Holdings & portfolio
How do I add or edit a holding?
Open the Metals tab and switch to the Trade Log sub-tab. The form at the top lets you log a purchase: pick the metal (gold, silver, platinum, palladium), the type (bar, coin, round), the quantity (in oz, g, kg, or lb), and the price you paid. Tap ADD ENTRY. The entry then shows up in the list below and rolls into your Portfolio, GSR Analysis, and Buy vs Sell views automatically.
To edit or delete an entry, scroll to it in the Trade Log list and use the row’s action controls. Sold a piece? Add the sold price to the same entry and it moves into the Sold filter. Premium over spot is calculated for you from the purchase price and ounces.
Sovereign asks me to enter holdings by hand — why no bank linking?
This is deliberate. Sovereign does not integrate with Plaid, brokerages, or bank APIs, and it never will. The reason is privacy: connecting your financial accounts to a third-party aggregator gives that aggregator (and any future vendor or breach) a copy of your full financial picture. Manual entry keeps that surface area zero. The trade-off is upfront setup; the upside is that your holdings only exist where you put them — on your device, and (if you choose) in your own Supabase row.
Cloud sync & encryption
How does cloud sync work, and what’s actually encrypted?
Cloud sync is opt-in. By default, all of your data lives in your device’s localStorage (web) or local app container (iOS), and never leaves the device. If you create an account and turn on cloud sync, your data is uploaded to Sovereign’s database (Supabase).
What protects your synced data depends on the data type:
- Metals trade history, cryptocurrency holdings, spending entries, future income projections, and your account profile (email, plan tier, encryption salt) are stored in your row in Supabase under Row-Level Security (only requests authenticated as you can read your rows) plus Supabase’s standard at-rest encryption. These tables are not end-to-end encrypted — Sovereign’s database operator could technically read them.
- Net-worth snapshots can additionally be end-to-end encrypted. This is an optional feature you turn on from Account → Encryption. When enabled, the values inside each snapshot — total assets, total debt, net worth, year change, notes, account values, and spending breakdowns — are encrypted on your device with AES-GCM-256 before they reach Supabase. The key is derived from a passphrase you set, using PBKDF2-SHA256 with 600,000 iterations and a per-user salt. Your passphrase and key never leave your device. With E2EE on, Sovereign cannot read your snapshot values — even if compelled.
To be precise: end-to-end encryption applies only to net-worth snapshot fields. We’re working to extend E2EE to more tables in a future release. For the full breakdown, see Section 5 of our Privacy Policy.
What happens if I forget my E2EE passphrase?
Sovereign cannot recover it. That’s the point of end-to-end encryption — only you hold the key. If you lose the passphrase, your existing encrypted snapshots are unrecoverable, even by us. Store the passphrase in a password manager. The rest of your synced data (holdings, spending, etc.) is unaffected because it isn’t E2EE-protected — you can keep using your account normally and re-enroll a new passphrase if needed.
Pro subscription
I bought Pro on one device. How do I restore it on a new one?
On iOS: install Sovereign from the App Store and open it. If you’re signed into the same Apple ID you used to purchase, Sovereign checks your StoreKit / RevenueCat entitlement on launch and automatically unlocks Pro — no manual action required. If it doesn’t unlock within a minute, sign in to your Sovereign account (Account tab → Sign in with Apple) and Pro will reattach to your account.
On the web: sign in to the same Sovereign account you originally used to subscribe (magic-link email or Google). Your plan tier is stored in your account profile in Supabase, so it follows you to any browser or device once you sign in. Lifetime purchases unlock the same way.
If your Pro doesn’t come back after sign-in, email [email protected] with the email you used at purchase and the receipt or transaction ID — we’ll sort it out.
How do I cancel?
Web (Stripe) monthly and annual subscriptions: cancel from your account billing page. iOS subscriptions: Settings → Apple ID → Subscriptions on your device. Lifetime is one-time — there’s nothing to cancel.
Privacy
What does Sovereign collect about me?
The short version: the minimum needed to run the app. We do not collect banking credentials, do not run analytics, advertising, or third-party tracker SDKs, and do not sell data — ever. The only things stored server-side are what you choose to sync (holdings, snapshots, spending, etc.), your account email and anonymous user ID, your subscription tier, and — if you turn on E2EE — your encryption salt. Full details in the Privacy Policy.
How do I delete my data or account?
Two options, both self-serve — no support request needed:
- Local data only (you never signed in or never enabled cloud sync): clear your browser’s site data for sovereign-app.com, or delete the iOS app. There’s nothing in the cloud to clean up.
- Cloud account: in-app, go to Account → Danger Zone → Delete My Account & All Data. You’ll be asked to type
DELETEto confirm. Your auth record and every associated cloud row are removed immediately. Database backups may retain copies for up to 30 days before they cycle out (standard infrastructure behaviour).
For California / EU / UK data-rights requests (access, correction, portability, deletion), email [email protected] and we’ll process within 30 days.
More help
This page covers the most common questions. For the full FAQ — sign-up, pricing, refunds, import from other trackers, and more — see the in-depth Help page.