Privacy Policy

1. Information We Collect

Information You Provide

• Account information (name, email address, phone number)
• Financial account credentials (securely exchanged via Plaid)
• Profile information and preferences
• Communications with our support team
• Feedback and survey responses

Information Collected Automatically

• Device information (type, operating system, unique identifiers)
• Usage data (features used, time spent, interactions)
• IP address and approximate location
• App performance and crash data via Sentry (anonymized)
• Analytics data via Google Analytics (anonymized)

Financial Information via Plaid

We use Plaid to connect your financial accounts. We receive:

• Account balances and details
• Transaction history
• Account and routing numbers (for verification only)
• Financial institution information

2. How We Use Your Information

We use your information to:

• Provide and maintain our Service
• Process transactions and manage your subscription
• Analyze your financial data to provide insights and recommendations
• Send you notifications about your account and finances
• Respond to your comments, questions, and support requests
• Send promotional communications (with your consent)
• Monitor and analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information with:

Service Providers

• Plaid: Financial data aggregation
• Stripe: Payment processing
• Firebase: Database and authentication
• Vercel: Application hosting
• OpenAI: AI-powered insights (anonymized data only)
• Mailgun: Email communications
• Twilio: SMS notifications
• Sentry: Error monitoring (anonymized crash reports)
• Google Analytics: Usage analytics (fully anonymized, no personal data)
• Redis/Upstash: Performance optimization

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred with advance notice.

4. Analytics and Anonymization

We take your privacy seriously. All analytics data we collect is fully anonymized:

• Google Analytics uses anonymized IP addresses and no personal identifiers
• We do not track individual users across sessions
• Analytics data cannot be linked back to your personal information
• We only collect aggregate usage patterns to improve our Service
• Error reports sent to Sentry are stripped of personal information

5. Data Security

We implement enterprise-grade security measures including:

• 256-bit AES encryption at rest and TLS 1.3 in transit
• Multi-factor authentication options
• Regular security audits and monitoring
• Secure infrastructure with Firebase and Vercel
• Rate limiting and fraud detection
• Regular automated backups

6. Data Retention

• Active accounts: Data retained while account is active
• Financial records: 7 years per IRS requirements
• Deleted accounts: Personal data removed within 90 days
• Backups: Retained for 90 days
• Security logs: 2 years

7. Your Rights and Choices

Access and Portability

You can access and export your data at any time through the app settings.

Correction

You can update your personal information through your account settings.

Deletion

You can request account deletion at any time. We will delete your personal data within 90 days, except for data we must retain for legal purposes.

Marketing Communications

You can opt-out of marketing emails by clicking "unsubscribe" in any marketing email or updating your preferences in the app.

8. California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell personal information).

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. International Users

Our Service is currently available only to users in the United States and Puerto Rico. All data is processed and stored in the United States.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date."

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

© 2025 OS Financial LLC. All rights reserved.