The rules are simple but they are spread across several screens, so here they are in one place. “Everyone” means any signed-in user who opens your profile.
| Thing | Who sees it | Controlled by |
|---|---|---|
Name, @handle, picture, bio, location, links, join date |
Everyone | Always public |
| Your email address | Nobody — it is not shown anywhere in the app | Not shareable |
| Follower and following counts | Everyone | Always public |
| Who you follow, by name | Only you | Not shareable |
| A watchlist and its symbols | Only you, until you share it | Per list, on Watchlists |
| Your holdings and performance | Only you, until you share them | The toggle on Portfolio |
| Your trade log | Only you, until you share it | The same toggle — it cannot be separated from holdings |
| Direct messages | Only you and the person you are messaging | Not shareable |
| Posts in a channel | Everyone who can see that channel | The channel's public/private setting |
| Your alerts and notifications | Only you | Not shareable |
Two things worth knowing Sharing a watchlist tells nobody anything about your holdings — the two settings are completely separate. But sharing your portfolio always shares your trade log with it.
Friend requests are deliberately silent about email. If you send a request to an address, the app answers “if that address belongs to an account, a request has been sent” whether or not it does. That is not vagueness — it stops anyone using the box to test whether an address is registered here.
What the app never holds. The table above is about who sees what. This is the other half of the question: there is no card number, no bank account and no broker login anywhere in your account, because nothing here moves real money and there is nothing to charge you for. There is no billing record to leak because there is no billing.
Your email address is used to sign you in and to send the notifications you asked for. It is not shown to anybody in the app, on any screen, at any privacy setting — which is why the row above says not shareable rather than private by default. There is no switch that would reveal it.