Privacy Policy

Account information. Your email address and password (stored only as a salted hash, never in plain text) when you sign up, plus an optional display name.

Financial data you connect via Plaid.If you link a bank or credit card account, Plaid Inc. shares your linked accounts, balances, and transaction history with us so the app can show them to you. We never see or store your bank login credentials — those are entered directly with Plaid or your institution. The access token Plaid gives us to keep your accounts in sync is encrypted at rest. Plaid’s own collection and use of your data is governed by Plaid’s privacy policy.

Financial data you enter yourself. Any accounts, transactions, budgets, bills, goals, and categories you add manually instead of (or in addition to) linking through Plaid.

Two-factor authentication (optional). If you enable it, we store an encrypted authenticator secret and hashed backup recovery codes.

Biometric unlock (mobile, optional).If you enable Face ID/fingerprint unlock, that check happens entirely on your device through your phone’s operating system. We never receive, see, or store your fingerprint, face data, or any biometric data — only a simple on/off preference is saved locally on your device, and it never leaves it.

Push notification token (mobile, optional).If you enable notifications, we store a device push token so we can deliver bill and budget reminders you’ve asked for.

Usage information. Basic technical data needed to operate the Service, such as when you last logged in.

We use the information above only to:

• Provide the Service — showing your accounts, transactions, budgets, bills, goals, net worth, and reports.
• Secure your account — password hashing, encryption of sensitive secrets, and optional two-factor authentication.
• Send account-related email, such as verifying your email address.
• Deliver push notifications you’ve opted into, such as bill reminders.

We do not sell your data, use it for advertising, or share it with data brokers. The Service contains no advertising or analytics/tracking SDKs.

We share data only with the service providers that help us run CFMoneyApp:

• Plaid Inc.— to link and sync bank/credit accounts you choose to connect.
• Resend— to deliver account emails, such as email verification.
• Our hosting providers(including Vercel and our own server infrastructure) — to run the website and API.

We may also disclose information if required by law, or to protect the rights, safety, or property of CFMoneyApp or our users.

We keep your data for as long as your account is active. You can permanently delete your account at any time from Settings in the web or mobile app. Deleting your account removes all of your accounts, transactions, budgets, bills, goals, and other associated data, and makes a best effort to revoke any linked Plaid bank connections.

We use industry-standard measures to protect your data: passwords are hashed (never stored in plain text), sensitive secrets such as Plaid access tokens and two-factor authentication seeds are encrypted at rest, and all traffic to and from the Service is encrypted in transit (HTTPS/TLS). No method of transmission or storage is 100% secure, but we work to protect your information using these safeguards.

CFMoneyApp is run by a single small operator (CF Technical IT Services, LLC), not a large team with separate departments. The admin tools we use day to day show only account-level information — email, signup date, and verification/two-factor status — never your transactions, balances, or account details.

Because we operate the server and database ourselves, we do have the underlying technical ability to access data stored in it, including your financial data. We don’t browse or monitor user data as a matter of routine, and we access it beyond the admin tools only when necessary to maintain the Service, investigate a reported problem, or as required by law.

CFMoneyApp is not directed at children under 13, and we do not knowingly collect information from anyone under 13.

If we make changes to this policy, we’ll update the “Last updated” date above. Continued use of the Service after a change means you accept the updated policy.

Questions about this policy or your data? Email privacy@cfmoneyapp.com.