Privacy Policy

What we collect

Account: your email address and name, from the sign-in method you choose (email and password, Google or Apple).

Financial data: when you connect a bank through Plaid, the accounts, balances and transactions it shares with us. We never see or store your bank username or password.

Payments: your plan and subscription status, from Apple, Google or our web checkout through RevenueCat. You pay Apple or Google directly, or by card through Stripe; we never see your card number.

What you add: categories, tags, notes and settings you change in the app, and your messages to our support team.

How you use the app: which screens you open, what you tap and how quickly the app responds, so we can find what's confusing or slow. On the phone (iPhone and Android), sessions are also recorded with Microsoft Clarity and Fullstory with every text and image masked, so your amounts, names and balances are never recorded, and nothing at all is recorded where passwords or codes are typed or on your bank's own screens. The same use (which screens, where on the screen you tap or swipe, how long you stay, crashes and freezes, never what is on the screen or what you type, and no recording) also goes to our own analytics service, on our Google Cloud servers. When the app or our servers hit an error, a report of it (what failed, where in the code) goes to Sentry, without your amounts, names or email. This is linked to your account by an id, never by your email.

Where you came from: on the phone, AppsFlyer tells us which ad, if any, led you to install the app (the ad network and campaign), and with your permission on iPhone ("Allow tracking") or by default on Android, your device's advertising id. Your bank data, amounts, name and email are never part of it.

How we use it

To run the Service: show your balances and spending, detect recurring payments, send the notifications you turned on (large purchases, money in, trial reminders) and the emails about your account and trial. To provide support, keep the Service secure, and meet legal obligations.

Who we share it with

Only the companies that help us run the Service, under contract and for that purpose: Plaid (bank connections), Apple and Google (in-app subscriptions), RevenueCat and Stripe (subscription status and card payments), Google Cloud and Firebase (hosting and sign-in), Neon (database), Resend (email delivery) Microsoft Clarity and Fullstory (masked session recordings), AppsFlyer (which ad brought you) and Sentry (error reports, without your financial data). The support chat and our session analytics run on our own services. We may also share data if the law requires it, or with a buyer if the company is sold, under this same policy.

People you invite: if you invite a partner, a family member or a financial professional to your household, they see and can change your accounts, balances, transactions, budgets and goals with their own sign-in, until you remove them (a professional's access ends after a year unless you renew it). If you join someone else's household, its owner and the people they invited see what you add there.

We don't sell or rent your personal information. To measure our own ads, AppsFlyer tells the ad network that brought you (such as TikTok, Meta or Google) that the app was installed and when a trial or subscription starts, with the advertising id if you allowed it. Nothing about your banks, accounts or spending is ever shared for advertising.

How we protect it

Data is encrypted in transit (HTTPS). Bank access tokens are encrypted again before they're stored. Access to your data is limited to what's needed to run the Service.

How long we keep it

We keep your data while your account is open. When you disconnect a bank, we stop receiving its data. You can delete your account and all its data at any time in the app (Profile → Delete account): your banks are disconnected and your data is erased right away. A subscription bought in the App Store, on Google Play or by card is cancelled by you, there or on the billing page. You can also ask us at contact@stratosphericinnovations.com.

Your choices and rights

You can turn notifications and email reminders off in Settings, disconnect banks in the app, and ask us for a copy of your data, to correct it, or to delete it. On iPhone you can refuse or withdraw "Allow tracking" in Settings → Privacy & Security → Tracking; on Android you can delete or reset your advertising id in Settings → Privacy → Ads.

If you live in California or another state with a privacy law, you have these rights under that law, and we won't treat you differently for using them.

Children

The Service is for adults (18+). We don't knowingly collect data from children.

Changes and contact

We may update this policy; if a change matters, we'll tell you in the app or by email before it applies.

Questions or requests: contact@stratosphericinnovations.com · STRATOSPHERIC INNOVATIONS LC.