Privacy
We are not here to prove you have a spending problem.
You already know. That is why you came. This page says plainly what we hold, at which point we start holding it, and what we will never do with it.
We connect to your financial accounts and process your transactions only when it is necessary to deliver the service you asked for.
Not to build a profile. Not to score you. Not to sell to anyone. There is no version of this business where your spending history is the product — which is precisely why you pay us directly.
What we hold, by what you use
Each step is a choice you make. Nothing below happens until you take the step that requires it.
Using the calculator
Nothing leaves your browserNo account, no sign-in, no transmission. The arithmetic runs locally. If you never tick the box to attach your figures to a waitlist signup, we never receive them, and closing the tab is the entire deletion process.
We do record anonymous counts — did someone start the calculator, did they finish it — keyed to a random id that lives in the tab and dies with it. It is never joined to your email.
Creating an account and joining the waitlist
- Email address — to sign you in and tell you when the card is real.
- Your name, if you give one. Optional.
- Survey answers, if you give them. Every question optional.
- Calculator figures, only if you tick the box — whole dollars, rounded, never cents.
Subscribing to Early Access
Payment is handled by Stripe. Your card details go to Stripe directly and never touch our servers — we hold a customer id, your subscription status, and when the period ends. We could not charge your card off our own records if we tried.
Connecting a bank account or credit card
The big oneThis is the step that gives us real visibility, so here is exactly what it means.
What it does
- Reads transactions and balances on the accounts you pick
- Lets us alert you about spending as it happens
- Feeds the spending summaries and payoff plans
What it does not
- Move money. The connection is read-only. It cannot initiate a payment.
- Give us your password. You authenticate inside the provider's own screen. We receive an opaque token, never a credential.
- Touch a card number. A credit card is connected as an account under your bank login — we never see or store a card number.
- Cover accounts you did not choose.
Alerts and AI features
Email and SMS alerts require your address or phone number, used for that and nothing else — no marketing blasts, and unsubscribe always works.
The spending summaries and payoff plans are generated from your transaction data. When that involves sending data to a model provider, it is sent for that request only, and never used to train anyone's model. The specific provider and the exact fields sent will be named here before the feature ships.
Commitments
Things we will not do.
- Sell or share your transaction data with data brokers, advertisers, or anyone else.
- Use your financial data to target you with offers, or take referral fees for products you did not ask about.
- Run third-party advertising pixels, analytics SDKs, or session recording on this site.
- Read accounts you did not explicitly connect.
- Make cancelling hard, or hide the disconnect button.
When the card exists
Not yet builtIssuing a real card requires more, and it is worth writing down now so it can be held against us later.
Identity information
Legally required before a regulated institution can open an account. Collected by, and largely held by, the partner bank — not accumulated by us.
Funding permission
Moving your chosen limit onto the card each month needs more than read access. That is a separate, explicit authorisation from the read-only connection described above.
SafeSpend card transactions
The balance must be decremented for the limit to work at all. This covers the SafeSpend card only.
Closing your account disconnects every linked account, cancels your subscription, and deletes what we are not legally required to retain. Financial record-keeping obligations are real, and the exact retention period per category will be stated in the full policy — vaguely promising to delete everything would be a lie.
This is a statement of approach, not yet a legal policy
A full privacy policy and the associated disclosures, reviewed by counsel experienced in consumer fintech, will be published before any card is issued. Connecting an account for tracking is a lighter matter than issuing a card, but it is not nothing, and the same review covers it.
The gates are listed in the business plan. Questions are welcome, and the answers become part of the policy.