Privacy Policy

Last updated: June 10, 2026

Ashbloom ("we," "us") is a personal-finance application that helps you track net worth, set goals, and receive AI-assisted financial coaching. This policy describes what data we collect, how we use it, and the controls you have. Ashbloom is currently in pre-launch development.

Information we collect

Account information: your email address and authentication credentials (passwords are hashed; we never see or store them in plain text).
Financial profile: information you provide directly, such as household income, monthly expenses, filing status, and financial goals.
Linked account data via Plaid: if you choose to connect bank accounts, we receive account names, types, and balances through Plaid. We never see or store your bank username or password — credentials are handled entirely by Plaid.
Payment information: subscriptions are processed by Stripe. Card details never touch our systems.

How we use your information

To provide the product: net-worth tracking, goal progress, and projections.
To generate financial coaching content: we send pre-computed financial metrics (such as totals, ratios, and goal progress) and account names/balances to Google's Gemini API to produce your reviews and chat responses. We use a paid API tier on which Google does not use submitted data to train its models.
To operate, secure, and improve the service.

We do not sell your personal information.

Service providers

We use a small set of infrastructure providers to operate the service: Supabase (database and authentication), Vercel (application hosting), Plaid (bank account connectivity), Stripe (payments), and Google (AI generation). Each receives only the data required for its function.

Data security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to your records is enforced at the database layer so that only your authenticated account can read your data. Bank access tokens are stored server-side only and are never exposed to your browser.

Data retention and deletion

Your data is retained while your account is active. You can delete your account at any time from your profile settings, which permanently deletes your financial data — accounts, balances, goals, coaching history, and linked-institution records — via cascading deletion. AI-generated weekly reviews are replaced on a rolling basis and expire automatically.

Your choices

You can use the product without linking any bank account.
You can unlink a connected institution at any time, which removes its data.
You can delete your account and all associated data at any time.

Children

Ashbloom is not directed to children under 13 and we do not knowingly collect their data.

Changes

We will update this page when our practices change and revise the date above.

Contact

Questions about this policy or your data: [email protected]