Privacy notice (draft)

1. What this document is

DollarSafe is a personal budgeting tool. This draft describes what data the product needs in order to answer one question — how much you can safely spend today — and what we intend to do and not do with it.

We make no compliance claims here. This draft does not assert SOC 2, ISO 27001, PCI DSS, GDPR or CCPA compliance, does not claim any certification or audit, does not claim a bank partnership or bank-level guarantees, and does not claim any insurance or deposit protection. If and when any such claim becomes true and verifiable, it will be stated here with evidence.

2. Data the product uses

• Account information you create: sign-in identifier and settings.
• Money data you enter in manual mode: balances, bills, income, savings goals, debts, transactions.
• Money data synced in connected mode: account balances, transactions and deposits, plus which accounts you chose to include.
• Product settings: budget cycle, account minimums, protected goals, emergency target, debt strategy, notification and appearance preferences.

DollarSafe does not need your Social Security number, your card numbers, or your bank login typed to support. Support will never ask for credentials.

3. Why it is used

• To compute Safe to Spend and the Plan breakdown.
• To explain changes to you in the "Why did this change?" log.
• To operate your account, including subscription status once billing exists.
• To fix bugs you report.

We do not sell your financial data. We do not use your transactions to target advertising.

4. Connected accounts

Connected mode requires a third-party aggregation provider to read balances and transactions. TODO Name the provider, link its own privacy terms, describe what it stores, and describe how to revoke access — once that provider is contractually final.

5. Retention and deletion

Our intent: your money data belongs to you, deleting your account deletes it, and export should be possible. TODO Exact retention windows, backup expiry, and the deletion request path are not finalised, so we are not stating numbers we cannot yet honour.

6. Security

Our intent is encryption in transit and at rest, least-privilege access to production data, and no plaintext credential storage. TODO Describe the actual implemented controls, key management, and internal access review process. Until that is written and independently checked, treat this section as an intention rather than a guarantee.

7. Your choices

• Use manual mode and connect nothing at all.
• Choose which accounts participate in the calculation.
• Correct or delete any transaction, bill, goal or account you entered.
• Turn notifications off.

8. Children

DollarSafe is intended for adults managing their own money. It is not designed for children.

9. Changes and contact

When this draft becomes a real notice, it will carry a version and an effective date, and material changes will be announced in the app. Questions can go to matthewriley2123@gmail.com — TODO placeholder address, not yet monitored.