Legal

Privacy Policy

Effective July 29, 2026 · Last updated July 29, 2026

This policy explains what NorgardX collects, why, who receives it, and the choices you have. NorgardX is a research and market-intelligence app for private, pre-IPO companies. It is free, shows no advertising, sells nothing, and processes no payments.

You can use most of NorgardX without an account or sign-in. Where signing in or submitting information changes what we collect, we say so below.

01Who we are

NorgardX is operated by LoveGPT Inc (“LoveGPT”, “NorgardX”, “we”, “us”), a company organized in Nevada, USA. For the purposes of applicable data-protection law, we are the controller of the personal data described here.

For any privacy question, or to exercise a right described in section 13, contact us at support@norgardx.com. For general help, visit norgardx.com/support.

02Scope

This policy covers the NorgardX apps for iOS and Android and the NorgardX website. It does not cover the practices of the third parties described in section 7, whose own policies govern how they handle data once your device connects to them.

03Using NorgardX with and without an account

Browsing companies, searching, keeping a watchlist, asking questions through the Ask feature, and receiving push notifications all work without an account. When you are signed out, your watchlist and layout preferences are stored only on your device.

Signing in is optional and uses Sign in with Apple or Google Sign-In only — there is no password to create and no email/password registration of ours. We receive an identity token from Apple or Google, which we exchange for a session. Signing in lets us sync your watchlist across devices and pre-fill the interest form. When you sign in, any watchlist you built while signed out is merged once into your account.

04What we collect

Account identity (only if you sign in)

  • User ID — an internal identifier we generate to link your watchlist and profile.
  • Email — from your Apple or Google token. If you use Sign in with Apple, this may be a private relay address you control.
  • Name — from your Apple or Google token, where the provider returns it.
  • Session token — held in your device’s app-private storage and cleared when you sign out.

Investor profile and expressions of interest

If you submit the in-app interest form for a company, we collect what you enter. We also save the personal fields to a reusable profile so you can skip ahead next time. You can submit this form whether or not you are signed in.

FieldType
First and last nameContact / identity
EmailContact (may differ from your sign-in email)
PhoneContact — used for follow-up, including calls
Country, state, citySelf-declared text — not device location
Accreditation statusFinancial — self-certified, not verified by us
Investor typeFinancial
Prior investing / existing shareholderFinancial (optional)
Intended amount, timeline, structureFinancial
LinkedIn, X handleContact (optional)
NotesFree text you choose to provide
Company and displayed priceContext, recorded automatically at submission

Submitting this form does not create any entitlement, allocation, or obligation, and no transaction takes place in the app. See our Terms of Service for what an expression of interest is and is not.

Product usage

  • Watchlist — the companies you pin. On your device when signed out; on our servers when signed in.
  • Home layout preference — stored on your device.
  • Ask prompts — see section 8. We do not store your Ask conversations on our servers.
  • Cached company data — public company information cached on your device for offline use. Contains no personal data.

Device and notifications

  • App-scoped device ID — a random identifier the app generates on first launch. It is not your device’s advertising ID or hardware ID, and it resets if you reinstall.
  • Push token — issued by the push service so we can deliver notifications. A token is registered when you allow notifications, whether or not you have an account.
  • Platform and app version — iOS or Android and the version you are running.

05What we do not collect

  • No tracking and no advertising. We use no analytics or attribution SDKs (no Firebase Analytics, Amplitude, Mixpanel, Segment or similar), no advertising identifiers, and no ad networks. NorgardX does not trigger Apple’s App Tracking Transparency prompt and does not track you across other companies’ apps or sites.
  • No device location. The headquarters map shows a company’s location from a fixed table; we never read your position.
  • No contacts, photos, microphone, camera, or health data.
  • No payment data. No card or bank details and no in-app purchases.
  • No sale or sharing. We do not sell your personal information and do not share it for cross-context behavioral advertising, as those terms are used under California law.

