Legal

Privacy Policy

Last updated: 1 November 2026. Policy version 2026-11-01.

1. Who we are

The Insider Index is run by Jessey Charo, an individual based in Kenya ("we", "us", "our"). Jessey Charo is the data controller, which means the person who decides why and how your personal information is used. There is no company behind the Service yet.

For anything in this policy, including any request about your information, write to support@insiderindex.org.

This policy covers The Insider Index app for iPhone and iPad and the website insiderindex.org (together, the "Service").

2. What the Service is, and what is changing

From 1 November 2026, with version 28.0 of the app, The Insider Index is a free forecasting service. People read Yes or No questions about public future events, give the chance of Yes as a number from 1 to 99 percent, see the crowd forecast, and receive a score when a question resolves. There are no purchases and no advertising in the Service.

Before that, The Insider Index was a news product about United States congressional disclosures and institutional filings. From 1 November 2026, that product ends in the app. The website still shows its news pages until they are withdrawn. This policy covers both for as long as both exist. Section 3 says which information belongs to which.

3. Information we collect and why

3.1 Visitors to the website

Delivering pages. When you load a page, our hosting provider processes your IP address and the details of your request in order to deliver the page and keep the site secure. Basis: our legitimate interest in running a secure service.
Request counting. Your IP address is used to count requests over short periods so that one source cannot overload the Service. Basis: the same legitimate interest.
Page statistics. Our hosting provider counts page views without cookies. Basis: our legitimate interest in knowing which pages are used.
Support requests. If you use the support form, we receive your name, your email address, the subject and your message, and a description of your browser. We use them to answer you. Basis: our legitimate interest in answering people who contact us.
Booking a call. If you book a call through the website, we receive your name, your email address and the time you chose. We add the call to our Google Calendar and send you a confirmation email. Basis: this is necessary to arrange the call you asked for.
Email updates you asked for. If you joined the mailing list on the website, we hold your email address to send the updates you asked for. You can unsubscribe at any time. Basis: your consent.

3.2 App accounts

You can browse questions in the app without an account. If you create an account or sign in, we collect the following.

Account details. Your email address; your name, which you do not type in the app: it comes from Apple if you choose to share it when you sign in with Apple, or from your Google account when you sign in with Google; a username we assign to your account; how you sign in (Apple, Google, or email and password); for Apple or Google, the identifier that provider gives us for you; for email sign-in, your password, which we store only in protected (hashed) form. We use these to create and secure your account, to sign you in and to email you about your account: one welcome email when you create an account in the app, which explains how the app works; a code if you ask to reset your password, and a notice once it has been reset; and one email to confirm that your account has been deleted. Basis: this is necessary to provide the service you asked for.
Forecasts. Each forecast you make: the question, the chance you gave and the time. We use these to show you your own forecasts, to calculate the crowd forecast and to calculate your score. The crowd forecast is the median of the forecasts on a question. It is shown only once five people have forecast, and it never shows who forecast what. Basis: necessary to provide the service you asked for.
Private notes. A note of up to 280 characters that you may attach to a forecast. It is shown only to you. Basis: necessary to provide the service you asked for.
Scores. When a question resolves, we calculate a Brier score for your forecast from your forecast and the outcome. Only you can see your scores. Basis: necessary to provide the service you asked for.
Adult confirmation. Forecasting is for adults aged 18 or over. The app asks for your date of birth before you can forecast. We check that you are 18 or over and then discard the date. We do not store it. We store only the time you confirmed and the version of this policy in force at that time. On recent versions of iOS the app may also read the age range that Apple provides for your Apple Account, on your device, for the same check; we do not store it. Basis: our legitimate interest in keeping forecasting to adults, and our legal obligations where the law requires an age check.
Your keep decision (accounts created before 1 November 2026). That you chose to keep your account, when, whether you chose in the app or on the website, and the version of this policy in force. This is our record of your consent. See section 4.
Request records. Each request the app makes to our servers is recorded with the time, the address requested, a scrambled (hashed) form of your IP address and, when you are signed in, your account identifier. We use these records for security, to stop abuse and to find faults. Basis: our legitimate interest in running a secure service.
Searches.When you search in the app, it sends the words you typed to our servers to run the search. Our request records keep the address requested without the search words. Our hosting provider's logs record the full web address requested, which can include the search words, for a short time. From 1 November 2026 (version 28.0), searches are not sent to Sentry. Basis: necessary to provide the service you asked for.
Crash and performance reports.From 1 November 2026 (version 28.0), if the app crashes or meets an error, it sends a report to Sentry, our diagnostics provider: the device model, the operating system version, the app version and a description of what the app was doing, including the web addresses the app requested shortly before (without any search words) and the recent screens and taps. When our servers return an error, the app reports it even if the app does not crash. Each time you open the app, it also sends Sentry a session record. Reports and session records carry a random identifier that Sentry's kit creates for this installation of the app; it is not linked to your account. For about one in five app activities the app also sends timing measurements. We do not attach your account identifier or your email address to these reports or session records. Basis: our legitimate interest in fixing faults.

3.3 What we do not collect

We do not collect your precise location, your contacts, your photos or an advertising identifier. From 1 November 2026 (version 28.0), there is no advertising in the app, and we add no analytics or advertising kit to it. The app includes Google's sign-in kit, which is used only to sign in with Google. We do not track you across other companies' apps or websites.

3.4 Whether you have to give us this information

Giving it is your choice. Without an email address, or a sign-in through Apple or Google, we cannot create an account. Without the adult confirmation you cannot forecast. In both cases you can still browse questions.

