Cliffvest — Privacy Policy

Last updated: 9 September 2026

Cliffvest is a vesting calendar and equity tracker, available in your browser at cliffvest.com/app and as an Android app. It is built so that the information you put into it — your grants, share counts, prices and tax settings — stays on your own device. We do not have a server that stores it, and we cannot see it.

What Cliffvest stores, and where

Everything you enter — company names, tickers, labels, share counts, grant dates, vesting schedules, share prices and your tax settings — is written to your device's own app storage. It is not uploaded, backed up to us, or synced between devices.

Because that data lives only on your device, uninstalling Cliffvest or clearing its storage deletes it permanently. We hold no copy and cannot restore it for you.

In the browser, "your device" means that browser's own storage on that computer or phone. Nothing is sent to cliffvest.com when you add or change a grant: the page does the work and stores the result locally. That also means the data is specific to one browser — it does not follow you to another browser or device, a private window starts empty, and clearing the site's data (or, in some browsers, all browsing data) deletes it. Export your grants from Settings if you want a copy you control. If you add Cliffvest to your home screen, the browser also keeps a copy of the app's own files so it opens without a connection; that cache holds the app, never your data.

Share price lookups

If you enter a ticker symbol and tap to look up a price, Cliffvest makes a network request to fetch that price. It sends the ticker symbol and nothing else — no identifier, no account, nothing about your grant, your share count, or how many grants you hold.

Depending on the build, that request goes either directly to a price provider (Stooq) or through a proxy we operate on Cloudflare, which asks a price provider on your behalf (Yahoo Finance, with Stooq as a fallback). When it goes through our proxy, the proxy stores nothing and keeps no log of which ticker was requested or by whom; it forwards none of your device's headers to the price provider, which sees only our proxy. The browser version always uses the proxy. Which of the two an Android build uses is stated inside the app, under Settings → Privacy.

This request only happens when you ask for a price. Entering prices by hand works everywhere in the app, and Cliffvest makes no price request at all if you never use the lookup.

Purchases

If Cliffvest offers a paid upgrade and you choose to buy it, the payment is handled by Google Play. We use RevenueCat to check whether a purchase is active. RevenueCat receives an anonymous identifier generated on your device, along with purchase and basic device information needed to validate the receipt.

RevenueCat never receives your equity data. We do not attach your grants, share counts, values, employer, or tax settings to that identifier, and there is no code in Cliffvest that could send them.

If you never make a purchase, or if the build you are using has no paid upgrade, no purchase-related request is made.

Notifications

In the Android app, vest-day reminders are scheduled locally by your device. They are not push notifications: nothing is sent to or from a server to deliver them, and no one outside your phone knows when your vest days are. You can turn them off in Settings, or block them in Android's own settings. The browser version has no notifications at all.

Both versions can instead build a calendar file (.ics) of your upcoming vest dates. The file is created on your device and handed to you to open in whatever calendar you use; Cliffvest does not send it anywhere and never sees the calendar it ends up in. What that calendar does with it is governed by its own privacy policy.

Sharing a calendar

When you share your vesting calendar, Cliffvest renders an image on your device and hands it to your device's share sheet — or, in a browser without one, saves it as a download. The same is true of the CSV exports. You choose where they go. Cliffvest does not upload them anywhere, and we never receive a copy.

What we do not do

• No accounts, sign-in, or user profiles.
• No analytics, telemetry, crash reporting, or usage tracking.
• No advertising, and no advertising identifiers.
• No selling or sharing of personal information — there is nothing to sell.
• No connections to your employer, broker, or equity administrator.

The website

cliffvest.com sets no cookies, runs no analytics, and loads nothing from third parties. Its pages are static files; we do not log who reads them.

The site has one form: "Tell me when it lands". If you submit it, we store the email address you entered, which page you entered it on, and the time, in a database we operate on Cloudflare. We store nothing else with it — not your IP address and not your browser details. The address is used to send you one email when Cliffvest is available on Google Play, and for nothing else. It is never sold, shared, or added to any other list. To have it deleted, write to the contact address below and we will remove it.

Children

Cliffvest is a tool for tracking employment equity and is not directed at children under 13. We do not knowingly collect information from children.

Your choices

You can delete any grant inside the app at any time, including on a device where a paid feature has lapsed. To remove everything, clear Cliffvest's storage in Android settings or uninstall the app; in a browser, clear the site's data for cliffvest.com. Because we hold no copy of your data, there is nothing for you to request from us and nothing for us to delete on your behalf.

Changes

If this policy changes, the date at the top of this page changes with it, and the updated policy is published here before the change reaches the app.

Contact

Questions about this policy: privacy@cliffvest.com