Privacy Policy
Effective: 2026-05-15
Faithful Finance (“we,” “us”) builds tools to help people steward their money. This policy explains what we collect, why, how we protect it, and what choices you have.
1. Information we collect
1.1 Information you give us
- Account details (name, email, password hash, optional church name, state, tithe goal)
- Household and family-member configuration you set up in the app
- Manually entered transactions, income sources, goals, debts, and budget categories
- Messages you exchange with the AI Coach
- An optional community username (you can stay anonymous in community features)
1.2 Information from your linked financial institutions (via Plaid)
When you connect a bank, credit card, or investment account through Plaid, we receive the account metadata (institution, account name, type, mask, balances), historical and ongoing transaction data, and investment holdings or transactions when you connect investment accounts. We do not receive or store your bank login credentials — Plaid handles authentication directly with the institution.
1.3 Information automatically collected
- Subscription status and billing identifiers (from Stripe)
- Usage telemetry: pages viewed, features used, AI token consumption (for cost controls)
- Standard server logs (IP address, user-agent, timestamps), retained briefly for security
2. How we use information
- To provide the budgeting, goals, debt-tracking, giving, retirement, and community features
- To generate personalized coaching, insights, and analytics
- To detect cheating in the rewards drawing, enforce daily AI-usage caps, and protect the service
- To process subscriptions and standalone course purchases
- To run the monthly gift-card drawing and fulfill prizes through our partner Tremendous
- To communicate with you about your account, security, and material product changes
We do not sell your personal information. We do not show third-party advertising inside the app, and we do not train external AI models on your financial data.
3. Third parties (subprocessors)
We use the following service providers to operate the app. Each is bound by contract to handle your information securely and only for the purpose of providing their service to us.
| Provider | Purpose |
|---|---|
| Plaid | Bank, credit, and investment account connectivity |
| Supabase | Database (Postgres), authentication, and storage |
| Vercel | Application hosting and serverless functions |
| Stripe | Subscription billing and payment processing |
| Anthropic | AI Coach inference (Claude models) |
| Tremendous | Gift-card fulfillment for monthly reward winners |
| Email provider | Transactional email (account, billing, drawing notifications) |
4. How we protect information
4.1 Encryption
- All traffic is encrypted in transit using TLS 1.2 or higher
- All data at rest is encrypted (AES-256 on managed infrastructure)
- Plaid access tokens are additionally encrypted at rest using AES-256-GCM authenticated encryption before being written to the database, and are never returned to the browser
4.2 Access control policy
Blue Collar Dev LLC (operating Faithful Finance) maintains a defined access control policy governing how user identities are authenticated, how access rights are assigned, and how access activities are monitored.
- Centralized identity management: All user identities — web and mobile — are managed through a single Supabase Auth tenant. Authentication flows (registration, login, password reset, email verification) are handled centrally with no fragmented identity stores.
- Per-request verification: Every API request is authenticated by validating a short-lived, cryptographically signed JWT issued by Supabase Auth. No implicit trust is granted based on network origin or session state alone.
- Role-based access control: Access to elevated administrative functions requires an explicit admin role attribute verified on every request. Standard user requests are scoped strictly to that user’s own data.
- Least-privilege credentials: Two credential tiers are enforced — a user-scoped key governed by Row-Level Security for all consumer operations, and a server-only service credential restricted to specific elevated functions that never reaches the client.
- Database-layer isolation: Row-Level Security (RLS) policies on every user-data table enforce data isolation at the database level, independent of application logic.
- Multi-factor authentication: TOTP-based MFA is available to all users and is actively surfaced at high-risk moments, including immediately after connecting a bank account via Plaid Link. Access to production infrastructure by personnel requires MFA.
- Session lifecycle: Sessions are managed centrally. Tokens are short-lived and refreshed automatically. Revocation propagates on the next request.
- Access monitoring: Authentication events, session activity, and access logs are captured through Supabase’s built-in auth logging, providing an audit trail for security review and compliance.
- Dependency monitoring: Vulnerability monitoring is enabled on our code repository to detect and remediate security issues in third-party dependencies.
5. Data retention
We retain your account information for as long as your account is active. When you delete your account, we remove your transactions, accounts, goals, debts, AI conversations, household configuration, and community contributions from production within 30 days. We revoke any connected Plaid items immediately. Limited records may persist in encrypted backups until those backups roll off (typically 30 days) or in audit-log entries we are legally required to keep (for example, financial records required by tax law).
6. Your rights and choices
- Access: view your information at any time inside the app
- Correction: update profile information in Settings; recategorize or edit transactions in Transactions
- Deletion: delete your entire account from Settings → Danger Zone; we will revoke Plaid connections and remove your data on our standard schedule
- Anonymity in community features: the default; set a community username only if you want to be identifiable
- Marketing email opt-out: unsubscribe links in every marketing email; transactional and security emails are not optional while your account is active
If you reside in California, the EEA, the United Kingdom, or another jurisdiction with comparable rights, you may also have the right to portability, restriction of processing, and to lodge a complaint with a regulator. Contact us to exercise any right that the in-app controls do not cover.
7. Children
Faithful Finance is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.
8. International users
Our service is operated from the United States. By using Faithful Finance you understand that your information will be processed in the United States.
9. Changes to this policy
We will update the “Effective” date above when we make changes. Material changes will be communicated by email and through an in-app notice before they take effect.
10. Contact
Privacy questions and rights requests: [email protected]
Security reports: [email protected]
This summary is provided for transparency. It is not legal advice. Consult an attorney if you need legal guidance on how this policy applies to your specific situation.