4. Existing accounts: keep or delete

If you created an account before 1 November 2026, you created it for the news product. We will not use that account for forecasting unless you say so. The app asks you to choose:

Keep. You agree that your account continues under this policy for the forecasting service. We record your choice, the time, where you made it and the policy version 2026-11-01. Before your first forecast you are asked to confirm that you are 18 or over, as described in section 3.2.
Delete. Your account is deleted at once, as described in section 6.

There is no deadline. Until you choose, your account stays as it was: you can sign in and browse, you cannot forecast, and we hold your account details without using them for forecasting. You can delete the account at any time.

Information from the news product that forecasting does not need, such as saved lists and news notification settings, is deleted for every account when the news product ends.

If you keep your account and later change your mind, you can withdraw your consent by deleting the account.

5. How long we keep information

Accounts you created for forecasting, and accounts you chose to keep: for as long as the account exists. There is no fixed expiry. We delete the account when you delete it or ask us to.
Accounts awaiting a choice: until you choose, with no deadline.
Support messages and call bookings: at present we have no fixed period for removing them. You can ask us to delete yours at support@insiderindex.org.
Mailing list addresses: when you unsubscribe we stop sending updates, and we keep your address marked as unsubscribed so that we do not email it again.
Records held by our hosting provider: for the period that provider keeps them.
Crash and performance reports: for the period Sentry keeps them for our account.
Request records, administrative records and email records: see section 6.

6. Deleting your account

You can delete your account yourself, in the app: open Account, then Delete account. You do not need to write to us, although you may.

Deletion is immediate and cannot be undone. It removes your account details, your sign-in identifiers, your forecasts, your private notes, your adult confirmation and your keep decision. We also delete any mailing-list sign-up and any call booking made with your email address. On any support request you sent, we remove your name and email address, including where your address appears in the message. We remove your email address, and any error text that may contain it, from our record of the emails we sent you. Where another account still uses the same email address, we leave the records that belong to that account untouched. We send one email to confirm the deletion.

Two kinds of record are not removed at that moment:

request records, which hold your former account identifier beside the time and address of each request and a scrambled (hashed) form of your IP address; and
administrative records, which note actions taken by an administrator and may hold your former account identifier where an action concerned your account.

These are security records that cannot be edited once written. They are not removed when you delete your account, and at present we have no fixed date for removing them. You can ask us about them at support@insiderindex.org. We use them only to investigate security problems and abuse.

If you booked a call, the entry for it in our Google Calendar is not removed automatically. Write to support@insiderindex.org and we will remove it.

If you signed in with Apple, deleting your account deletes your data from our systems. You can also stop The Insider Index's access to your Apple ID at any time in your iPhone's Settings → [your name] → Sign-In & Security → Sign in with Apple. If you signed in with Google, deleting your account here does not remove The Insider Index from the list of apps connected to your Google account. You can remove it there, in that account's settings.

7. Who processes information for us

We share information only with the providers below, so that the Service can run.

Supabase. Database, hosted in the United States. Holds account details, forecasts, notes, support messages, bookings and the records described in sections 3 and 6.
Vercel. Hosting for the website and for the servers the app talks to. Processes requests and page statistics.
Sentry. Crash and performance reports from the app.
Resend. Sends our emails, and receives email sent to our addresses at insiderindex.org. Receives your email address and the content of the message.
Upstash. Request counting. Receives your IP address.
Apple. If you use Sign in with Apple, Apple confirms your sign-in to us.
Google.If you use Google Sign-In, Google confirms your sign-in to us. When you sign in with Google, Google receives your Google sign-in and learns that it is for The Insider Index; from what Google sends us, we keep your email address, your name and the identifier for your Google account. Google's own privacy policy applies to what Google receives. If you book a call, the booking is added to our Google Calendar. Email you send to support@insiderindex.org is forwarded to our Gmail inbox, where we read and answer it.

Apple and Google act under their own privacy policies when you use their sign-in.

We may also disclose information where the law requires it. If The Insider Index is later run by a company, that company would become the controller; we will update this policy and tell account holders before that happens.

We do not sell your personal information to third parties.

8. Transfers outside Kenya

The providers in section 7 store and process information outside Kenya. Our database is hosted in the United States.

You can ask us for more detail about these transfers at support@insiderindex.org.

9. Security

Information travels between the app and our servers over an encrypted connection.
Passwords are stored only in protected form. We never see or store your Apple or Google password.
Request records and administrative records cannot be edited once written.

No system is completely secure. If a breach affects your information, we will tell you and the regulator as the law requires.

10. Your rights

Wherever you live, you can ask us to tell you what we hold about you, to give you a copy, to correct it, or to delete it. Write to support@insiderindex.org. Deleting your account in the app does not need a request.

You may also have further rights under the data protection law of the country where you live, including the right to complain to your data protection regulator.

11. Under-18s

The Service is for adults. You must be 18 or over to create an account or to forecast. We do not knowingly hold an account for anyone under 18. If the age check shows that a person is under 18, they cannot forecast, and they are offered deletion of any account they hold. If you believe someone under 18 has an account, write to support@insiderindex.org and we will delete it.

12. Cookies

The website does not set advertising cookies, and page statistics are counted without cookies. Our Cookies Policy has the detail.

13. Changes to this policy

Each version of this policy has an identifier, shown at the top; this one is 2026-11-01. If we change the policy in a way that affects how your information is used, we will tell account holders in the app or by email before the change takes effect, and where the change needs your consent we will ask for it. Smaller changes are shown by a new date and identifier at the top of this page.

14. Contact

Jessey Charo, data controller, The Insider Index.

Email: support@insiderindex.org