Privacy Policy

Account information. Your email address and password (stored only as a salted hash, never in plain text) when you sign up, plus an optional display name.

Sign in with Google or Apple (optional).If you choose “Continue with Google” or “Continue with Apple,” that provider confirms your identity and shares with us a unique account identifier, your email address (and whether they have verified it), and, if you allow it, your name. If you use Apple’s “Hide My Email,” we receive a private relay address that forwards to you, never your real address. For Sign in with Apple we also store an encrypted token that lets us revoke the connection when you delete your account. We do not receive your Google or Apple password, and we don’t request access to your contacts, files, or any other data in those accounts. If an account with the same verified email address already exists, signing in this way links the two.

Financial data you connect via Plaid.If you link a bank or credit card account, Plaid Inc. shares your linked accounts, balances, and transaction history with us so the app can show them to you. We never see or store your bank login credentials — those are entered directly with Plaid or your institution. The access token Plaid gives us to keep your accounts in sync is encrypted at rest. Plaid’s own collection and use of your data is governed by Plaid’s privacy policy.

Financial data you enter yourself. Any accounts, transactions, budgets, bills, goals, and categories you add manually instead of (or in addition to) linking through Plaid.

Two-factor authentication (optional). If you enable it, we store an encrypted authenticator secret and hashed backup recovery codes.

Biometric unlock (mobile, optional).If you enable Face ID/fingerprint unlock, that check happens entirely on your device through your phone’s operating system. We never receive, see, or store your fingerprint, face data, or any biometric data — only a simple on/off preference is saved locally on your device, and it never leaves it.

Push notification token (mobile, optional).If you enable notifications, we store a device push token so we can deliver bill and budget reminders you’ve asked for.

AI insights (optional). If you turn on AI insights, we record when you gave consent and store the AI-written summaries we generate for you. Turning AI insights off deletes those summaries.

Ask AI (optional). If you turn on Ask AI, we record when you gave consent and keep a daily count of the questions you ask, to enforce a daily limit. We also save your Ask AI conversations (your questions, the answers, and any charts) to your account so you can come back to them. You can delete a conversation, delete them all, or turn saving off at any time; turning saving off or turning Ask AI off deletes every saved conversation.

Usage information. Basic technical data needed to operate the Service, such as when you last logged in.

We use the information above only to:

• Provide the Service — showing your accounts, transactions, budgets, bills, goals, net worth, and reports.
• Secure your account — password hashing, encryption of sensitive secrets, and optional two-factor authentication.
• Let you sign in with Google or Apple, if you choose to, and confirm it’s you before sensitive changes such as deleting your account.
• Send account-related email, such as verifying your email address.
• Deliver push notifications you’ve opted into, such as bill reminders.
• Write AI insights — plain-English summaries of your finances — if you’ve turned them on.
• Answer questions you ask Ask AI about your finances, if you’ve turned it on.

We do not sell your data, use it for advertising, or share it with data brokers. The Service contains no advertising or analytics/tracking SDKs.

We share data only with the service providers that help us run AskYourMoney:

• Plaid Inc.— to link and sync bank/credit accounts you choose to connect.
• Google and Apple— only if you sign in with them. They verify your identity for us; we tell Apple to revoke the connection when you delete your account. Their handling of your data is governed by Google’s and Apple’s privacy policies.
• Resend— to deliver account emails, such as email verification.
• Our hosting providers(including Vercel and our own server infrastructure) — to run the website and API.
• Anthropic, PBC— only if you turn on AI insights. To write them, we send Anthropic’s Claude AI model summarized figures from your account: balances and totals, budget categories and amounts, bill, subscription, and account names with their amounts, debt balances and interest rates, and investment symbols and values. We never send your name, email address, bank login, or account numbers. Anthropic processes this data to return the summary and, under its commercial terms, does not use it to train its models. AI insights are off until you turn them on, and you can turn them off at any time in Settings. Anthropic’s handling of data is described in its privacy policy.
• Anthropic, PBC— also only if you turn on Ask AI, which is separate from AI insights. To answer a question, we send Anthropic’s Claude AI model your question, the earlier messages in that conversation, and the parts of your account needed to answer it. That can include individual transactions with their dates, amounts, descriptions, and categories, as well as account names and balances, budgets, bills, subscriptions, goals, debts, and investments. We never send your name, email address, bank login, or account numbers. Anthropic processes this data to return the answer and, under its commercial terms, does not use it to train its models. Ask AI is off until you turn it on, and you can turn it off at any time in Settings.

We may also disclose information if required by law, or to protect the rights, safety, or property of AskYourMoney or our users.

We keep your data for as long as your account is active. You can permanently delete your account at any time from Settings in the web or mobile app. Deleting your account removes all of your accounts, transactions, budgets, bills, goals, and other associated data, and makes a best effort to revoke any linked Plaid bank connections and your Sign in with Apple authorization. You can also remove AskYourMoney from your Google or Apple account settings at any time; that stops future sign-ins with that provider but does not delete your AskYourMoney data.

We use industry-standard measures to protect your data: passwords are hashed (never stored in plain text), sensitive secrets such as Plaid access tokens and two-factor authentication seeds are encrypted at rest, and all traffic to and from the Service is encrypted in transit (HTTPS/TLS). No method of transmission or storage is 100% secure, but we work to protect your information using these safeguards.

AskYourMoney is run by a single small operator (CF Technical IT Services, LLC), not a large team with separate departments. The admin tools we use day to day show only account-level information — email, signup date, and verification/two-factor status — never your transactions, balances, or account details.

Because we operate the server and database ourselves, we do have the underlying technical ability to access data stored in it, including your financial data. We don’t browse or monitor user data as a matter of routine, and we access it beyond the admin tools only when necessary to maintain the Service, investigate a reported problem, or as required by law.

AskYourMoney is not directed at children under 13, and we do not knowingly collect information from anyone under 13.

If we make changes to this policy, we’ll update the “Last updated” date above. Continued use of the Service after a change means you accept the updated policy.

Questions about this policy or your data? Email privacy@askyourmoney.app.