Privacy Policy
Last updated: October 2, 2026
This Privacy Policy for BM Martin Services, LLC, doing business as Ardevio ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), specifically our iOS mobile application, Ardevio.
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].
Summary of Key Points
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? Yes. We process account login credentials and financial information with your consent or as otherwise permitted by applicable law.
Do we receive any information from third parties? Yes. We receive financial account data from Plaid Technologies, Inc. on your behalf when you connect your financial accounts.
How do we process your information? We process your information to provide and improve our Services, for security and fraud prevention, and to communicate with you.
How do we keep your information safe? We implement appropriate technical and organizational security measures to protect your personal information.
What are your rights? Depending on where you are located, you may have certain rights regarding your personal information. You may delete your account at any time from within the app, which deletes the data associated with it from our active systems (see Section 5).
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you register for the Services, or otherwise when you contact us. The personal information we collect may include:
Names — collected when you sign in with Apple (given and family name)
Email addresses — collected at account registration
Passwords — collected only for email/password sign-in (stored as a one-way hash, never in plain text)
Authentication data — Apple identity tokens used to verify your identity, and the Sign in with Apple authorization we hold so we can revoke it when you delete your account
Subscription information — Apple transaction identifiers and your subscription status and expiry date (Apple processes your payment; we never receive your payment card details)
Information you enter in the app — manually added assets and their values, custom account names, cost basis adjustments, target allocations, concentration limits, and your benchmark choice
Device information — your device's push notification token, if you enable notifications
Technical and diagnostic information — crash reports and diagnostics (such as device model, operating system version, and app version) collected by our crash-reporting provider, and IP addresses, which are processed as part of ordinary internet connections by our hosting and crash-reporting providers
Sensitive information
We process the following categories of sensitive information:
Account login credentials — your email and password or Apple Sign-In token
Financial information — investment holdings, account balances, investment transactions, cost basis and tax lot information where available, and brokerage account data retrieved via Plaid Technologies, Inc. on your behalf, along with values we calculate from it (such as daily portfolio value history and periodic performance recaps)
We do not collect biometric data, health data, government identifiers, or any other sensitive categories not listed above. If you turn on Face ID or Touch ID app lock, it is handled entirely by iOS on your device; we never receive your biometric data.
Information collected from third parties
When you connect a financial account through our Services, we receive data from Plaid Technologies, Inc., including account balances, holdings, investment transactions, security names, quantities, cost basis where available, and associated financial institution information. This data is retrieved on your behalf and stored securely in your account.
2. How Do We Process Your Information?
We process your personal information for the following purposes:
- To deliver and facilitate delivery of our Services to you
- To create and manage your user account
- To protect our Services and prevent fraud
- To respond to user inquiries and offer support
- To send you notifications and messages, such as push notifications about portfolio alerts, performance recaps, accounts that need reconnecting, and trial or subscription reminders, and account-related emails
- To evaluate and improve our Services, products, and user experience
- To comply with our legal obligations
3. When and With Whom Do We Share Your Personal Information?
We only share your information in the following limited circumstances:
Service Providers
We disclose personal information to the following third-party service providers who assist us in operating our Services:
| Third Party | Purpose | Privacy Policy |
|---|---|---|
| Plaid Technologies, Inc. | Financial account aggregation and data retrieval | plaid.com/legal |
| Apple Inc. | Sign in with Apple, in-app purchase processing (Pro subscription), and push notification delivery | apple.com/legal/privacy |
| Railway Corp. | Cloud hosting and infrastructure for our servers and database | railway.com/legal/privacy |
| Functional Software, Inc. (Sentry) | Crash and error reporting from the app and our servers | sentry.io/privacy |
| Resend, Inc. | Sending account-related and operational emails | resend.com/legal/privacy-policy |
We also use third-party market-data providers to retrieve public security prices and fund information. We send them only public security identifiers (such as ticker symbols), not information that identifies you.
