Privacy Policy

Sign-in and information on your device

When you use Sign in with Apple, Fortune and Google’s Firebase Authentication receive account identifiers and the name and email address Apple shares. You can use Apple’s Hide My Email option. These details authenticate you, maintain your account, and may prefill an optional display name. Apple may supply your name only when you first authorize sign-in. You can skip entering a display name or change it later.

Profile and planning information you enter—such as an optional display name, income settings, priorities, budgets, and goals—is stored on your device for setup, greetings, and calculations. Fortune does not ask for your date of birth in account or profile setup. This update removes birthday values saved by earlier builds from the app’s local preferences. Saved financial records include account details, balances, transactions and merchant purchases, categories, recurring bills, and related calculations. The app also keeps local bank-response snapshots and synchronization status.

Preferences, feature-use counts, financial-score and check-in history, and reminder settings are stored locally. Fortune also keeps a first-use date on your device, associated with your account. If an earlier build saved a start date, that original date is preserved when you update. This date does not expire your access and is not sent to Fortune’s servers.

Your device also keeps your account identifier, the versions and fingerprints of legal documents you acknowledged, the time of acknowledgement, and a yes/no record of your declaration that you are at least 18. The declaration is saved with your account’s legal acknowledgement on that device; it does not include a date of birth and is not sent to Fortune’s servers. Fortune does not currently synchronize that acknowledgement record or provide its own cloud backup and restoration of your transaction history.

Bank connections and financial information

When you authorize a bank connection, Plaid and your financial institution handle the connection process and retrieve the financial information you authorize. Fortune does not receive your bank username or password from Plaid. Its backend does retain bank-access tokens that allow it to retrieve information from an authorized connection.

Account names and types, institution details, masked account identifiers, balances, transactions, merchant purchases, and related financial information pass from Plaid through Fortune’s backend to your app when you synchronize. Fortune uses this information to display accounts, organize spending and purchase history, and calculate budgets, estimates, and money insights. The backend does not maintain a database of your balances and transaction history for cloud restoration.

The backend stores your account’s association with a bank connection, institution and connection identifiers, bank-access tokens, and operational records. We send Plaid your Fortune account identifier to associate bank connections with your account. Operational records include synchronization times, request identifiers, progress cursors, completion and retry status, and usage limits. They support synchronization, prevent duplicate requests and abuse, apply the limit of one sync per bank connection in a rolling 24-hour period, and recover interrupted requests.

Plaid can also collect a phone number in its returning-user connection flow, persistent device or installation identifiers, connection-session information, interactions with the bank-linking interface, and technical diagnostics. These can be associated with you, your device, or your bank connections. Plaid uses information for connection functionality, security, fraud prevention, support, and analytics to improve and develop its services. Its uses of financial information and purchase history also include insights and personalization described in its End User Privacy Policy.

Security and diagnostics

Apple and Firebase process authentication, network, and app/device-integrity information to protect access and detect abuse. Plaid collects bank-linking interactions and diagnostics, and Firebase Authentication collects SDK diagnostics, including for analytics. These provider activities are separate from Fortune’s local feature-use counts.

Fortune’s server services retain request information such as IP address, device/browser software information, request time and endpoint, response status, duration, and request or response size. These records help secure the service, investigate failures, and maintain performance. Application logging is designed to exclude bank-access tokens and transaction payloads.

Fortune version 1 is free, has no access expiration, and does not offer an in-app purchase or require payment details. Purchase history described in this policy includes merchant purchases in your connected bank transactions; it does not mean you must buy anything from Fortune.

Your Fortune PIN is stored as a salted hash in the device Keychain. For Face ID or Touch ID, iOS reports whether authentication succeeds; Fortune does not receive your face or fingerprint template. Local reminders depend on notification permission, and device settings control what appears on your lock screen.

Website, waitlist, and support

Netlify hosts myfortune.io and processes its waitlist forms. If you join, we receive your email address to manage the waitlist and send the launch updates you requested. Joining is separate from creating an app account. Ask us to remove you at any time by emailing gsostre@yourpodo.com.

Netlify processes network and request information to deliver and protect the site, such as IP address, browser information, requested pages, and logs. Pages that load Google Fonts send Google the network and browser request information needed to deliver those fonts. These website requests are separate from the app’s bank and account records.

When you contact us, we and our email provider handle your address, message, and information you include to respond and manage your request. Please do not email bank passwords, full payment-card numbers, app PINs, or other authentication secrets. We do not use support or waitlist information for advertising or unrelated marketing.

Sharing and service providers

Information is shared as needed for the purposes described here:

• Apple supports sign-in, app distribution, device security, and optional device services. See Apple’s Privacy Policy.
• Google/Firebase provides authentication, app-integrity checks, backend processing, restricted server storage, and diagnostics. See Firebase’s privacy and security information.
• Plaid and your financial institutions support bank connections, financial-data retrieval, connection analytics, and related services. See Plaid’s End User Privacy Policy.
• Netlify, Google Fonts, and our email provider deliver the website, process waitlist submissions, serve fonts, and handle correspondence. See Netlify’s Privacy Statement and Google’s Privacy Policy.

