Privacy
We are not here to prove you have a spending problem.
You already know. That is why you came. Our job is to help you hold a limit you chose, which requires far less information about you than most money apps collect.
The principle: we connect to your financial accounts and process your transactions only when it is necessary to deliver the service you asked for.
Not to build a profile. Not to score you. Not to sell to anyone. There is no version of this business where your spending history is the product — if there were, the product philosophy on the homepage would be marketing rather than a description.
Today (Phase 1)
Currently in effectWhat we collect
- Your email address, if you join the waitlist. Used to tell you when there is something real to try.
- Waitlist survey answers, if you give them. Every question is optional.
- Calculator figures, only if you tick the box. Whole dollars, rounded — never cents, never linked to an account, because in Phase 1 there are no accounts.
- Anonymous funnel events — did someone start the calculator, finish it, join the list. Keyed to a random id that lives in your browser tab and is destroyed when you close it.
What we do not collect
- Any bank connection. There is no integration live. The calculator is arithmetic in your browser.
- Any transaction data. We cannot see what you spend, because nothing is connected to anything.
- Third-party trackers. No advertising pixels, no analytics SDKs, no session recording. The analytics are ours, minimal, and listed above.
- Your name, address, or phone number. We have not asked and do not need them.
Later (Phase 2)
Not in effect — nothing is builtWhen there is a real card, more data becomes genuinely necessary. Here is what and why, written now so it can be held against us later.
Identity information
Required by law before a regulated financial institution can open an account. Collected by, and largely held by, the partner bank — not accumulated by us for our own purposes.
A bank connection token
So the chosen limit can be moved onto the card each month. Provided through a service such as Plaid. SafeSpend never receives or stores your banking password, and the connection can be revoked from your settings at any time.
SafeSpend card transactions
The balance has to be decremented to enforce the limit, and you need to see your own activity. This covers purchases made on the SafeSpend card only — not your other accounts, not your other cards.
Your control settings
The limit, cap, cooldown threshold, and any queued changes. This is the guardrail itself.
Balance-checking is the exception. If we ever need to confirm funds are available before initiating a transfer, that check happens at that moment and for that purpose. It is not a standing licence to watch your account.
Closing your account disconnects the bank link, returns any remaining funded balance, and deletes the data we are not legally required to retain. Financial record-keeping obligations are real and we will state the exact retention periods in the full policy — vaguely promising to delete everything would be a lie.
This page is a statement of approach, not a legal policy
A full privacy policy and the associated disclosures will be published — reviewed by counsel experienced in banking and consumer fintech — before any bank account is connected or any card is issued. That is one of the explicit gates listed in the business plan.
Questions about any of this are welcome, and the answers become part of the policy.