Privacy Policy

What we collect

• Financial account data, through Plaid. When you connect a bank, credit card, or brokerage, Plaid gives us your account balances, transaction history, liabilities, and investment holdings. We receive this data. We never receive or store your bank username or password: you enter those with Plaid, not with us.
• Your account identity, through Clerk. Your email address and authentication details are managed by Clerk. We never see or store your password.
• What you tell us. Corrections, answers to our questions, planned events, and chat messages you send the in-app assistant.

Why we collect it

To produce your forecast and nothing else. Transactions become visible, editable assumptions. Balances set your starting point. Your corrections override our guesses. We do not build advertising profiles and we do not sell or rent your data to anyone, ever.

We are read-only

MMLP cannot move money. Every bank connection is read-only by design: we cannot initiate a transfer, make a payment, or place a trade, and no feature that would require write access to your financial accounts is in scope.

Who we share it with

Only the service providers we need to run the product. Each is an established provider maintaining its own SOC 2 Type II (or equivalent) attestation. We send each one the minimum data required.

We may also disclose data if legally required to do so. We will tell you unless we are legally prohibited from doing so.

How we protect it

• All traffic runs over HTTPS/TLS. Our domain is HSTS-preloaded, so browsers connect over HTTPS only.
• Your data is encrypted at rest in our database. Plaid access tokens get an additional layer of application-level AES-256-GCM encryption, with the key held in a secret store.
• Every table holding financial data enforces row-level security, so one household cannot read another household's rows. This is verified by an automated test.
• All Plaid and AI calls run server-side. Your browser never receives an access token.
• You can protect your account with multi-factor authentication and passkeys. We recommend both.

How long we keep it, and how to delete it

We keep your financial data only as long as we need it to produce your forecast.

• Transaction history older than 24 months is automatically purged. The forecast reasons over roughly 12 months of history, so we hold a margin beyond that and drop the rest.
• Disconnecting a bank revokes our Plaid access token for that institution and deletes its accounts and transactions from our database. Accounts, then Disconnect.
• Deleting your household revokes every Plaid token and permanently deletes all of your data: accounts, transactions, assumptions, chat history, and the household itself. Household, then Delete household. This cannot be undone.
• Deleting your account does the same thing, so you never have to do both. If you delete your sign-in account, we revoke every Plaid token and delete your household and everything in it. If you are a member of someone else's household, we remove you from it and leave their data alone. If the household's owner deletes their account, the household and its data are deleted for everyone in it.

You can also email us and we will do it for you. If you want a copy of your data before deleting it, ask and we will send it.

Your choices

You can see and correct every assumption the forecast makes. You can disconnect any account at any time. You can delete everything. If you are in a jurisdiction with data protection rights such as access, correction, portability, or erasure, we honor those requests for everyone rather than checking where you live first.

Children

MMLP is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy in a way that materially affects how we handle your data, we will tell you in the app before it takes effect.

Contact

Questions, requests, or anything that looks wrong: support@bananaintelligence.ai.