Legal

Privacy Policy

Last updated: July 14, 2026

Unkra Inc. ("Crosscut," "we," "us," or "our") operates the Crosscut iOS application and the crosscutfinance.com website (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. We are a corporation incorporated in the Province of Ontario, Canada, and we handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA").

By using the Service, you agree to the collection and use of information as described in this Policy. If you have questions, contact us at privacy@crosscutfinance.com.

1. Information We Collect

We collect the following categories of information:

Account information. When you sign in, we collect your email address (used for one-time-passcode sign-in, account recovery, and optional account notifications) through our authentication provider. You can change that email address in Settings after re-authenticating and verifying the new address. If you register a passkey, its private key never leaves your device's secure hardware — we only ever hold the corresponding public key, and you can add or revoke passkeys in Settings at any time.

Financial account information (only if you choose to link an account). If you connect a bank or brokerage account through Plaid, we receive and store the institution name, the linked account's name/type/last-four digits, and a snapshot of your investment holdings (security name, ticker, quantity, and cost basis). We do not receive or store your online-banking username or password — those are handled directly by Plaid or your institution. We do not store live market prices; those are fetched from our market-data provider at the time you view them.

Manually-entered information. If you track a portfolio by hand instead of, or in addition to, linking an account, we store whatever holdings information you choose to enter.

Portfolio history. If you have linked or manually entered holdings, we compute and retain a daily summary snapshot of your portfolio so the app can show you how it has changed over time: its total value, estimated annual dividend income (overall and per currency), and your ten largest holdings that day with their values. We do not retain a daily copy of your full position-by-position portfolio — only these summaries.

Watchlist information. The stock/ETF symbols you add to your watchlists, and your display preferences for them.

Technical information. We log standard request metadata (such as your IP address) transiently, for abuse prevention and rate-limiting. We do not use this information for advertising or profiling, and Crosscut does not use any third-party analytics or advertising SDKs — we do not track your usage of the app for marketing purposes.

We do not collect: your government ID or Social Security/Insurance Number, precise device location, contacts, photos, camera or microphone data, or payment card numbers — subscription payment is handled entirely by Apple, and we never see your card details.

2. How We Use Your Information

We use the information described above to:

create and maintain your account;
provide the Service's core functionality — watchlists, market data, and, if you link or manually enter accounts, your consolidated holdings, look-through fund analysis, portfolio fundamentals, and daily portfolio-history summaries;
authenticate you and keep your account secure;
communicate with you about your account (for example, a sign-in code, a notice — sent by default, since it's about the health of your account rather than discretionary content — that a linked account needs to be reconnected, or, if you opt in, an alert when a stock or ETF you hold directly changes its dividend or distribution, or — if you opt in separately — the full text of a press release from a company in a watchlist you've selected, or AI-generated insights when a company in a watchlist you've selected releases a new earnings-call transcript). Every one of these emails, including the on-by-default reconnect notice, can be turned off in Settings or via the unsubscribe link in the email itself — we do not send unsolicited marketing emails; if that changes, we will give you a clear way to opt out;
if you opt in, generate a personal calendar-subscription link showing estimated upcoming dividend payouts derived from the stocks and ETFs you hold directly, which you can add to your device's Calendar app. This link is a bearer credential, not a sign-in: anyone who has it can view the estimated payout information it contains without otherwise accessing your account, so don't share it, and you can invalidate a copied or leaked link at any time from Settings by regenerating it, which stops the old link from working;
maintain and improve the reliability, security, and performance of the Service; and
comply with our legal obligations.

We do not sell your personal information, and we do not use it to serve you advertising.

