Plain and honest. This is everything the app does with your data.
A family group lets members see each other's full portfolios. Everyone consents by joining: someone creates a group and invites another member by email, and that person has to accept before anything changes. Once active, visibility between members is mutual and complete. Any member can leave a group any time from Manage, which instantly removes their data from every other member's view.
Your email, the stocks and quantities you add, and, only if you join one, your family group. Nothing else.
The app never stores anything that can access your money or accounts.
A portfolio is just a named folder. Its label is visible; what's inside it is not. These limits are structural, not just hidden on the screen: holdings and values are never retrieved for account oversight in the first place.
For a family group, only its existence and member count are visible outside the group, never who's in it or what they hold.
Passwords are scrambled before they're stored, and can never be recovered in plain form. The connection is encrypted. Sessions end after 30 days, or instantly when a password changes.
Change your password anytime in Manage. Leave a family group anytime in Manage, which instantly removes your stocks from everyone else's view. You can permanently delete your account and all its data anytime from Manage.