Privacy Policy

Account data.When you sign in with Google, we receive your name, email address, profile picture, and Google account ID. We don’t receive or store your Google password.

Content you create. Portfolios, transactions, positions, watchlists, alerts, and related notes you enter in the Service.

Subscription and payment.Paid plans are activated manually. You transfer the amount yourself using the bank or wallet details we show you, then tell us the phone number you paid from so we can match your transfer and activate your plan. We store that phone number and the plan you requested. We never see or store card numbers, and no card details pass through the Service — your bank or wallet handles the transfer entirely.

Linked chat accounts. If you connect Discord or Telegram to receive alerts or premium channel access, we store the account identifier (and, for Discord, the email on that account) so we can deliver messages to you and grant the right access.

Usage and device data. Pages visited, features used, approximate timestamps, IP address, browser type, and device information. We use this to keep the Service running and to improve it.

Communications. Messages you send us (email, support, feedback) so we can respond and improve the Service.

• To provide, maintain, and operate the Service for you.
• To compute analytics the Service offers — positions, portfolio performance, allocations, signals.
• To send transactional and service messages (sign-in confirmations, subscription receipts, alerts you’ve configured, important updates).
• To prevent abuse, fraud, and security incidents.
• To improve the Service — diagnose bugs, understand which features are used, test changes.
• To measure how people find Dharke. When you arrive from a link we posted, we record the referring site’s domain name (for example, t.co for a link on X) and any campaign tag on the link, and attach them to the analytics events for that visit so we can tell which posts bring people who subscribe. We record the domain only, never the address of the page you came from.
• To comply with legal obligations.

We do not sell your personal data. We do not use your portfolio or transaction data to train public machine-learning models.

Signing you in.The Service stores your sign-in tokens (access and refresh tokens) in your browser’s local storage so you stay signed in between visits.

Your preferences and unsaved work.A small amount of local storage holds preferences such as your dark / light theme choice, and work in progress that hasn’t been saved yet, such as a draft journal entry or a chart layout.

Analytics. We use Google Analytics, which sets its own cookies in your browser (names beginning _ga) to tell repeat visits apart. Separately, when you start a subscription purchase we keep a short-lived entry in session storage holding a random id for that visit plus any campaign tag and the referring site’s domain. Session storage is cleared when you close the tab, and the id is random — it is not tied to your name or email.

What we don’t do.We don’t run advertising cookies, ad-retargeting pixels, or ad networks, and we don’t sell or share your data for advertising. We should be straight with you about the limit of that promise, though: Google Analytics is Google infrastructure, and what Google can do with analytics data across its own services is governed by Google’s terms rather than ours. If you would rather not be measured at all, any standard analytics-blocking browser extension or setting will stop it, and the Service works normally without it.

We share data only with service providers who help us operate Dharke:

• Google — for two separate things. First, sign-in (OAuth 2.0). Second, Google Analytics, which receives page views and product events such as viewing pricing, choosing a plan, or submitting a payment, along with the campaign tag and referring domain described above. Google’s handling of that data is governed by their own privacy policy, not ours.
• Mixpanel — product analytics on our servers. It receives events tied to a stable identifier for your account, so unlike the browser analytics above these are linked to you rather than to a random per-visit id.
• Discord and Telegram — if you link either account, we send your alerts and expiry reminders through them and grant premium channel access. Those messages, and the account identifier they are addressed to, are handled by those platforms under their own policies.
• Hosting and infrastructure providers — to run our servers, databases, and backups.
• Email delivery and support tools — to send transactional messages and respond to your inquiries.
• Market data providers— we may fetch NEPSE market data from third-party sources; we don’t share your personal data with them.

We may also disclose data if required by law, to protect our rights, or in connection with a corporate transaction (merger, acquisition, or asset sale), in which case we’ll give you notice.

If you share a portfolio with another Dharke user (for example, as a member or collaborator), they can see the portfolio’s contents as permitted by the role you give them. If you mark a portfolio as Public, its contents become visible to anyone with the link. You can change visibility or remove members at any time.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we’re required to keep records (for example, for tax, accounting, or legal compliance) or where we’ve retained anonymized or aggregated data that can no longer identify you.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Export a copy of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We’ll respond within a reasonable timeframe.

We use industry-standard measures — encryption in transit, access controls, and regular backups — to protect your data. No system is perfectly secure, however; we can’t guarantee absolute security. If we become aware of a security incident affecting your data, we’ll notify you as required by law.

Dharke is not intended for users under 18. We don’t knowingly collect personal data from children. If you believe a child has provided us data, contact us and we’ll delete it.

Dharke is operated from Nepal. If you use the Service from outside Nepal, you understand that your data may be processed in Nepal and in any country where our service providers operate. We take steps to ensure it remains protected.

We may update this policy from time to time. If we make material changes, we’ll notify you (for example, by email or an in-app notice) before they take effect. The “Last updated” date at the top always reflects the current version.

For privacy questions, requests, or complaints, email us at [email protected].

See also our Terms of Service.