Privacy Policy

Personal Information

We collect information you provide directly to us, including:

• Name, email address, and contact information
• Account credentials and authentication information
• Profile information and preferences
• Communications with our support team

Financial Information

With your explicit consent, we collect financial information through secure third-party providers like Plaid, including:

• Account balances and transaction history
• Investment holdings and portfolio information
• Account types and financial institution details
• Income and spending patterns for analysis

Usage Information

We automatically collect information about how you use our service:

• Log data, including IP addresses and browser information
• Device information and operating system details
• Usage patterns and feature interactions
• Session duration and navigation paths

We use your information to:

• Provide and maintain our financial analysis services
• Generate personalized content
• Authenticate your identity and secure your account
• Communicate with you about your account and our services
• Improve our platform and develop new features
• Comply with legal and regulatory requirements
• Detect and prevent fraud or unauthorized access
• Measure the effectiveness of our advertising campaigns

We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers, including:

• Plaid for secure financial data aggregation
• Stytch for authentication services (receives your email address and manages login sessions)
• Stripe for payment processing (receives payment information and billing details)
• Customer.io for email communications (receives your email address and behavioral data such as sign-ups, milestone events, and subscription events)
• Amazon Web Services (AWS) for cloud infrastructure and data storage
• Analytics and error monitoring providers for service improvement

Advertising Partners

We share limited data with advertising platforms (such as Meta) to measure the effectiveness of our advertising campaigns. This helps us understand which ads lead to sign-ups and purchases.

Data shared with advertising partners:

• Hashed email address (converted to an unreadable format before sharing)
• IP address and browser type (for matching purposes)
• Conversion events (that you signed up, started checkout, or completed a purchase)
• Purchase amount (for completed purchases)

Data NOT shared with advertising partners:

• Your actual email address (only a hashed version)
• Financial account information, balances, or holdings
• Retirement calculator inputs or results
• Portfolio performance or projections
• Any data from connected brokerage accounts

Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

Our security measures include:

• Encryption of data in transit and at rest
• Magic Link and other advanced forms of authentication for account access
• Row Level Security
• Secure API connections with financial institutions
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Withdrawal: Withdraw consent for data processing
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us using the information provided at the end of this policy.

We use minimal cookies, limited to what is essential for the service to function:

• Authentication cookies: We use session cookies to keep you logged in securely. These are set by our authentication provider (Stytch) and expire after your session ends or after a period of inactivity.

We do not use cookies for advertising, tracking across websites, or building user profiles. Our advertising measurement (described in the Advertising Partners section) is done server-side and does not require cookies on your device.

Disabling cookies in your browser will prevent you from logging into the application.