We do not sell, trade, or otherwise transfer your personal information to any other outside parties. We do not share your information with advertisers, affiliates, or business partners.
4. Do We Use Cookies and Other Tracking Technologies?
No. Ardevio is a native iOS application and does not use cookies, web beacons, pixels, or any other tracking technologies.
5. How Long Do We Keep Your Information?
We retain your personal information for as long as you maintain an account with us.
When you delete your account in the app, we delete the information associated with your account from our active systems immediately and permanently, including your linked-account connections and the financial data we retrieved through them. We also ask Plaid to remove your linked connections and, where we hold the authorization, revoke our Sign in with Apple authorization. We cannot restore an account once it is deleted.
Some information may remain for a period after deletion outside our active systems:
Our service providers (including Plaid, Apple, Railway, Sentry, and Resend) keep their own logs, backups, and records under their own retention policies, which we do not control and which may change over time. Please review their privacy policies, linked above, for details.
Backups and logs maintained by our hosting provider, if any, may continue to contain copies of your information until they expire in the ordinary course.
We may keep limited records where needed to comply with legal obligations, resolve disputes, enforce our terms, or protect the security of the Services. For example, we keep a record of administrative actions on accounts, from which we remove your email address when you delete your account.
6. How Do We Keep Your Information Safe?
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of financial access tokens at rest (AES-256-GCM)
- TLS/HTTPS encryption for all data in transit
- JWT-based authentication on all API endpoints
- User data strictly scoped by account — you can only access your own data
However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security.
7. Do We Collect Information from Minors?
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data.
8. What Are Your Privacy Rights?
You may review, change, or terminate your account at any time by:
- Logging into your account settings in the Ardevio app and updating your information or deleting your account
- Contacting us at [email protected]
When you request account deletion, we will deactivate or delete your account and permanently remove all associated data from our active systems, as described in Section 5.
9. Controls for Do-Not-Track Features
Ardevio does not track users across third-party websites or online services. We do not respond to Do-Not-Track signals because we do not engage in the type of tracking such signals are designed to prevent.
10. Do United States Residents Have Specific Privacy Rights?
If you are a resident of California or another US state with applicable privacy laws, you may have additional rights regarding your personal information.
Categories of Personal Information We Collect
| Category | Collected |
|---|---|
| Identifiers (name, email address) | Yes |
| Financial information (account data via Plaid) | Yes |
| Commercial information (subscription status and Apple transaction identifiers) | Yes |
| Device identifiers (push notification token) | Yes |
| Internet or network activity (IP address and crash/diagnostic data, processed by our hosting and crash-reporting providers) | Limited |
| Geolocation data | No |
| Biometric data | No |
| Sensitive personal information (login credentials, financial data) | Yes |
Your Rights
Depending on the state where you live, you may have the right to:
- Know what personal information we have collected about you
- Request deletion of your personal information
- Opt out of the sale or sharing of your personal information (we do not sell or share your data)
- Non-discrimination for exercising your privacy rights
To exercise these rights, contact us at [email protected] or delete your account directly from within the app.
California "Shine the Light" Law
California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. We do not disclose personal information to third parties for direct marketing purposes.
11. Push Notifications
If you enable push notifications, we may send them to your device to tell you about portfolio and concentration alerts, new performance recaps, linked accounts that need to be reconnected, and trial or subscription reminders. You can opt out of push notifications at any time through your device's notification settings.
12. Do We Make Updates to This Notice?
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this notice. We encourage you to review this privacy notice frequently to stay informed about how we are protecting your information.
13. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may contact us by email at:
BM Martin Services, LLC, DBA Ardevio
[email protected]
14. How Can You Review, Update, or Delete the Data We Collect From You?
You have the right to request access to the personal information we collect from you, change that information, or delete it. To request a review, update, or deletion of your personal information, you may:
- Log in to your account settings in the Ardevio app and use the account management tools provided
- Contact us at [email protected]