Regime Card Privacy Policy
Last updated: October 17, 2026
Regime Card is operated by Rok Partners Inc. ("we", "us"), which runs regimecard.com and the Regime Card app for iPhone. This policy explains what we collect, how we use it, and your choices.
What we collect
- Email address, only if you choose to subscribe to unlock features or receive regime alerts. No account is required.
- Anonymous usage analytics. The site uses Cloudflare Web Analytics, which is cookieless and collects aggregate page view data only. It is not used for tracking or advertising.
We also count a few named actions on the site, such as a search, a signup or a link opened, with the page it happened on. For a signup we also note which kind of site your visit came from (StockTwits, X, Google, none, or other), never the address. On a share page we note which of our two emails its link came from, and how the reading was sent (the share sheet, a copied link, X or email). A count carries no identifier: no IP address, no cookie and nothing that says who you are. The counts are kept in Cloudflare's analytics on our own account and go to no third party.
Why we collect it
We use your email solely to send regime alerts and updates about Regime Card, and to give you access to subscriber features. Where laws like the GDPR apply, our legal basis is your consent, given when you submit your email.
Cookies
We use one functional cookie that we set (rc_unlock) to remember that you've unlocked subscriber features so you don't have to re-enter your email. We use no advertising or tracking cookies.
To count the free stock pages you open each day, your browser keeps today's list of tickers in its own local storage (rc_meter); it never leaves your device and resets at midnight US Eastern time.
To decide when to offer email alerts at the bottom of the screen, your browser keeps the stock, ETF and coin pages you open in its own storage: for the current visit (rc_sv, rc_sv_n, rc_sv_sheet) and for 7 days (rc_seen), and the time you last closed the offer (rc_sheet_off). For the visit, it also keeps which kind of site you came from as one word (rc_ref), never the address. It never leaves your device.
Cloudflare, our infrastructure provider, may also set its own operational and security cookies (for example, __cf_bm for bot management); these are not set by us and are not used for tracking or advertising.
Spam protection
We use Cloudflare Turnstile to protect our signup and other forms from bots and automated abuse. Turnstile may collect device and browser information to tell humans from bots, as described in Cloudflare's Turnstile Privacy Addendum. Cloudflare states that Turnstile does not use your data for advertising.
How it's stored and who has access
Your email is stored in a database hosted on Cloudflare. We do not sell or share your personal information for marketing. We send email through Resend, a delivery provider acting on our behalf; it handles the address only to deliver our emails.
The Regime Card app
The app needs no account and no email address, and shows the same public readings as this site. To work, it sends us a little technical information; none of it is used to track you, none of it is sold, and the app contains no advertising or third-party analytics code.
- An anonymous install ID. On first launch the app makes a random ID and keeps it in your iPhone's keychain, which can outlive deleting the app, so a reinstall may bring the same ID back. We never keep the ID itself, only a one-way fingerprint of it, so the ID cannot be read back from what we store. It identifies this copy of the app, not you: it is never linked to your name, and to an email address only while an email signup waits for its confirmation (below). When you tap "Delete this iPhone's data" in the app's Settings, we delete everything we hold for its ID: the device record and its token, its alert setting, whether it confirmed an email address, and any email signup still waiting for its confirmation. You can also ask at privacy@regimecard.com. An email subscription you confirmed is separate: every email has an unsubscribe link.
- A device token, if notifications are on. Apple gives the app a token so we can send a regime change alert (if you turn alerts on) and a silent refresh after each close so your widgets stay current. We keep the token with your alert setting and your app and iOS versions. The token and the setting are what send each alert and refresh; the versions tell us which versions of the app and of iOS we still need to support. We do not keep your language or your time zone. Turning notifications off, or deleting the app, stops them; we delete tokens Apple tells us are no longer in use.
- Which tickers are looked up. Which stock and coin pages are opened in the app, and which tickers we do not cover are looked up, are counted as daily totals per ticker. A total carries no install ID, device token, IP address or anything else that says who you are. A lookup of a ticker we do not cover is also counted in the daily totals of this site's ticker searches. Before this update, the app counted only those lookups, and only in those search totals.
