Privacy Policy
Last updated: October 2026
At PersonalFi.ai, we are committed to protecting your privacy and ensuring the security of your financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
1.1 Personal Information
- Name and email address when you create an account
- Phone number for account verification and security
- Profile information you choose to provide
- Communication preferences and support interactions
1.2 Financial Information
- Bank account information (routing and account numbers) through secure Plaid integration
- If you choose to connect them, Apple Card, Apple Cash and Apple Savings account details, balances and transactions from Apple Wallet (see section 3.2)
- Transaction data including amounts, dates, merchants, and categories
- Account balances and financial account details
- Income and expense information you manually input
- Financial goals and budgeting preferences
1.3 Technical Information
- Device information (IP address, browser type, operating system)
- Usage data and analytics to improve our service
- Cookies and similar tracking technologies
- Log files and error reports
2. How We Use Your Information
- Provide and maintain our financial tracking and budgeting services
- Process transactions and sync with your financial accounts
- Generate insights, reports, and recommendations
- Communicate with you about your account and our services
- Improve our platform and develop new features
- Ensure security and prevent fraud
- Comply with legal obligations and regulatory requirements
- Provide customer support and respond to inquiries
3. Plaid Integration and Security
Bank-Level Security Through Plaid
PersonalFi.ai uses Plaid, a leading financial technology company trusted by major banks and fintech companies, to securely connect to your financial accounts.
- No Credential Storage: We never store your banking usernames or passwords
- Encrypted Connections: All data transmission uses bank-level encryption (TLS 1.2+)
- Read-Only Access: We can only view your financial data, never make transactions
- SOC 2 Compliant: Plaid maintains the highest security standards
- Regular Audits: Third-party security audits ensure ongoing protection
3.1 Data Processing
- Financial data is processed in real-time to provide accurate insights
- Transaction categorization helps identify spending patterns
- Data aggregation enables comprehensive financial overview
- Historical data analysis supports trend identification and goal tracking
3.2 Apple Wallet (Apple Card, Apple Cash and Apple Savings)
On iPhone, you can choose to connect accounts you keep in Apple Wallet. This uses Apple's FinanceKit. Nothing is shared unless you say yes.
- You choose what to share. iOS asks for your permission and lets you pick which accounts to share and how far back. You can change this or turn it off at any time in the iPhone Settings app.
- What we read: for the accounts you pick, the account name and type, current balance, credit limit and available credit, and transactions (amount, date, merchant name, merchant category, status and description).
- Why we read it: only to show that card or account in PersonalFi, the same way we show accounts you connect through Plaid. It goes into your balances, your daily number, your budget, your card payoff plan and your transaction list, and it lets you reconcile those transactions.
- Where it goes: the app reads the data on your iPhone and sends it over an encrypted connection to your PersonalFi account, so it can show on your other devices and stay in sync. Apple does not see the data we receive, and Apple does not send it to us. Your iPhone does.
- What we never do with it: we never sell it, share it for advertising or marketing, use it to target ads, or use it to make credit, lending or eligibility decisions about you.
- Copilot: if you turn on Copilot, it can use these transactions to answer your questions, the same as your other transactions (see section 4.1).
- When you stop sharing: if you turn off access in Settings or disconnect the account in PersonalFi, we stop reading new data and delete the Apple Wallet data we stored for that account within 30 days. If a transaction is removed from Apple Wallet, we remove it from PersonalFi the next time we sync.
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
4.1 Service Providers
- Plaid: For secure bank account connection and data retrieval
- Apple (Apple Wallet): We don't send Apple any of your data to connect Apple Wallet accounts. Your iPhone gives the app what you allow (see section 3.2).
- Anthropic (Claude AI): Only if you turn on Copilot. To answer your questions, your question and the account and transaction data needed to answer it are sent to Anthropic to generate a reply. Anthropic does not use this data to train its models. We save your Copilot chats to your account so you can pick up where you left off; you can delete any chat at any time, and deleting your account deletes them all. Our team sees only how often Copilot is used, never what you asked. You agree to this in the app before your first question.
- Resend: To send account emails and, unless you unsubscribe, occasional emails about PersonalFi offers (your email address). Every offer email has a one-click unsubscribe link.
- RevenueCat: To process and manage App Store subscriptions (your account ID, email address and purchase history)
- Cloud Infrastructure: For secure data storage and processing
- Analytics Services: For service improvement (anonymized data only)
- Customer Support: For providing assistance and resolving issues
4.2 Legal Requirements
- When required by law or legal process
- To protect our rights, property, or safety
- To prevent fraud or illegal activities
- In case of business transfer or acquisition (with notice)
5. Data Security
Multi-Layer Security Protection
- Encryption: All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Access Controls: Strict role-based access with multi-factor authentication
- Network Security: Firewalls, intrusion detection, and monitoring
- Regular Audits: Security assessments and penetration testing
- Employee Training: Comprehensive security awareness programs
6. Data Retention
- Account information: Retained while your account is active
- Financial data: Retained for 7 years for regulatory compliance
- Transaction history: Available for the duration of your account
- Apple Wallet data: Kept while you share it. Deleted within 30 days after you turn off access or disconnect the account
- Deleted accounts: Data permanently removed within 30 days
- Backup data: Securely deleted according to retention schedule
7. Your Rights and Choices
7.1 Access and Control
- View and update your personal information
- Download your financial data in standard formats
- Disconnect linked financial accounts, including Apple Wallet accounts (in PersonalFi, or in the iPhone Settings app)
- Modify communication preferences
- Request data correction or deletion
7.2 Account Management
- Close your account at any time
- Export your data before account closure
- Opt out of marketing communications
- Control data sharing preferences
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and analyze service usage:
- Essential Cookies: Required for basic service functionality
- Analytics Cookies: Help us understand how you use our service
- Preference Cookies: Remember your settings and preferences
- Security Cookies: Protect against fraud and unauthorized access
You can control cookie settings through your browser, though some features may not work properly if cookies are disabled.
9. Children's Privacy
PersonalFi.ai is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately at privacy@personalfi.ai.
10. International Users
PersonalFi.ai is operated from the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: