Privacy Policy
Effective December 1, 2026 · Romeo Soria Jr., doing business as Platypurse
Who we are
Platypurse is a budgeting app at platypurse.app. It lets you divide the money in your own bank account into pouches and nests, using balances and transactions your bank shares through Plaid. Platypurse is run by Romeo Soria Jr., a sole proprietor in California, doing business as Platypurse ("we", "us").
Platypurse is offered only to people in the United States. Our database is hosted in the United States; the companies that help us run the service may process data in other countries where they operate.
This policy explains what we collect, why, who helps us run the service, how long we keep it, and the choices and rights you have.
What we collect
Your account. Your email address and your password. Sign-in is handled by Supabase. When you sign up, sign in or change your password, the password passes through our servers to Supabase over HTTPS; we never store or log it, and Supabase stores only a hash of it.
Bank data through Plaid. When you connect a bank (and, if you choose, a credit card), Plaid shares with us:
- your accounts: name, the last few digits of the account number, and type
- balances
- transactions: date, amount, merchant name, category, and whether it is still pending
We do not receive or store your bank login, your full account number or your routing number.
Billing through Stripe. You pay on a page run by Stripe. We never see or store your card number. We keep your Stripe customer and subscription IDs, the subscription's status and when the current paid period ends.
What you create. Your pouches and nests (names, descriptions, goals, schedules and the amounts in them), the labels you put on transactions, your settings, and the history of money moved in and out of each pouch and nest.
Technical data. Our servers log requests (for example the time, the page or API route, and the result) to keep the service secure and working. We use a few strictly necessary cookies: the sign-in session, a note that you have signed in before, and a once-a-day marker for refreshing your balance. We do not use advertising or analytics trackers. Stripe's payment page and Plaid's bank connection window are run by those companies, and they may set their own cookies there.
Waitlist. If you joined the waitlist before launch, we have your email address, when you joined, and which page sent you.
How we use it
- To run Platypurse: show your balances and transactions, fund your pouches and nests each day, and work out what is left to spend.
- To suggest a pouch for new transactions, if auto-assign is on (see below).
- To sign you in, send account email (such as confirming your address or resetting your password), and keep your account secure.
- To bill your subscription.
- To find and fix problems, prevent abuse, and meet legal obligations.
We do not use your data for advertising, and we do not use it to make decisions about you that have legal or similar effects.
Service providers
These companies handle data so that we can run Platypurse. Supabase, Anthropic, Cloudflare and Resend process it on our behalf. Plaid and Stripe process it on our behalf and also use it for their own purposes, such as preventing fraud and meeting their legal obligations, under their own privacy policies: Plaid's End User Privacy Policy and Stripe's Privacy Policy.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database and sign-in | Everything stored in your account, including your email and password hash |
| Plaid | Bank connection (Transactions and Balance) | Your bank login, entered directly with Plaid; it returns your accounts, balances and transactions to us |
| Stripe | Billing | Your email, your card details (entered directly with Stripe), and your subscription |
| Anthropic | Suggests a pouch for a new transaction, only while auto-assign is on | For new, unlabeled spending: merchant name, amount and category. Also the names and descriptions of your pouches, a few recent transactions already labeled to each pouch (merchant name and amount), and some of your recent label changes (merchant name and the names of the pouches or nests involved). We do not send your email, your account details or your balances |
| Cloudflare | Hosting | Every request to platypurse.app, including your IP address, and the waitlist |
| Resend | Account email | Your email address and the message we send you |
About auto-assign. Auto-assign is on for new accounts. When your bank sends new transactions (after the first import), we send the data listed above to Anthropic, and it suggests a pouch for each spending transaction or none. Suggestions are marked so you can check them.
Merchant names, and the pouch names and descriptions you write, are sent as they are. They include anything your bank or you put in them, such as a person's name on a payment-app transfer.
Under its commercial terms, Anthropic does not use this data to train its models. It deletes the data within 30 days, unless it needs to keep it longer to investigate misuse or meet a legal obligation.
You can turn auto-assign off at any time in Settings → Saving → Auto-assign transactions; while it is off, nothing is sent to Anthropic.
