Privacy Policy

Information we collect

• Account information: your email address, password (stored hashed by our authentication provider), authenticator setup for two-factor sign-in, and the date you accepted these terms.
• Financial information you enter: balances, income, bills, transfers, budgets, goals, investments, loans and the rules you set up.
• Data from connected institutions (optional): if you connect a bank, brokerage or lender through Plaid, we receive account names and masked numbers, balances, transactions, investment holdings and transactions, and loan and card details. We store an encrypted access token for each connection, never your bank password.
• Invite requests: if you ask for an invite on geldfish.com, the email address you enter, plus the IP address and time of the request.
• Technical information: IP address, browser and device type, and server logs, used to keep the service secure and working; error reports when something breaks; and aggregate page-view statistics.

How we use it

• To provide Geldfish: sync your accounts, build projections, budgets and alerts.
• To secure the service: sign-in, two-factor authentication, fraud and abuse prevention.
• To send account emails such as sign-in links, password resets and important notices.
• To answer your questions and requests.
• To find and fix errors and understand, in aggregate, how the app is used.
• To meet legal obligations.

We do not sell or share your personal information for money or for cross-context behavioral advertising, we don’t show ads, and we don’t use your financial data for marketing.

Plaid

When you connect an institution, Plaid Inc. collects your data from it on our behalf. Plaid’s handling of that data is described in the Plaid End User Privacy Policy. You can disconnect an institution at any time in Settings, which also removes its synced data from Geldfish.

Service providers

We use these companies to run Geldfish. They process data only for us, under contracts that limit how they can use it:

• Supabase: sign-in and database hosting.
• Render and Vercel: application hosting.
• Plaid: connections to financial institutions (see above).
• Resend: delivery of account emails.
• Sentry: error reports (the page and code involved; we turn off collection of request contents, cookies and IP addresses).
• Vercel Web Analytics: aggregate page views, without cookies or cross-site tracking.
• Cloudflare Turnstile: bot protection on sign-in forms, using browser and device signals. It runs in the background without showing anything. See the Cloudflare Turnstile Privacy Addendum.
• Web3Forms: receives invite requests and emails them to us. It checks requests for spam with CleanTalk and Akismet, which see the email and IP address, and keeps submissions for up to three years. Its providers may process this data outside the US, including in the EU and India.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the service, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.

Cookies and tracking

Geldfish uses only cookies it needs to work: sign-in session cookies and a cookie that remembers your time zone. We don’t use advertising or cross-site tracking cookies, so we don’t sell or share data based on them. Because we don’t track you across other sites, we respond to browser “Do Not Track” and Global Privacy Control signals the same way we treat everyone: no cross-site tracking.

Where your data is stored

Geldfish is hosted in the United States, and your account and financial data are stored there. Geldfish is intended for people in the US.

How long we keep it

• While your account is open, we keep your data so Geldfish can work.
• Disconnecting an institution removes its access at Plaid and deletes its synced transactions, balances and holdings from Geldfish right away.
• Deleting your account (Settings → Profile) removes your login, your connections at Plaid and all of your Geldfish data right away. Copies in backups, logs and error reports expire within 90 days.
• Invite requests are kept until you ask us to delete them, and at most three years at Web3Forms.

Security

Data is encrypted in transit, bank access tokens are encrypted at rest, two-factor sign-in is required on every account, and access to production systems is limited. No system is perfectly secure; if a breach affects your data, we’ll notify you as the law requires.

Your rights and choices

Depending on where you live, you may have the right to:

• know what personal information we have about you and get a copy of it;
• correct it (most of it you can edit yourself in the app);
• delete it (you can delete your account yourself in Settings → Profile);
• opt out of the sale or sharing of your information (we don’t do either).

We give these rights to all of our users. To make a request, email team@geldfish.com from the address on your account; we may need to verify your identity, and an authorized agent may make a request for you with your permission. We’ll respond within 45 days. If we decline a request, you can appeal by replying to our decision, and we’ll respond to the appeal within 60 days. We won’t treat you differently for using these rights.

Children

Geldfish is for people 18 and older. We don’t knowingly collect information from anyone under 18; if you believe we have, email team@geldfish.com and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date above. For material changes, we’ll tell you in the app or by email before they take effect.

Contact

Questions or requests about your privacy: team@geldfish.com. See also our Terms of Service.