Back to home

Privacy Policy

Evibe is built around a simple principle: we collect as little as possible. This page explains exactly what we do — and don’t — store about you.

Last updated · 2026-04-25

Who we are

The Evibe app and this website are operated by Wonderlink SL, a company incorporated in Spain. Our contact details are listed at the bottom of this page and on the Contact page.

What we collect

Your email address — only to let you sign in. We delegate authentication entirely to Firebase Authentication (Google Cloud), which means your email is stored on Firebase’s infrastructure, not on Evibe servers. We never see your password.

Beyond your email and the portfolio data you track, we do not collect names, addresses, phone numbers, contact lists, location, device identifiers for advertising, or any analytics about how you use the app. Billing is handled entirely by Apple, so we never see your card or payment details.

Your portfolio data — holdings, transactions, balances. You can enter this yourself, import a statement, or connect a bank or brokerage through our connectivity provider, SnapTrade (see "Financial institutions" below) — in which case we pull only your investment data (positions, transactions and balances), never your name, address or other identity details held at the institution. Either way it is stored anonymized in our cloud database hosted by OVH in Canada, and is not linked back to you in any human-readable way.

How we use it

Your email is used only to authenticate you and to send transactional messages strictly necessary to the service (password reset, account-related notices). We do not send marketing emails without an explicit opt-in.

Subprocessors

We rely on Firebase (Google Ireland Ltd.) for authentication, OVH Hosting Inc. (Canada) for portfolio-data hosting, and Passiv Inc. d/b/a SnapTrade (Canada) to connect your bank or brokerage when you choose to link an account (see "Financial institutions" below). Each is bound by its own data-processing agreement. We never sell or share your data with advertisers or data brokers.

Financial institutions

Evibe uses SnapTrade, operated by Passiv Inc. ("SnapTrade"), to connect to your bank or brokerage and retrieve your investment data. The connection is read-only: you sign in on your institution’s own page, Evibe never receives your credentials, and neither Evibe nor SnapTrade can place orders or move money. By linking an account you agree to SnapTrade’s End User Terms and Conditions (snaptrade.com/terms-and-conditions) and Privacy Policy (snaptrade.com/privacy-policy), which govern SnapTrade’s processing of the data needed to maintain the connection.

You can unlink an account at any time from inside the app; the connection is revoked and no further data is retrieved.

International data transfers

Your portfolio data is hosted by OVH in Canada. Because we are an EU-based company (Wonderlink SL, Spain), this is an international data transfer under the GDPR (EU 2016/679, Chapter V).

The transfer relies on the European Commission’s adequacy decision for Canada (Commission Decision 2002/2/EC), which recognizes Canadian organisations subject to PIPEDA as providing adequate protection. The data hosted in Canada is anonymized — no human-readable identity is stored next to portfolio records — and encrypted in transit (TLS 1.3) and at rest.

If you choose to connect a bank or brokerage, the connection data is processed by Passiv Inc. (SnapTrade), a Canadian company, under the same adequacy decision for Canada. Where SnapTrade relies on infrastructure providers in the United States, that onward transfer is covered by the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), as described in its own privacy policy. The connection is optional and limited to your investment data.

If you would like more details about the transfer mechanism, write to us at the contact email below.

This website

This landing page does not run any analytics, tracking, or marketing pixels. It uses only strictly necessary cookies (e.g. to remember that you dismissed the cookie banner). No consent is required for those under EU rules.

Your rights

Under the GDPR (EU 2016/679) you have the right to access, rectify, delete or export your personal data, and to object to or restrict its processing. To exercise any of these rights, write to us at the contact email below — we’ll respond within 30 days.

You can delete your account and all associated data directly from inside the Evibe app, at any time.

Data retention

We keep your data only while your account is active — it is what powers your portfolios, so there is no fixed expiry as long as you use Evibe.

You can delete your account and all associated data at any time from inside the app; the deletion is effective immediately on our live systems.

If an account stays inactive for 24 months, we email you and then delete its data if you do not return.

After any deletion, residual copies in our encrypted off-site backups are purged within 35 days as those backups roll over.

Children

Evibe is not directed to children under 13 (or 16 in some EU jurisdictions). We do not knowingly collect personal data from minors.

Changes

We may update this policy from time to time. The "Last updated" date below tells you when. Significant changes will be announced in-app.