We don't sell or share your personal information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only:
- to the companies listed above, to run Platypurse
- when the law requires it
- to a new owner, if Platypurse changes hands (see below)
Do Not Track and Global Privacy Control
We do not track you across other websites, and we do not let advertising networks collect information about what you do on Platypurse. Because of that, Platypurse works the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal.
If Platypurse changes hands
If Platypurse is reorganized (for example, moved into a company we form), merged or sold, your information would pass to the new owner, which would be bound by this policy. We will tell you by email before that happens.
How long we keep it
- Your account data is kept until your account is deleted, and is then deleted. If you stop subscribing, we keep your account (your email, settings, pouches and nests) so you can come back, until you ask us to delete it.
- Bank connections. If your subscription stops being active, we remove your bank and card connections at Plaid 30 days later. Your accounts, balances and transactions are deleted. The money figures and history of your pouches and open nests reset, and labels on open nests are cleared; completed and archived nests keep their figures and history. The pouches and nests themselves stay, so you can connect again if you come back.
- Waitlist. We use the waitlist only to tell you that Platypurse has launched, and we delete it 30 days after launch. To be removed sooner, email support@platypurse.app.
- Backups. Our database is backed up daily, and each backup is kept for 7 days, so deleted data is gone from backups within 7 days.
- Billing records. Stripe keeps invoices and payment records as tax and accounting law requires.
- Logs are kept by Cloudflare and Supabase for up to 30 days, then deleted.
Your choices
- Disconnect a bank or card at any time in Settings → Bank. We remove the connection at Plaid and delete the accounts, balances and transactions it brought in. Disconnecting your bank also resets the money figures and history of your pouches and open nests and clears labels on open nests; completed and archived nests keep their figures and history, and the pouches and nests themselves stay.
- Turn off auto-assign in Settings → Saving.
- Delete your account by emailing support@platypurse.app from the address you sign in with. We reply to that address to confirm the request is yours. Within 14 days of your confirmation, we delete your account and everything in it, remove your bank connections at Plaid, and cancel your subscription.
- You can also revoke Platypurse's access to your bank at my.plaid.com.
Your privacy rights
Wherever you live in the United States, you can ask us to do the following:
- Know and get a copy. Tell you what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to, and give you a copy of it.
- Delete. Delete the personal information we hold about you, subject to legal exceptions (for example, billing records we must keep).
- Correct. Correct personal information that is wrong.
We will not charge you a different price or give you a different service for using these rights.
How to make a request. Email support@platypurse.app. We verify a request by confirming it at the email address you sign in with. You can use an authorized agent; we will ask for proof that you gave them permission, and may ask you to confirm your identity with us directly. We answer within 45 days, and tell you if we need more time.
California residents
If you live in California, here is the same information in the terms California privacy law uses:
- No sale or sharing. We do not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. We do not knowingly sell or share the personal information of anyone under 16.
- Financial information. Your bank data is financial information. We use it only to provide Platypurse to you. We do not use it to build a profile of you or to infer characteristics about you.
- What we collected in the last 12 months. The categories described in "What we collect": identifiers (email, IP address), financial information (bank accounts, balances, transactions), commercial information (your subscription), and internet activity (request logs). We collected them from you and, for bank data, from Plaid. We disclosed them only to the companies listed in "Service providers", for the business purposes described in "How we use it".
Security
We protect your data with:
- encryption in transit (HTTPS) and at rest
- database rules that let each account read and change only its own rows
- your sign-in session kept in secure, httpOnly cookies that scripts on the page cannot read
- bank access tokens readable only by our servers, never by the app in your browser
- rate limits against abuse
- multi-factor authentication on every provider account with admin access
- automated scanning of the software we depend on for known security issues
No system is perfectly secure. If a breach affects your personal information, we will tell you as the law requires. To report a security issue, email security@platypurse.app.
Children
Platypurse is not for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email support@platypurse.app and we will delete it.
Changes to this policy
If we change this policy, we will update the effective date at the top. If a change is material, we will tell you by email or in the app before it takes effect.
Contact
- Questions and requests: support@platypurse.app
- Security issues: security@platypurse.app