Effective October 7, 2026

Privacy Policy

Finvy is a financial wellness platform. We collect the minimum information needed to help you reduce debt and improve your financial habits. We never sell your data. This policy explains what we collect, why, who we share it with, and how to control it.

1. Information we collect

1.1 Information you provide

• Account details: name, email, and password (stored only as a hash).
• Financial inputs you enter: debts, balances, APRs, minimum payments, income, pay schedule, safety buffer, and primary goal.
• Payments you record in Finvy.
• Conversations with the Finvy Coach (if you chat with the in-app assistant).

1.2 Information from connected accounts

If you link a bank, card, or loan account through Plaid, Plaid shares this read-only information from your bank with us:

• Account details: institution, account name and type, and the last four digits of the account number.
• Balances, including available balance for bank accounts.
• Transactions from roughly the last 90 days, and new ones as they post.
• For cards and loans: interest rates, minimum payments, due dates, and balances owed.

We don't receive or store your full account or routing numbers, and we never see your bank username or password. You can unlink an account at any time from your Account page. Plaid handles your information under its own End User Privacy Policy (plaid.com/legal).

1.3 Information collected automatically

• Device, browser, and IP address (for security and fraud detection).
• Usage events (which features you use; not tied to advertising).
• Cookies necessary to keep you signed in and protect your session.

2. How we use your information

• To deliver the dashboard, payment recommendations, and AI coaching.
• To keep linked balances, cards, loans, and transactions up to date, and to record the payments you approve. Finvy does not move money.
• To detect and prevent fraud or unauthorized account access.
• To send transactional emails, such as subscription confirmations.
• To produce aggregated, anonymized statistics, such as total debt paid down across all Finvy users. These never identify you, and figures based on fewer than five people are never shown.
• To meet legal, tax, and accounting obligations.

We do not use your financial data to train AI models and we do not share it with advertisers.

3. Service providers we share data with

Finvy uses a small set of vendors. Each receives only what they need to do their job. As of the effective date above:

• Supabase: stores your account, profile, debts, payments, linked-account data, and conversation history.
• Vercel: hosts the application and processes standard web request metadata.
• Plaid: connects your bank, card, and loan accounts.
• Google (Gemini): powers the Finvy Coach. We send a summary of your finances along with your messages so the Coach can answer, under Google's API terms.
• Stripe: handles subscription billing. Card details never touch our servers.
• Resend: delivers account and billing emails, using your email address and name.

4. Data retention

• Account data is kept while your account is open. You can delete your account at any time with Delete account on your Account page. Deleting it cancels any subscription so you aren't charged again, disconnects your linked bank accounts, and permanently deletes your personal information from Finvy right away; we email you a confirmation when it's done. Copies in our encrypted backups are removed within 30 days. Payment records held by our payment processor are kept only as the law requires.
• Coach conversations are kept with your account and are deleted when you delete your account.
• When you unlink an account, we stop syncing it and delete its balances and transactions from Finvy. Debts created from that account stay in your plan as manual debts until you remove them.

5. Security

• Data is encrypted in transit (TLS) and at rest by our hosting providers. The credentials Plaid issues for your linked accounts are additionally encrypted with AES-256 before they're stored.
• Passwords are stored only as salted hashes, never in plain text.
• Optional two-factor authentication with an authenticator app, from your Account page.
• Bank credentials are never handled by Finvy; you sign in to your bank through Plaid.

6. Your rights

Regardless of where you live, you can delete your account yourself from your Account page, and you can ask us to give you a copy of your data, correct it, or delete it for you by emailing hello@finvysmartbudgeting.com.

6.1 California (CCPA / CPRA)

California residents have the additional right to know which categories of personal information we collect, request deletion, and opt out of any "sale" of personal information. Finvy does not sell personal information.

6.2 GDPR (EU and UK users)

If you reside in the EU, UK, or EEA, you also have the right to data portability, restriction of processing, and lodging a complaint with your supervisory authority. Email hello@finvysmartbudgeting.com to exercise any of these rights.

7. Children

Finvy is not directed at children under 18 and we do not knowingly collect data from minors. If you believe a minor has created an account, contact hello@finvysmartbudgeting.com and we will remove it.

8. Changes to this policy

We will update this page when our practices materially change. The effective date at the top tells you which version is current. Significant changes will be notified by in-app banner and email at least 30 days before they take effect.

9. Contact

Questions or requests: hello@finvysmartbudgeting.com. We reply within 30 days, faster for time-sensitive requests.