Privacy Policy

1. Information we collect

Account and identity information: your name, email address, and authentication data, managed through Amazon Cognito.

Financial account information: when you connect an account through Plaid, we receive information such as account names, balances, and transactions on a read-only basis. You may also enter accounts, balances, budgets, holdings, and transactions manually.

Payment information: subscription payments are processed by Stripe. Stripe collects your payment card details directly; we do not store full card numbers. We receive limited billing information such as subscription status and the last four digits of your card.

Usage and device information: basic technical data (such as log data and device/browser type) used to operate and secure the Service.

2. How we use information

We use your information to provide and maintain the Service; to display your budgets, balances, net worth, and reports; to process subscriptions; to secure accounts and prevent fraud; to provide support; and to improve the Service. We do not use your financial account data for advertising.

3. How we share information

We share information only as needed to run the Service: with service providers who process data on our behalf — including Plaid (account connections), Stripe (payments), and Amazon Web Services (hosting) — under obligations to protect it; when required by law or to protect rights and safety; and in connection with a business transfer (such as a merger or acquisition), subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Plaid

When you link a financial account, Plaid accesses information from your institution on your behalf. Plaid's handling of your information is governed by Plaid's end user privacy policy. Access is read-only, and you can disconnect a linked account at any time from within the Service, which stops further data retrieval.

5. Data isolation and security

We isolate each household's data at the database level so that one household cannot access another's information. We use encryption in transit, access controls, and reasonable administrative and technical safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You may delete your account, after which we will delete or de-identify your personal information within a reasonable period, except where retention is required by law.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for advertising, but you may still exercise your other rights by emailing support@punkerbit.com. We will not discriminate against you for exercising these rights.

8. California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you rights to know, delete, correct, and limit the use of your personal information, and to opt out of sale/sharing. We do not sell or share your personal information. To exercise your rights, email support@punkerbit.com; we may need to verify your identity before responding.

9. Financial data

Because the Service handles financial information, we limit access to that data to what is necessary to operate the Service and apply safeguards consistent with applicable financial-privacy laws. We do not use your financial account information for any purpose other than providing the Service to you.

10. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising cookies. You can control cookies through your browser settings, though disabling necessary cookies may affect functionality.

11. Text messaging (SMS)

Text messaging is optional and off by default. If you provide a mobile number, check the consent box in the Service (Settings → Notifications), and verify a one-time code, we will send the account notifications you enable — such as due-date reminders and bank, credit card, and available-balance alerts — and account verification codes. You can opt out at any time in Settings or by replying STOP to any message; reply HELP for help. Consent to receive texts is not required to use the Service or to make a purchase.

Message frequency varies based on the alerts you enable (for example, a daily or weekly digest). Message and data rates may apply depending on your mobile plan.

No mobile information — including your phone number and SMS consent — will be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are shared only with our messaging provider (Twilio) solely to deliver the messages you requested, and text-messaging opt-in data and consent are not shared with any third parties for their own use.

12. Children's privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@punkerbit.com and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice (for example, by email or within the Service) and update the effective date above.

14. Contact

Questions about this Policy or your data? Email support@punkerbit.com.