Privacy Policy

What we collect

• Identity data — your email address and authentication state, managed by Firebase Authentication. We never see or store your password. If you sign in with Google, Google shares your name, email address, and profile photo, which Firebase keeps with your sign-in. The app only uses the email, to identify your account.
• Account & transaction data — balances, holdings, and transactions for accounts you add, whether entered manually, imported from a CSV file you upload, or, once bank-linking is live, synced from a linked institution through a provider such as Plaid.
• Balance history — so we can show how your net worth changes over time, we save a daily record of each account's balance (and the total value of its holdings). It's copied from the balances already in the app, not fetched again from your bank. If you disconnect a linked institution, we delete its history along with its accounts and transactions.
• Linked-institution credentials — when bank-linking is live, the access tokens used to sync an account are stored encrypted and are never visible to us in plain text.
• Usage & security data — sign-in activity and basic request metadata, used for rate limiting and audit logging to protect your account.
• Waitlist sign-ups — if you join the waitlist on our home page, your email address, whether you'd like to try an early beta, and your answer to "what do you use to track this today?" (if you give one). This is separate from an account: joining the waitlist doesn't create one.
• Device & interaction signals — collected by Google reCAPTCHA to tell real visitors from bots (see Security checks below).

How we use it

To show your dashboard, compute net worth, and calculate investment performance (returns like XIRR/TWR) from the transactions you or a linked institution provide. We don't use your financial data for advertising, and we don't sell it.

Who we share it with

Only the service providers required to run the app: Firebase (authentication), Google (if you choose to sign in with Google), Google reCAPTCHA (abuse prevention), Kit (to keep the waitlist and send its emails), and, once live, a bank-data aggregator such as Plaid (to sync linked accounts). We don't share your data with anyone else, and we don't sell it to data brokers or advertisers.

Security checks (Google reCAPTCHA)

To protect sign-in and our API from bots and automated abuse, the app uses Google reCAPTCHA Enterprise through Firebase App Check. It runs on every page and collects hardware and software information, such as device and browser details, along with signals about how the page is being used, and sends them to Google for analysis. It may set cookies or similar storage in your browser. We use it only for security, never for advertising or analytics. Because it's needed to keep the service secure, it runs without a separate consent prompt. Google's Privacy Policy and Terms of Service apply to it.

The waitlist (Kit)

The waitlist is kept by Kit, an email service, which stores what you enter and sends a confirmation email; you're only on the list once you click the link in it. If a sign-up looks automated, Kit first asks for a security check, which uses Google reCAPTCHA. We use the list to tell you when the app opens up and, if you asked for one, to invite you to the beta. Nothing else: no newsletters, and we don't share or sell the list. Every email has an unsubscribe link, which removes you from the list. You can also ask us to delete your sign-up using the contact details below. Kit's Privacy Policy applies to the data it holds for us.

Cookies and tracking

We don't use analytics, advertising, or tracking cookies, and we don't use third-party trackers. The only browser storage the app relies on is Firebase Authentication keeping you signed in on this browser and the reCAPTCHA security check described above. If we ever add analytics, it won't load until you've agreed to it.

How we store and protect it

Application data lives in a Postgres database. Linked-institution credentials are encrypted at rest. Sign-in supports two-factor authentication (TOTP), and access to the API requires a valid Firebase-issued token plus App Check verification.

How long we keep it

We keep your data for as long as your account is active. Balance history is kept for as long as the account it belongs to exists: deleting a manual account removes its history too, and so does deleting your whole profile. If you delete your profile, we delete the associated data, other than what we're required to retain for security or legal reasons.

Your choices

You can review and edit your manually-entered accounts at any time, and disconnect a synced institution, which deletes its accounts, transactions and balance history. You can delete your account and all of its data yourself from the Profile page (Delete account). To request a copy of your data, contact us using the details below.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy or your data? Reach out at privacy@financialportfolio.app.