Privacy Policy

Your data is stored securely using industry-standard encryption and security practices:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Authentication: We use Supabase Auth with secure session management
• Access Control: Row Level Security ensures you can only access your own data
• Strict Admin Restrictions: Our administrative team CANNOT view your sensitive financial data (budgets, income, expenses). They can only see your email address for account support.
• Payment Security: We never store credit card details - all payments are processed securely by Paddle, our Merchant of Record

When you use our AI features (with consent):

• Your financial data is sent to OpenAI for processing
• Data is processed only to generate insights for YOU
• OpenAI does NOT use your data to train their models (per their API terms)
• We do not share your financial data with any third parties for marketing

We do NOT sell, trade, or share your personal or financial data with advertisers. We may share data only:

• With service providers essential to our operations (Supabase, Paddle, OpenAI)
• If required by law or valid legal process
• To protect our rights, privacy, safety, or property
• In connection with a merger or acquisition (with notice to you)

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a machine-readable format
• Security Transparency: View your security events and login history
• Opt-out: Withdraw consent for AI processing at any time

You can exercise these rights through Settings → Privacy or by contacting us.

We use essential cookies for authentication and session management. With your consent, we may use analytics cookies to improve our service. You can manage cookie preferences in Settings → Privacy.