Track everything. Reveal nothing.

Over 6,000 assets: roughly 3,300 NASDAQ stocks, 2,700 NYSE stocks, 200 AMEX stocks, and 200+ cryptocurrencies. If it's publicly traded on a major US exchange or a top cryptocurrency, it's there.

Yes. Take a screenshot of any brokerage or portfolio app, and Darkfolio's on-device OCR will detect the ticker symbols — works for both portfolios and watchlists. The image is processed in memory and never saved. You add quantities manually.

None. No accounts, no analytics, no crash reporting, no telemetry. Your portfolios are encrypted on your device and never leave it.

Three layers. First, we don't collect any user data — no accounts, no analytics, no telemetry. Second, we can't see what you own: every user receives the same 6,000+ prices every time (k-anonymity), and your device extracts what it needs locally. The server never knows which prices you care about. Third, with Tor enabled, we can't see who you are either — a real onion-routing client (Arti, written in Rust) hides your IP address and location. It's enabled by default for new users.

App Lock is available to everyone — it's a single PIN for your app. Ghost Mode, available to Pro users, upgrades that to two PINs — one for your real portfolio, one for a decoy.

Open the app with the decoy PIN and check Settings: App Lock is on, Ghost Mode isn't. It looks like a normal app with a normal lock. That's the point — the decoy doesn't just hide your data. It hides that there's anything to hide.

Every Darkfolio installation has two encrypted vaults — that's just how the app is built, whether or not you use Ghost Mode. Both vaults have the same file structure, the same encryption, the same size. Nothing in the app or under the hood labels one "real" and the other "decoy." That distinction exists only in your mind. So even someone who knows the feature exists can't prove you're using it.

And if you're ever forced to open the app, there's a last resort: creating a new "decoy" from one vault quietly overwrites the other vault. To anyone watching, it looks like normal setup. Only you know what just happened.

Ghost Mode is designed to raise the bar significantly, but no security measure is absolute. A sufficiently resourced and determined adversary with physical access to your unlocked device may find other avenues. Ghost Mode protects against casual inspection, shoulder surfing, and most coercion scenarios.

Face ID can't open two different vaults — our users aren't two-faced. Beyond that, in some jurisdictions (including under current U.S. case law) you may be legally compelled to unlock your phone with your face or fingerprint, but not to reveal a memorized PIN. The law here is evolving and varies by country, but the general principle is that biometrics are treated as physical evidence while a PIN is testimonial. Biometrics are convenient. PINs may offer legal protections.

The trade-off: if you forget your PIN, your data is gone. No recovery, no "forgot PIN" email, no backdoor. If we could recover it, so could someone else. After 5 wrong attempts, the app can be configured to wipe everything automatically.

Your data is never deleted. The free tier keeps one portfolio with up to 5 holdings, one watchlist with up to 5 assets, price alerts, and USD pricing. Everything you've entered is preserved — excess items are deactivated, not removed.

If you set up Ghost Mode during your trial, both vaults stay encrypted on your device and your PINs are preserved. The decoy PIN just stops working until you subscribe. Upgrade to Pro and Ghost Mode is immediately active again — same PINs, same vaults.

Pro unlocks: Ghost Mode, Tor routing, What-If scenarios, Compare, screenshot import, 30 currencies, and unlimited portfolios, holdings, and watchlists.

Upgrade anytime and it all comes back.

Widgets use unencrypted shared storage. A price widget would bypass the k-anonymous proxy, revealing exactly which assets you track. Watch apps have the same problem. We chose privacy over convenience — if you want to see prices, open the app behind your PIN.

No. Your encrypted vaults are stored on-device with iOS Keychain protection marked "this device only" — they're excluded from iCloud and iTunes backups. If you lose your phone, your data is gone. That's the trade-off.

Darkfolio is fully localized in 20 languages: English, Arabic, Chinese (Simplified), Chinese (Traditional), Dutch, French, German, Hebrew, Hindi, Indonesian, Italian, Japanese, Korean, Polish, Portuguese (Brazil), Russian, Spanish, Thai, Turkish, and Vietnamese. Arabic and Hebrew include full right-to-left support.

Not yet. iOS only for now. We want to get one platform right before expanding. Requires iOS 17.0 or later.