Privacy policy
Last updated: November 7, 2026
Ready Widgets sells ready-made widgets for the Widgy app and runs a web configurator (readywidgets.jjmf.com/configurator) where buyers customize and download them. This page explains what we collect, why, who processes it and how to ask for a copy or deletion.
What we collect
- Account: your email address, whether it was verified, how you sign in (Google, email code or password, handled by WorkOS), your language and when you signed in and last used the configurator.
- Purchases: store (Gumroad or Hotmart), license key or transaction code, buyer email, product, price, currency, country, campaign source (such as utm_source), date and status (active or refunded), as reported by the store.
- Widget settings: the symbols, nicknames, theme, colors, title and language you choose, and a record of each download (widget, version, language, date).
- API keys you enter (brapi, Finnhub): stored encrypted (AES-256-GCM) and used only to check your symbols and to build your widget file, which contains them so the widget can fetch prices.
- Usage of the configurator: sign-ins, purchase activations (and failed attempts), symbols you try to add and whether they were found, live tests and when keys are saved or deleted. We use this to fix problems and improve the product.
- Technical logs: IP address, page requested and time, kept by the server for a short time (logs rotate automatically) to keep the service running and secure.
What we don't do
- The widget runs on your iPhone and fetches prices directly from the data providers with your keys: your prices and portfolio views never pass through our servers, and we can't see when or how you use the widget.
- No ads, no tracking cookies, no selling or renting of personal data.
- Cookies: the configurator uses a session cookie (to keep you signed in) and a language cookie. The site remembers your light/dark theme choice in your browser. Visit statistics, when enabled, use Cloudflare Web Analytics, which doesn't use cookies.
Who processes data for us
WorkOS (sign-in), Google (if you sign in with Google), Cloudflare (network, security and visit statistics), Gumroad and Hotmart (payments, under their own privacy policies) and our cloud server provider. Data providers (AwesomeAPI, Binance, brapi, Finnhub) receive the requests your widget makes from your iPhone, under their own terms.
How long we keep it
Account, purchases, settings and usage records are kept while your account exists, so you can come back and download your widgets again. API keys stay until you delete them in the configurator. Purchase records may be kept longer when tax or accounting rules require it.
Your rights
You can ask for a copy of your data, its correction or deletion of your account by writing to the contact address below. You can delete your API keys yourself at any time in the configurator. These rights follow the Brazilian LGPD and, where it applies, the European GDPR.
Changes
If this policy changes, the new version is published on this page with a new date.