Privacy policy
This covers both the public site you are reading and the tracker itself. Short version: the site collects nothing unless you allow analytics, and everything you put into the tracker stays scoped to your own account.
Last updated: October 2026
1. Who processes your data
MM Software Solutions is the data controller, registered at 2500 Lier, Belgium, enterprise number BE 1001.062.863. Questions about your data go to mohamed@mmsoftwaresolutions.be.
2. What this website collects
Nothing by default. There is no contact form, no login and no tracking pixel on the public pages. If you accept analytics in the cookie banner, Google Analytics records which pages you view, your approximate location at country level and the kind of device you use, with IP anonymisation on. Decline and no analytics script is loaded at all.
3. What the tracker collects
An email address and a password to create your account. The password is hashed by our authentication provider and is never visible to us. Everything else is what you type in: your platforms, your income, growth and listed assets, principals, target yields, ISINs, currencies, dates, expected and actual payouts, repayments, asset events, trades and distributions. We do not connect to banks or investment platforms, so nothing arrives on its own.
4. Why we may process it
Account data and the records you enter are processed to provide the service you asked for, so the legal basis is performance of a contract. Analytics runs on your consent, which you can withdraw at any time. Server and security logs rest on our legitimate interest in keeping the service running and abuse-free.
6. Who else is involved
Supabase provides the database and authentication, and processes your data on our instructions. Our hosting provider keeps short-lived technical logs. Google Analytics runs only with your consent. Exchange rates come from the European Central Bank through the Frankfurter API, requested by our own server without any of your data attached. Prices of listed assets come from justETF and, as a fallback, from iShares (BlackRock), also requested by our own server: only the ISIN and the currency are sent, never anything that identifies you. We do not sell data, we do not run advertising, and there are no shared portfolios: one account sees one account's rows, enforced at the database level.
7. How long we keep it
Your records stay for as long as your account exists. Deleting the account removes every row attached to it: platforms, assets, payouts, repayments, events, trades and distributions all cascade. Self-service deletion is not built yet, so email us and we will action it. Technical logs rotate automatically.
8. Your rights
You can ask for access, correction, deletion, restriction or a portable copy of your data, object to processing, and withdraw consent. Write to mohamed@mmsoftwaresolutions.be. If you are not happy with how we handle it, you can complain to the Belgian Data Protection Authority at gegevensbeschermingsautoriteit.be.
9. Changes
This policy may be updated. The current version is always the one on this page, with the date above.