Privacy Policy

Effective October 19, 2026

This policy explains what information Financial Companion collects, how it is used and shared, and the choices you have. The site is privately operated by the person or organization that hosts it (“the Operator”, “we”), who is responsible for your information.

In short: we use your financial information only to run the Service for you. We do not sell it, rent it, use it for advertising, or share it with data brokers. There are no analytics or advertising trackers on this site.

1. Information we collect

Information you give us

Account details: name, email address, password (stored only as a salted bcrypt hash), two-factor authentication settings, notification and display preferences.
Financial information you enter or import: accounts, balances, transactions, categories, budgets, bills, debts, savings goals, pay periods, holdings, watchlists and notes, including CSV and other imports.
Files: receipts, statements and property documents you upload, photograph or forward.
Property information: rental properties, units, leases, rents and expenses, which may include names and contact details of tenants and co-owners you enter.
Household and sharing: email addresses of partners, household members or co-owners you invite.
Messages to the Service: AI chat questions, feedback and support requests.

Information from services you connect

Bank and card data from Plaid or SimpleFIN: account names, types, masked numbers, balances, transactions and, where available, investment holdings. We never receive or store your online-banking password.
Email receipts from a mailbox you connect, limited to messages from senders you approve.
Sign-in and messaging accounts: basic profile from Google sign-in; Discord user ID if you link Discord.

Information collected automatically

Security logs: sign-in attempts, password and two-factor changes and administrative actions, with IP address, browser user-agent and time.
AI usage records: which feature and model was used, token counts and cost, so usage limits can be enforced.
Cookies and local storage as described in section 6.

On iPhone, Face ID sign-in is handled entirely by your device. Your saved sign-in is kept in the iOS Keychain, and we never receive any biometric data.

2. How we use information

to provide the Service: sync and categorize transactions, track budgets and bills, prepare reports, run investment and property features, and read receipts;
to provide AI features you use or schedule, when enabled;
to send the email and Discord notifications you have chosen, plus essential account and security messages;
to secure the Service: authenticate you, prevent abuse, investigate incidents and keep audit logs;
to maintain, back up, troubleshoot and improve the Service; and
to comply with law and enforce our Terms of Use.

We do not sell or rent personal information, do not “share” it for cross-context behavioral advertising, do not use it to build marketing profiles, and do not use it to train AI models.

3. Who we share information with

Information is shared only as needed to operate the features you use. Each service below processes data under its own terms and privacy policy.

Service	What it receives	When
Hosting provider	All stored data, encrypted in transit; the server and its encrypted backups run on infrastructure the Operator rents.	Always
Plaid	Your bank login is entered with Plaid, never with us. Plaid returns account, balance and transaction data to us. Plaid End User Privacy Policy.	Only if you link an account through Plaid
SimpleFIN Bridge	An access link you create at SimpleFIN; SimpleFIN returns account, balance, transaction and holdings data. SimpleFIN.	Only if you connect SimpleFIN
AI providers (Anthropic, OpenAI, OpenRouter, Google Gemini, xAI, or a self-hosted model)	The content needed for the request: your question, relevant transactions, budgets or holdings, and receipt images or PDFs you submit.	Only when an AI feature is enabled by the Operator and used by you or on your schedule
Your email provider	We sign in to the mailbox you connect over IMAP and read messages only from senders you approve, to extract receipts.	Only if you connect a mailbox
Discord	Your Discord user ID, and the notifications, digests and chat replies you ask to receive there.	Only if you link Discord or add a webhook
Google	Your name, email address and profile picture from Google sign-in. We do not request access to Gmail, Drive or contacts.	Only if you sign in with Google
Email delivery (SMTP) service	Your email address and the content of account emails (invitations, password resets, alerts).	When we send you an email
Market data sources (Finnhub, Twelve Data, SEC EDGAR, OpenFIGI and similar)	Ticker symbols and company identifiers only. No personal or account information is sent.	When investment features look up prices, news or filings

We also share information:

with people you choose, such as a partner or household member you invite, or a co-owner you give a property link;
for legal reasons, when required by law, subpoena or court order, or to protect the rights, property or safety of you, us or others; and
with a successor if the Service is transferred to another operator, who must honor this policy or give you notice and a chance to delete your account.

AI providers are used through their business API offerings. Their own terms govern how long they retain request data and whether it can be used to improve their models. If you prefer that no financial data leave this server for AI processing, ask the Operator to use a self-hosted model or to turn AI features off.

4. How we protect information

All traffic uses HTTPS. Bank-connection tokens, SimpleFIN access links, mailbox passwords, AI provider keys, Discord webhook URLs and two-factor secrets are encrypted at rest with AES-256-GCM.
Passwords are hashed with bcrypt. Two-factor authentication, session time-outs, sign-in rate limits and security logging are in place.
Each person’s data is scoped to their own account and to the people they have chosen to share it with.
Backups are encrypted before they leave the server.

No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.

5. How long we keep information

We keep your account data for as long as your account exists.
When you delete your account, your account, financial records, uploaded files, stored credentials and connection details are deleted immediately, and Plaid connections are revoked. Copies in encrypted backups are overwritten as backups rotate.
Security logs are kept as long as reasonably needed to secure the Service and investigate incidents.
Shared market news is cached for about 90 days and contains no personal information.

6. Cookies and local storage

We use only what is strictly necessary for the Service to work. There are no analytics, advertising or third-party tracking cookies.

Session and security cookies keep you signed in and protect forms against cross-site request forgery. They expire when your session ends or times out.
Local storage in your browser remembers preferences such as theme, currency, collapsed sidebar and the time of your last activity (used for automatic sign-out). It never leaves your device.

Because no tracking takes place, there is nothing to opt out of; browser “Do Not Track” and Global Privacy Control signals are honored by default.

7. Your choices and rights

Access and export: download your data at any time from Settings.
Correct: edit your profile and records directly in the app.
Delete: delete your account from Settings, or ask us to.
Disconnect: remove bank, mailbox, Discord or other connections at any time. You can also manage Plaid access through Plaid Portal at my.plaid.com.
Notifications: choose which emails and notifications you receive in Settings.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the EU/UK GDPR, including the right to know what we hold, to object to or restrict processing, to data portability, and to complain to a data-protection authority. Where the GDPR applies, we process your data to perform our contract with you, to meet legal obligations, and for our legitimate interest in keeping the Service secure; where we rely on consent (for example, connecting an optional service), you can withdraw it at any time. We will not discriminate against you for exercising your rights. To make a request, contact admin@fcompanion.app; we may need to verify your identity first.

8. Where data is processed

Your data is stored on the Operator’s server. Some service providers listed above may process data in other countries, under their own safeguards.

9. Children

The Service is for adults aged 18 and over. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

If we make material changes, we will notify you in the app or by email before they take effect. The effective date at the top shows when this policy last changed.

11. Contact

Questions or requests about your privacy: admin@fcompanion.app.