Legal

Privacy Policy

Last updated July 1, 2026

Your financial data is about as personal as data gets. This policy explains — in plain language — what feels.money collects, why, who touches it, and the controls you have. The short version: we collect only what the product needs, we never see your bank credentials, we never sell your data, and you can export or delete everything yourself.

1. What we collect

Account information. Your name, email address, a hash of your password (never the password itself), and your plan and settings.

Financial data, via FeelConnect. When you connect an institution, we receive the data you approve: account names and types, balances, transactions, and — depending on what you connect — holdings, liabilities, and recurring payments. We also compute derived data from it, such as your net worth history and financial health score.

What you tell us. Goals you set, journal and mood entries, messages you send the AI coach, and feedback you submit.

Usage and device data. Standard logs (IP address, browser type, pages viewed, timestamps) used for security and to keep the service working. We do not use third-party advertising trackers.

2. What we never collect

We also do not collect precise location, contacts, or anything from your device beyond what is listed above.

3. How we use your data

  • to show you your finances — balances, spending, trends, goals;
  • to power features you use: categorization, subscription detection, health score, forecasts, reports, and the AI coach;
  • to send notifications you control — bill reminders, weekly reports, unusual activity — with per-type switches in settings;
  • to secure accounts, prevent abuse, and debug problems;
  • to bill paid plans and comply with legal obligations.

We do not use your data for advertising, and we do not build profiles of you for anyone else.

4. How the AI sees your data

When you ask the coach a question, we build a compact, minimized summary of your finances — rounded balances, cash-flow figures, goals, top merchants. That summary and your question are sent to our AI provider to generate the answer. Account numbers, credentials, and access tokens are never included.

Your data is not used to train AI models — ours or anyone else's. Coach conversations are stored in your account so you can revisit them, and are deleted with your account.

5. Who we share data with

We share personal data only with the subprocessors that run the service, and only what each needs:

  • FeelConnect — connects to your financial institutions and supplies your account data. It holds the institution-side connection; feels.money holds an encrypted access token.
  • Animica AI — processes the minimized financial summaries and your questions to generate coach responses and insights. No training on your data.
  • Stripe (where card billing is enabled) — processes payments. Your card number goes to Stripe directly and never touches our servers.

Beyond subprocessors, we disclose data only if the law compels us to (we will notify you unless legally barred), to protect against fraud or abuse, or — if feels.money is ever acquired — to a successor bound by this policy, with notice to you first.

6. How we protect it

  • Connection tokens and other secrets encrypted at rest with AES-256-GCM; passwords stored only as bcrypt hashes;
  • TLS encryption for all data in transit;
  • passkey and two-factor authentication options on every account;
  • access to production data restricted and logged.

Details live on our security page. If a breach ever affects your data, we will notify you promptly and tell you plainly what happened.

7. How long we keep data

We keep your data while your account is active, so the product can show you history and trends. Disconnecting an institution stops new data from flowing and revokes the token; previously synced history stays in your account until you delete it or your account. Security logs are kept up to 12 months.

8. Export and deletion

Export. Download a complete copy of your data from settings at any time.

Deletion. Deleting your account permanently removes your personal data from our systems within 30 days and revokes your connection tokens at FeelConnect immediately. Residual copies in encrypted backups age out within 35 days. The only things we may retain are records the law requires (such as billing records) and minimal fraud-prevention data.

9. Your rights

Depending on where you live (GDPR in Europe, CCPA/CPRA in California, and similar laws elsewhere), you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. The export and delete controls in settings cover most of these directly; for anything else, email privacy@feels.money and we will respond within 30 days. We do not discriminate against you for exercising any right.

10. Cookies

We use only functional cookies: your session, your theme preference, and security protections (like CSRF tokens). No advertising cookies, no cross-site tracking, and nothing that requires a cookie banner ballet.

11. Children

feels.money is for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we will delete it.

12. Changes to this policy

If we make material changes, we will notify you by email or in the app at least 30 days before they take effect, with a plain summary of what changed. The current version always lives at this address.

13. Contact

Privacy questions and requests: privacy@feels.money. Legal: legal@feels.money. Security: security@feels.money.