We require third parties receiving information through Fortune to protect it at least as well as described in this policy and as required by applicable platform rules and law. Information processed on our behalf is subject to the providers’ applicable confidentiality, security, and data-protection terms. Some providers also process information for their own disclosed purposes, such as Plaid’s service development and Apple’s account records. Their notices explain those practices; using a provider does not remove our responsibilities.

We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights and security, investigate misuse, or transfer the service in a business transaction subject to applicable protections. We do not sell personal or financial information or share it for targeted advertising. A new purpose that requires your permission will require a separate choice.

Storage and protection

Fortune uses iOS security features, protected credentials, encrypted network connections, and restricted backend access. These safeguards reduce risk; no storage or transmission system is completely secure. Keep your device and Apple Account secure and avoid sharing your Fortune PIN.

Providers may process information in the United States and other countries where they operate. Their terms describe relevant transfer protections. Device or computer backups may contain app data depending on your settings. Fortune’s deletion process cannot erase copies in backups you or another provider control, or remotely wipe saved app data from another device.

How long information is kept

• On your device: Saved records remain until you remove them, reset local data, or complete account deletion on that device. A security reset after repeated failed unlocks can also erase local records. Logging out keeps local information. Removing the app does not delete your server account or revoke a bank connection; some device-protected information or backups may remain separately.
• Active server records: Account, bank-connection, and operational records remain while needed to provide and protect Fortune, including until account deletion removes the associated active records. Some synchronization and quota records are replaced during use; they do not all expire automatically.
• Server backups: The server database has weekly backups retained for 60 days. Account deletion removes active records but does not immediately erase copies in existing backups; those backups expire under that schedule.
• Server logs: Ordinary request logs are configured for 30-day retention. Required administrative and system audit logs are retained for 400 days. These categories are separate from financial records and are not removed immediately by account deletion.
• Deletion-completion record: A restricted record with hashed identifiers, completion status, and timestamps authenticates deletion retries and prevents late account activity. It does not contain your name, email, bank-access credentials, or transaction history. It is pseudonymous rather than necessarily anonymous and currently has no scheduled expiration.
• Waitlist and support: Waitlist submissions remain with our website service until we remove them. We keep them while needed for requested launch updates, or until you ask to be removed. Support correspondence is kept as needed to handle requests, document their resolution, protect the service, and meet legal obligations. These records do not have a single automatic expiry period.

Provider retention is separate. Firebase states that deleted authentication information is removed from its live and backup systems within 180 days after deletion is initiated, and logged authentication IP addresses are retained for a few weeks. These periods do not describe all Fortune server records. Plaid may retain information for other active connections, requested services, legal requirements, fraud prevention, and other policy exceptions. Banks, Apple, Netlify, and other providers maintain records under their applicable terms. Specific legal obligations may also require retention.

Your choices and account deletion

You can edit locally stored profile and financial information using available app controls and change notification or biometric permissions in iOS Settings. Bank access is authorized separately through the connection flow. Manage eligible connections through Plaid Portal or your bank’s controls, or contact us for help withdrawing access.

To delete your Fortune account, open Settings in Fortune and choose Delete Account. After identity verification, this process revokes Fortune’s bank connections, removes your active authentication account and associated server records, and clears app-held financial, security, first-use, preference, and acknowledgement data on the device where deletion completes. Let the deletion flow finish. If interrupted, resume deletion or use the offered retry. Contact us if you cannot finish.

Logging out, removing a local bank entry, resetting local data, or uninstalling does not itself revoke a server-side connection or delete your Fortune account. Deletion of active records is separate from the backup, log, deletion-receipt, and provider retention above. Use the relevant device’s controls for data saved on another device.

This free release does not create a subscription. If you used an earlier Fortune service billed through Stripe, the current deletion flow does not cancel that billing or erase Stripe’s external records; contact us for assistance.

Privacy requests

Email gsostre@yourpodo.com to ask about your information or request access, a copy, correction, deletion, or help withdrawing a permission. Depending on where you live, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent where processing relies on it, or complain to a data-protection authority. Withdrawal does not change the lawfulness of earlier processing.

We may need to verify your identity and clarify a request before acting. Legal exceptions may limit requests. Some records may need to be requested directly from a provider, but we will handle requests for which Fortune is responsible. You do not need to accept new terms or keep using the app to request deletion.

Children

Fortune is intended for adults aged 18 and older and is not directed to children. Before continuing with a signed-in account, you must confirm that you are at least 18. This is your own declaration; Fortune does not verify your age or identity through this checkbox. Try Demo remains available without signing in. We do not knowingly collect personal information from children. If you believe a child has provided information, email gsostre@yourpodo.com so we can investigate and take appropriate action.

Changes to this policy

Updates will appear on this page with a revised effective date and version. We will explain material changes and provide additional notice or obtain permission where required before a new use begins. Acknowledging this policy means it was made available to you; it is not consent to advertising, a bank connection, unrelated sharing, or a payment.