We share personal information only as necessary to operate the Service, with the following service providers ("subprocessors"):

Plaid Inc. — brokers the connection to your financial institution and supplies your linked account and holdings data.
Cloudflare, Inc. — hosts our backend infrastructure and database; all data described in Section 1 is stored on Cloudflare's platform. If you opt in to earnings-call insights, we also use Cloudflare's AI platform (Workers AI) to generate those insights from public earnings-call transcripts. That analysis is performed on public, company-published transcript text and does not use your personal information. Cloudflare's Email Service also delivers the account-notification emails we send you, such as a dividend/distribution change alert for a holding you've opted in to be notified about, a press-release alert for a symbol in a watchlist you've selected, earnings-call insights for a symbol in a watchlist you've selected, or a notice that a linked account needs to be reconnected. The reconnect notice is an account-health email, on by default (unlike the other alerts above, which are opt-in); you can turn it off, like any of these alerts, in Settings or via the unsubscribe link in the email.
Apple Inc. — processes payment for Crosscut Pro subscriptions through the App Store; we never receive your payment card details.

We do not otherwise sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required by law, to protect the rights, property, or safety of Crosscut or others, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you.

4. International Data Transfers

We are based in Ontario, Canada, but some of our service providers — including Plaid and Cloudflare — process and store data in the United States. By using the Service, you acknowledge that your information may be transferred to, and processed in, the United States or other countries, where privacy laws may differ from those in your jurisdiction. We take steps to ensure our service providers protect your information consistent with this Policy.

5. Data Security

We use industry-standard measures to protect your information, including encrypting data in transit. Financial-institution access tokens obtained through Plaid are stored only on our servers and are never transmitted to or stored on your device. Passkey private keys are generated and stored in your device's secure hardware and are never accessible to us. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

6. Data Retention

We retain your account and financial data for as long as your account is active. If you unlink a financial account, we delete the associated holdings data (and, where possible, revoke our access at Plaid) immediately; your daily portfolio-history summaries are retained, since they record what your overall portfolio was worth in the past, but from that point on they reflect only your remaining accounts. If you delete your account, we permanently delete your account record, linked-account data, holdings, portfolio-history summaries, and watchlists from our systems right away, and also request deletion of your sign-in credential (your email address and, if you created one, your passkey) from our authentication provider — see Section 7. Some information may persist briefly in backups or logs before being purged in the normal course of our data-retention practices. In the rare event the sign-in credential can't be deleted automatically (for example, an outage at our authentication provider), it may briefly remain even though your Crosscut account data has already been erased; contact us at the address below and we'll remove it manually.

7. Your Rights and Choices

Access and deletion. You can review your linked accounts, holdings, and watchlists at any time within the app. You may delete your account and all associated data at any time from Settings → Delete Account, which is immediate and permanent, or by emailing privacy@crosscutfinance.com.

Correction. If any manually-entered information is inaccurate, you can correct or delete it directly in the app.

Calendar subscription link. You can turn the dividend calendar on or off, or regenerate its subscription link, at any time from Settings — regenerating immediately invalidates the previous link.

PIPEDA rights. If you are in Canada, you have the right to access the personal information we hold about you and to challenge its accuracy, subject to limited exceptions permitted by law. Contact privacy@crosscutfinance.com to make a request.

8. California Residents

If you are a California resident, the California Consumer Privacy Act, as amended (the "CCPA"), may give you additional rights over your personal information, including the right to know what personal information we have collected about you, the right to request deletion of that information, and the right to be free from discrimination for exercising these rights. We do not sell or share (as defined by the CCPA) your personal information. To exercise your CCPA rights, contact us at privacy@crosscutfinance.com; we will verify your request using your account email before acting on it.

9. Children's Privacy

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it.

10. Cookies and Tracking

The crosscutfinance.com marketing website does not use cookies and does not run any analytics or advertising scripts. The Crosscut app does not use any third-party analytics, advertising, or crash-reporting SDKs.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (such as an in-app notice or an update to the "Last updated" date above). Your continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.

12. Contact Us

Questions or requests regarding this Privacy Policy or your personal information? Contact us at:

privacy@crosscutfinance.com

Unkra Inc.
1809-400 Walmer Rd
Toronto, ON M5P 2X7
Canada