you may have additional rights (for example, under California, Colorado, Virginia, or similar state laws, or the UK/GDPR if applicable). To exercise rights, submit a request on our Support page. We may need to verify your identity before responding.

7. Security

We use HTTPS, industry-standard authentication, and database access controls including row-level security. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

9. International transfers

We are based in the United States. Information may be processed in the United States and in other countries where our service providers operate. By using the Service, you understand your information may be transferred to jurisdictions that may have different data protection laws than your own.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated effective date. Material changes may require renewed acceptance in the app before you continue using the Service.