Privacy Policy

Last updated: June 20, 2026

Plain-language summary. Cents of Mind helps you budget by connecting to your bank through Plaid. We collect your account and transaction data to show you your spending and budgets, we never sell your data, and you can disconnect your bank or delete your account at any time. The full policy is below.

1. Who we are

Cents of Mind ("Cents of Mind," "we," "us," or "our") provides a personal budgeting application (the "Service") operated by [Company / Operator Legal Name], located at [Address]. This Privacy Policy explains how we collect, use, share, and protect information when you use the Service. If you have questions, contact us at [privacy@yourdomain.com].

2. Information we collect

Account & identity information. When you sign in, our authentication provider (Auth0) provides us with your identifier and email address, and, if you use a social login such as Google, your name and profile basics. We do not store your password; sign-in is handled by Auth0.

Financial account information (via Plaid). When you connect a financial institution, we use Plaid Inc. ("Plaid") to access information from your accounts. This may include account names, types, balances, masked account numbers, and transaction history (amounts, dates, merchant/description, and categories). We do not receive or store your bank login credentials — those are handled by Plaid.

Information you create. Budgets, categories, manual transactions, labels, recurring designations, and preferences you set in the app.

Usage & device information. Basic technical data such as IP address, browser type, and interaction logs, used for security, debugging, and improving the Service.

3. How we use information

To provide and operate the Service — syncing transactions, calculating budgets, and showing spending insights.
To authenticate you and keep your account secure.
To generate optional AI-assisted insights you request.
To maintain, debug, and improve the Service.
To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your financial data for advertising.

4. How we share information

We share information only with service providers ("sub-processors") that help us operate the Service, under contracts that require them to protect it:

Plaid — connects your financial accounts and provides transaction data. Plaid's handling of your information is governed by the Plaid End User Privacy Policy.
Auth0 (Okta) — authentication and login.
Supabase — database hosting for your budgets and synced data.
Netlify — application and serverless function hosting.
Anthropic — powers optional AI insights; only the data needed to answer your request is sent, and it is not used to train models.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a merger, acquisition, or sale of assets (with notice where required).

5. Plaid

By using the Service to connect a financial account, you also agree that Plaid may collect, use, and retain your data in accordance with the Plaid End User Privacy Policy. You can review and manage connections you've made through Plaid at my.plaid.com.

6. How we protect your information

We use industry-standard safeguards, including encryption in transit (HTTPS), encryption of sensitive access tokens at rest, access controls, and a strict content-security policy. No method of transmission or storage is 100% secure, but we work to protect your information and limit access to what is necessary to operate the Service.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you disconnect a financial institution, we stop syncing new data from it. When you delete your account, we delete or de-identify your personal information within a commercially reasonable period, except where we must retain it to comply with legal obligations.

8. Your rights and choices

Access & correction — view and edit your budgets and data in the app.
Disconnect — remove a connected bank at any time from the Accounts area.
Deletion — request deletion of your account and associated data by contacting [privacy@yourdomain.com].
California (CCPA/CPRA) — you have rights to know, delete, correct, and opt out of "sale"/"sharing." We do not sell or share your personal information as those terms are defined.
EEA/UK (GDPR) — where applicable, you have rights to access, rectify, erase, restrict, port, and object to processing. Our legal bases are performance of our contract with you, your consent (for bank connections and AI features), and our legitimate interests in operating and securing the Service.

9. Cookies

We use a single secure, httpOnly session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

10. Children's privacy

The Service is not directed to children under 13 (or the age required by your jurisdiction), and we do not knowingly collect their information.

11. International users

The Service is operated from the United States. If you access it from elsewhere, you understand your information may be processed in the United States.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and may ask you to re-accept the updated policy within the app.

13. Contact us

Questions or requests: [privacy@yourdomain.com].

This document is provided as a starting template and does not constitute legal advice. It should be reviewed by qualified counsel before public launch.