06How we use your information

We use the information above to: run the app and sync your watchlist; respond to and route the interest form to our capital-markets team and follow up with you about it; deliver push notifications you have allowed; keep the service secure and working; and meet legal and record-keeping obligations.

For users in the EU and UK, our legal bases are:

PurposeLegal basis
Your account and watchlist syncPerformance of a contract with you (our Terms)
Handling your interest submission and following upSteps taken at your request prior to any contract, and our legitimate interest in responding
Contacting you by phone or email about your submissionYour consent, given when you submit the form
Operating, securing and improving the appOur legitimate interests
Push notificationsYour consent
Meeting legal and record-keeping obligationsCompliance with a legal obligation

07Who receives your information

We use the service providers below. Where your device connects to a provider directly, that provider will see your device’s IP address in its own logs.

RecipientPurposeReceives personal data?
SupabaseAuthentication, database, backend functionsYes — all categories
AppleSign in with Apple; push delivery on iOSYes
GoogleGoogle Sign-In; push delivery on AndroidYes
Expo / EASApp builds, over-the-air updates, push token issuance and relayDevice ID and push token
GroqLanguage-model inference for the Ask featureThe contents of your prompts (see §8)
VercelWebsite hostingIP and request logs (web only)
Amazon CloudFrontServing company logos and imageryIP and request logs
Esri, NASA GIBSSatellite map tiles for the headquarters viewIP and request logs
unavatar.io, Wikimedia, Google favicons, X image CDNProfile photos, logos and post imageryIP and request logs

We use these providers to deliver the service to you and require them to protect your information. We do not sell your data to any of them.

08The Ask feature

When you use Ask, your question — together with context about the company you are viewing — is sent from your device to Groq, a third-party model provider, which generates a response. We do not store these conversations on our servers; Groq’s handling of the request is governed by its own policies.

NorgardX displays information about founders, executives and recent hires at the companies it covers — names, roles, photos and links to public profiles — compiled from public sources. If you are one of these individuals and wish to object to how you are shown, contact us at support@norgardx.com and we will review your request.

10Illustrative content

Some surfaces in the app show illustrative content rather than live user activity — for example, generated discussion threads and static sentiment figures on company pages. These are provided for illustration and do not represent real people or live voting.

11How long we keep your information

We keep information only as long as we need it for the purposes above:

DataRetention
Account and profileUntil you delete your account, or after 24 months of inactivity
Interest submissionsKept while we follow up with you and for up to 24 months after your last interaction with us about it, or longer where needed to resolve a dispute or comply with law. If you delete your account, the submission is disconnected from your account, but the contact and interest details you entered may be retained for this period
WatchlistUntil you unpin or delete your account
Push tokensUntil the token becomes invalid or you disable notifications
On-device dataUntil you delete the app

12Security

  • Traffic is encrypted in transit, and our managed database and authentication service encrypt data at rest.
  • Access rules mean a signed-in user can read only their own profile, watchlist, submissions and devices. Interest submissions are write-only from the app and cannot be edited or read back through it.
  • Staff access to submissions is through privileged, server-side credentials — not through the app.
  • Sessions are held in your operating system’s app-private storage.

No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

13Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email support@norgardx.com.

You can delete your account from within the app, which removes your account and profile as described in section 11. You can turn off push notifications at any time in your device settings.

California residents: we do not sell or share your personal information, and we will not discriminate against you for exercising your rights.

EU and UK residents: you may lodge a complaint with your local supervisory authority if you believe we have handled your data unlawfully.

14International transfers

Our infrastructure and the providers in section 7 are hosted in the United States. If you use NorgardX from the EU or UK, your information is transferred to the US under the appropriate safeguards required by law, such as the applicable standard contractual clauses. Contact us for more information about these safeguards.

15Children

NorgardX is intended for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

16Changes to this policy

We may update this policy as the app changes, including through over-the-air updates that arrive without a new app-store release. When we make material changes, we will update the date at the top and, where appropriate, notify you in the app. Your continued use after an update means you accept the revised policy.