Privacy Policy

Everything you enter to build your plan (accounts, balances, holdings, income, expenses, debts, scenarios and saved profiles) is stored in your browser's local storage and does not leave your device unless you use one of the features below. Clearing your data in Settings deletes it from that browser. Files you export are saved wherever you choose.

These only run when you use them.

AI profile drafting and What-If ("Describe it to AI"). We send your description and summary figures from your plan (age, retirement age, income, totals of assets, debts and spending, and the family status and location you entered; in Update mode, also the names and amounts of your existing items) to our server and to Groq, the AI provider, through Cloudflare AI Gateway, which keeps a log of these requests. We keep a copy of your description and the generated profile to improve the generator and the peer benchmarks, unless you turn off usage data or peer-comparison sharing in Settings. Please leave names, account numbers and other identifying details out of your description.

AI suggestions. Scenario suggestions and the written peer-comparison summary send summary figures from your plan, without item names. The portfolio advisor sends ticker symbols, weights and gains, not dollar amounts. Transaction categorizing sends merchant names and descriptions only. Answers may be cached on our servers for up to 30 minutes.

Peer comparison. When you click Compare, we add an anonymous copy of your profile (amounts by type, age, state, family status and cost-of-living tier) to the benchmark pool and keep it to build benchmarks. It is not linked to your name or email. You can turn this off in Settings, under Privacy & Consent.

Bank linking (Plaid). You sign in to your bank through Plaid; your bank login never reaches us. Plaid gives our server a read-only access token, which we keep while your bank is linked, for up to one year; disconnecting the bank in the app deletes it. We request up to 90 days of transactions. They are held on our server for up to 7 days, until your browser imports them, and are then stored only in your browser.

Stock and option prices. We send the ticker symbols you hold to our market-data provider to get prices, betas and dividends.

Feedback. When you send feedback we receive your text and rating, the screen you were on, your approximate location (city, region and country), a short list of your recent actions in the app (without amounts or names) and, if you ask us to let you know when it is resolved, your email. Feedback is shared with our team in a private chat channel and a private issue tracker.

Supporter membership and calls. To confirm supporter status, we keep the email you used with our membership payment provider, for up to one year after your last membership change. Booking a call sends your name, email and topic to our calendar.

Professional and employer interest forms. What you enter in these forms is shared with our team.

What: which features and screens you use and actions you take (such as adding an item or running a scenario; for some actions, the name or type you gave an item, a scenario amount, or the start of an AI description), the page you came from, your browser and device type, your approximate location (city, region and country, from Cloudflare and ipapi.co), a hashed device identifier and a hashed IP address. We also share AI descriptions and their approximate location with our team in a private chat channel.

Why: to see which features help, find bugs, and decide what to build next.

How long: detailed usage records are deleted after 90 days. Aggregate counts are kept.

Turning it off: Settings, under Privacy & Consent, Usage Analytics. It takes effect after the page reloads. While it is off, we do not send usage events, share AI descriptions with our team, or keep copies of AI-drafted profiles.

Like any website, our servers see your IP address. We use it for up to 24 hours to enforce daily limits on AI features, and store only a hashed form, with usage data and AI-drafted profiles.

These providers process data for us under their own terms:

• Cloudflare (hosting, servers, storage, AI Gateway and logs)
• Groq (AI)
• Plaid (bank linking)
• our market-data provider
• ipapi.co (approximate location)
• Trustpilot (the review widget, which loads from Trustpilot)
• Discord (team chat)
• GitHub (private issue tracker)
• our membership payment provider

• Turn off usage data or peer-comparison sharing in Settings, under Privacy & Consent.
• Skip the optional features above.
• Disconnect a linked bank in the app.
• Clear your data in Settings, or export it to a file first.

For any request, email [email protected]. Because FinP4l has no accounts, records on our servers are not tied to your name, so we may not be able to find yours. Tell us what you used (for example, the email you gave with feedback) and we will help where we can.

FinP4l is an educational modeling tool, not professional financial, investment or tax advice. Projections are estimates based on your inputs and assumptions, and actual results may vary significantly.

FinP4l is not intended for anyone under 18.

All connections to FinP4l use encrypted HTTPS, and access to our servers and data stores is limited to the team. No system is perfectly secure, so keep identifying details out of free-text fields.

We will update this policy when our practices change, and the date at the top will change with it. FinP4l is operated by DI SW, LLC. Questions: [email protected].