Privacy Policy

We collect only what we need to provide the Service:

• Account information. Email address, display name, and authentication credentials you provide when creating an account.
• Household data. Household name, category labels, and invitations you send to other members.
• Financial data you enter. Account nicknames, balances, income entries, recurring expenses, payment records, and notes. You choose what to enter; we do not require real bank credentials to use the Service.
• Bank connection data (optional). If you connect a financial institution through our aggregation partner (e.g., Plaid), we receive account metadata, balances, and transactions from that partner. We never receive or store your bank login credentials — those are handled directly by the aggregator.
• Technical data. Standard log data such as IP address, browser type, device information, and timestamps, used for security and to keep the Service running.

• To provide, maintain, and improve the Service.
• To authenticate you and secure your account.
• To send transactional messages (invites, password resets, security notices).
• To detect, prevent, and respond to fraud, abuse, or technical issues.
• To comply with legal obligations.

We do not sell your personal information. We do not use your financial data for advertising, and we do not share it with data brokers.

We share information only in these limited cases:

• Household members. Data you enter in a shared household is visible to other members of that household.
• Service providers (subprocessors). We use a small set of vendors to run the Service, including hosting, database, email delivery, and — if you opt in — a bank aggregation partner. These providers process data on our behalf under contractual protections.
• Legal requirements. We may disclose information when required by law or to protect rights, safety, or property.
• Business transfers. If Impact Over Income is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We retain your account and household data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required for legal, security, or fraud-prevention purposes.

• Access and update. You can view and edit your data directly in the app.
• Delete. You can request account deletion at any time by contacting us at the address below.
• Disconnect bank connections. If you connected a financial institution, you can disconnect it in Settings, which revokes access with our aggregator.
• Regional rights. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA (e.g., access, correction, deletion, portability, objection). Contact us to exercise them.

We use industry-standard safeguards, including encryption in transit (TLS), encryption at rest for stored data, role-based access controls, and row-level authorization so household data is only accessible to members of that household. No system is perfectly secure; we cannot guarantee absolute security, but we work continuously to protect your information.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

The Service is operated from the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S. and other countries where our service providers operate.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email.

Questions or requests? Email hello@impactoverincome.com.