- Anonymous usage counts, only if you allow them. For example: the app was opened, a widget of a given size is on your Home Screen, alerts were turned on or off, or an email signup was made. They are sent only while "Share anonymous usage counts" is on. The app asks on its last welcome screen, where the switch is on unless you turn it off, and the same switch is in Settings under "Usage counts". Nothing is sent before you make that choice or while the switch is off. If you installed the app before this choice was added, the switch is on until you turn it off. The app sends each count with a usage fingerprint it makes from the install ID on your iPhone, never the install ID itself, so what we store for counts cannot be joined to the device record above.
- Your email, only if you give it. An email signup in the app needs a confirmation: we hold the address with the request for at most 24 hours, and it joins the list only when you open the link we send. We use it for a welcome email, an email when the market regime changes, and occasional updates about Regime Card, such as new features. If you confirm, the app also notes that this install completed the signup, without keeping the address there.
How long we keep what the app sends:
- A device record (its token, alert setting and versions): deleted 30 days after Apple tells us its token is no longer in use, or 180 days after the app was last opened.
- The note that an install confirmed an email signup: deleted once it is 180 days old and the install has no device record.
- A pending email signup: at most 24 hours; expired requests are deleted every day.
- Usage counts: three months.
- Lookup totals: kept indefinitely.
- Push delivery records, which hold counts only: 400 days; records of a delivery that failed: 90 days.
We do not store your IP address. Cloudflare, which runs our service, processes it to deliver each request, and we use it for a moment to limit abusive request rates. In the App Store's privacy summary, the items linked to you are the email address you choose to give us and, if you buy Pro, your purchases and this iPhone's install ID, linked only to provide Pro; nothing the app collects is used to track you.
Regime Card Pro in the app
Regime Card Pro is an optional subscription bought through your Apple Account. Apple handles the payment: your card and billing details never reach us, and we never see your name or your Apple Account's email address.
- The subscription record. When you buy, restore or renew Pro, the app sends us the purchase as Apple signed it, and Apple sends us notices when it renews, lapses, is refunded or changes. We check Apple's signature and keep Apple's transaction numbers for the subscription, which plan it is, whether it is a real or a test purchase, its dates (when the current period ends, a free week, a grace period), whether it will renew and whether it was refunded. We use it only to tell the app whether Pro is on and to send Pro alerts. We do not keep the price you paid.
- Which iPhones it covers. We note which installs (the fingerprint of the anonymous install ID above) are linked to the subscription, at most 10, so Pro works on each of your iPhones, and, for 30 days, when each install was first linked, so one purchase cannot be spread to more than 5 new installs a month. "Delete this iPhone's data" also removes this iPhone's link and its fingerprint from that record; the subscription itself belongs to your Apple Account and stays with Apple.
- A purchase token. The app makes a random code for each install and attaches it to a purchase, as Apple allows, so a purchase can be matched to the install that made it. It is not your install ID and says nothing about you.
- Your API key, if you make one. We keep a one-way fingerprint of the key, its last four characters, when it was made and when it was last used. We never keep the key itself, so it cannot be read back from what we store; a lost key is replaced, never recovered.
- Apple's notices. We keep a short record of each notice Apple sends us about a subscription (its kind, its date and what we did with it), so a repeated notice is handled only once.
With Pro, the device record above also holds your alert choices: whether daily close alerts are on, and which regimes the regime change alert is for. We use them only to decide which alerts to send.
Your watchlist and the coins you pick stay on your iPhone. When an alert arrives, the app adds your watchlist and coin lines on the iPhone itself, from figures it already has; we send the same alert to everyone and never learn your watchlist or your coins.
How long we keep it: the subscription record, its links and its API key, 180 days after Pro ends. If a subscription is refunded, we keep its record until the period it paid for has ended, then 180 days more, so a refund can't be used to get Pro for free. A replaced or revoked API key, 180 days after it stopped working; Apple's notices, 180 days; a link from an install that no longer has a device record, 180 days after it was last seen; the record of new links, 30 days.
Data security
We use reasonable technical measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your choices and rights
You can unsubscribe at any time (every alert will include an unsubscribe link). You may request to access, correct, or delete your data by contacting us at privacy@regimecard.com. We keep your email until you unsubscribe or ask us to delete it. We will not discriminate against you for exercising these rights.
California residents
If you are a California resident, you have the right to know what personal information we collect, to access, correct, or delete it, and to opt out of any sale or sharing of it. We do not sell or share your personal information.
Children's privacy
Regime Card is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
Changes
We may update this policy; the "last updated" date reflects any change.