Privacy Policy

Information we collect

Account information. Your email address. If you sign in with Google, your name, email address, and profile photo from your Google account. If you add a passkey, its public key and a name for it; the private key never leaves your device.

Financial information, through Plaid. When you connect a bank, you sign in to it through Plaid Inc. (“Plaid”), and we never see or store your bank username or password. With your permission, Plaid sends us your account names, types, and masked numbers; balances; and transactions (date, amount, description, merchant, and category).

Information you enter. Planned bills and income, budgets, categories, tags, and settings such as your time zone and notification preferences.

Technical information. Our servers log requests (for example time, address, and errors) to keep the service running and secure. We use cookies only to keep you signed in and remember your preferences. We do not use advertising or third-party analytics trackers.

How we use it

• To provide the service: put your transactions on the calendar, forecast your balance, match transactions to the bills you’ve planned, and show your budgets and reviews.
• To send the emails you ask for: sign-in codes, security alerts, and notifications you can turn off in Settings.
• To keep your account and the service secure, and to investigate abuse.
• To answer you when you contact us, and to meet legal duties.

We do not sell your personal information, share it for advertising, or use your financial data to train AI models.

Houston, the optional assistant

Houston is off unless you turn it on in Settings. While it is on and you ask it something, the parts of your Astromoney data it needs to answer (for example your forecast, transactions, and planned items) are sent to a language model running on Amazon Bedrock, in our own Amazon Web Services account. Conversations are not stored, and Amazon does not use them to train models. You can turn Houston off at any time.

Who we share it with

We share information only with service providers that process it on our behalf, under contracts that limit their use of it:

• Plaid, to connect your bank accounts. Plaid’s handling of the data it collects is described in the Plaid End User Privacy Policy.
• Amazon Web Services, which hosts the service, stores our data, and runs Houston through Amazon Bedrock.
• Google, if you choose to sign in with Google.
• Resend, which delivers our email.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

How we protect it

All data is encrypted in transit (TLS 1.2 or later) and at rest. Bank access tokens are additionally encrypted with separate keys. Our database is not reachable from the internet, access to production systems is limited and protected with phishing-resistant multi-factor authentication, and connecting a bank requires a passkey. No system is perfectly secure, and if a breach affects your information we will notify you as the law requires.

How long we keep it

• Bank data is kept until you remove that connection or delete your account. Removing a connection revokes our access at Plaid and deletes its accounts and transactions.
• Everything else in your account is kept until you delete it or your account.
• Server logs are kept for 30 days, and database backups for 14 days, after which deleted data is gone from them too.

Your choices and rights

• Disconnect a bank at any time in Settings → Connections.
• Delete your account in Settings → Account, or by emailing support@astromoney.app from your account’s address. Your data is deleted right away, and every bank connection is revoked at Plaid. Copies in our database backups expire within 14 days after that.
• Access or correct your information by emailing us. Most of it you can see and edit in the app.
• Emails: turn notifications off in Settings. We still send sign-in codes and security alerts.

Depending on where you live (for example California), you may have further rights, such as to know what we collect and to not be discriminated against for exercising your rights. We honor these requests for every user, wherever they live, and respond within 30 days.

Children

Astromoney is for people 18 and older. We do not knowingly collect information from children; if we learn we have, we delete it.

Changes to this policy

If we change this policy, we will update the date above, and for material changes we will tell you by email or in the app before they take effect.

Contact

Questions or requests: privacy@astromoney.app. See also our Terms of Service.