Data and privacy
What stays on your computer, and what goes out
One database, on your computer
Everything you enter - holdings, trades, plans, the timeline, chat history, memory - is kept in a single SQLite database in the app's data folder. There is no Lucky Dog account and no Lucky Dog server.
What goes out, and why
The app talks to the network only to fetch data or to do something you asked for:
- Market data - quotes and K-lines from public sources such as Tencent, Eastmoney and Yahoo Finance; Xueqiu if you sign in to it in Settings; financials from Eastmoney and the SEC; earnings from Nasdaq; crypto prices and funding rates from OKX and Binance; exchange rates from Frankfurter.
- Exchange accounts - balances, positions and futures history from OKX or Binance, with the API key you added.
- The AI assistant - your messages, and what its tools read, go to the model provider you chose in Settings (or your own endpoint) when you use it.
- Updates - the app checks GitHub for new releases.
- Notices - about once an hour the app reads the list of notices from this website, so maintenance or data-source trouble reaches you, along with the list of revoked licence ids and the free version's reminder. Nothing about you is sent with any of them; which notices concern you (free or licensed) is decided on your computer.
- Your email address - the one you give at first launch is sent once, with whether you want emails about new versions. It is used to reach you about the app, and for nothing else.
- Your licence - it is checked on your computer, never sent anywhere. Redeeming a code sends the code and your email address, so the licence can be mailed to you.
The MCP server listens on 127.0.0.1 and is not reachable from other machines.
API keys
Exchange keys must be read-only: a key that can trade, transfer or withdraw is refused when you add it. Keys stay on this device; they are left out of multi-device sync snapshots, and only a password-protected backup carries them.
Backups
Settings → Data & sync exports all of your data to one file. With a password, the backup is AES-256 encrypted and includes your API keys; without one, it is a plain export with the keys removed. Dossiers can also be exported as Markdown - one folder per security - and imported back after editing, with a preview first.
Multi-device sync
Sync goes through a folder your cloud service already syncs, such as iCloud Drive. Each device writes a snapshot of its data there; when another device's snapshot is newer, you are asked before anything is imported, and if both sides changed you choose which to keep.
Hiding amounts
Hide amounts in Settings replaces every amount with •••• - for recording or sharing your screen. Percentages stay visible.