Privacy Policy

The short version: your financial data belongs to you. We collect only what we need to show you where your money goes, and we never sell it.

Last updated: April 2026

What we collect and why

We collect four categories of data, each for a specific purpose:

Account information

Your email address, display name, and avatar.

Purpose: To create and manage your account, send you weekly coaching emails and important account notifications.

Retention: Kept while your account is active. Permanently deleted within 30 days of account deletion.

Financial data (via Plaid)

Transaction descriptions, amounts, dates, categories, merchant names, account names, account types, and account masks (last 4 digits) from connected bank accounts.

Purpose: To categorize your spending, generate findings, detect recurring charges and price rises, and produce weekly coaching recommendations.

Retention: Kept while your account is active. Permanently deleted within 30 days of account deletion. Plaid access tokens are revoked immediately upon disconnection or deletion.

Usage analytics (via PostHog)

Pages visited, features used, session duration, and device type.

Purpose: To understand which features are helpful and where people get stuck, so we can improve the product.

Retention: Anonymized analytics are retained indefinitely. Identified user data is deleted when your account is deleted.

Payment data (via Stripe)

Subscription status, plan type, and billing dates. Stripe handles your credit card number — we never see or store it.

Purpose: To manage your subscription and process payments.

Retention: Billing history is retained for 7 years for tax and legal compliance, even after account deletion. No financial data is included in billing records.

Who we share data with

We share data only with the services that make Spendalyst work. These are the providers we rely on today:

  • Plaid Inc. — Connects your bank accounts and retrieves transaction data. Your bank credentials are entered directly into Plaid's secure interface. We never see them. Plaid's privacy policy
  • Supabase (via Lovable Cloud) — Stores your account data and transaction records on encrypted infrastructure in the United States.
  • Stripe — Processes payments and manages subscriptions. Credit card numbers are never stored on our servers. Stripe's privacy policy
  • PostHog — Collects anonymized product analytics. PostHog's privacy policy
  • Resend — Sends transactional emails (welcome emails, weekly coaching, account notifications).
  • AI model providers (via the Lovable AI Gateway, currently Google Gemini models) — Power the in-app money coach and the support chat. When those features run, the spending figures and question text they need are sent to the model provider to generate a reply. Your bank credentials are never sent, and these features are not used to advertise to you.

This list reflects the providers in use at the date above. If we add or change a provider, we update this page — and if the change is material, we email you before it takes effect.

We do not sell or rent your personal financial data, or share it with advertisers or data brokers. We use only the service providers needed to operate Spendalyst, as listed above. Our business model is the subscription — not your data.

How we protect your data

  • 256-bit AES encryption at rest and TLS 1.3 in transit
  • Plaid access tokens stored in a write-only secure vault — never exposed to the client
  • Read-only bank access — we cannot move your money
  • Row-level security on all database tables ensuring users can only access their own data
  • Credentials never stored on our servers

Your rights

You can exercise any of these rights from your Settings page or by emailing us:

  • Access — Download a complete copy of all data we hold about you (JSON format) from Settings
  • Correction — Update your profile information at any time
  • Deletion — Permanently delete your account and all associated data from Settings
  • Disconnection — Disconnect your bank accounts at any time, stopping future data syncing immediately
  • Portability — Export your transaction data in CSV or JSON format
  • Opt-out — Turn off non-essential emails and notifications from Settings

Changes to this policy

If we make material changes, we will notify you by email before they take effect. Continued use after changes constitutes acceptance.

Contact

For privacy questions or to exercise your rights, email privacy@spendalyst.com.

Version history

  • April 2026 — Expanded data retention details, added version history, named all third-party providers explicitly.
  • January 2026 — Added Plaid Production disclosures and detailed data collection categories.
  • December 2025 — Initial privacy policy.