Privacy Policy

Overview

Superfin ("we", "us") helps you understand your finances by analyzing your bank transactions. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

• Account data you provide: email and authentication credentials.
• Financial data accessed with your permission through our data provider, Plaid: account balances, transactions, and account metadata.
• Usage data: how you interact with the app, for reliability and product improvement.

How we connect to your bank (Plaid)

We use Plaid Inc. to securely connect to your financial institution. You enter your bank credentials directly with Plaid — we never see or store your bank login credentials. Plaid's handling of your data is governed by the Plaid End User Privacy Policy.

AI-powered features

Superfin's in-app assistant lets you ask questions about your money. To answer them, the relevant transaction data needed for your request is sent to our AI provider, Anthropic (the maker of Claude), which processes it to generate a response. Under Anthropic's commercial API terms, your data is not used to train their models. We send only what's needed to answer your question, and never your bank login credentials.

How we use your information

• To provide the core product: spending insights, subscription detection, and savings recommendations.
• To answer your questions about your finances within the app.
• To secure, maintain, and improve the service.

We do not sell your personal or financial data.

Service providers we work with

We share data with vendors only as needed to run Superfin, under agreements that limit their use of it:

• Plaid — secure bank connectivity.
• Anthropic — the AI that powers the in-app assistant (see above).
• Stripe — payment processing for subscriptions. Your full card number is handled by Stripe and never reaches us.
• Supabase — authentication and secure data hosting.
• PostHog and Google — analytics (with your consent; see below).

Cookies & analytics

With your consent, we use cookies and similar technologies to measure traffic and understand how Superfin is used so we can improve it. We rely on:

• PostHog — product analytics (which features are used, where people get stuck). We do not send your bank balances, transaction amounts, or account details to it.
• Google Analytics & Google Ads — to measure marketing and understand how visitors find us. We use Google Consent Mode, so no advertising or analytics cookies are set until you accept.

Essential cookies needed to sign in and keep the app working are always on. Analytics and advertising cookies are off by default and load only after you accept. You can change your choice anytime: Manage cookie preferences.

Data retention & deletion

We retain your data while your account is active. You can disconnect a linked institution at any time, and you may request deletion of your account and associated data by contacting us. Upon deletion we remove your data from active systems within a reasonable period, subject to legal retention requirements.

Your rights

Depending on where you live (e.g., under GDPR or CCPA), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Contact us to exercise these rights.

Security

We use industry-standard safeguards including encryption in transit and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.

Children's privacy

Superfin is not directed to children. You must be at least 18 years old to use it, and we do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time. We'll revise the effective date above and, for material changes, provide additional notice. Continued use after an update constitutes acceptance.

Contact

Questions about this policy? Email support@superfinapp.com.