Privacy Policy

TODO — lawyer review required before launch. This is a plain-language draft, not legal advice. Canada's PIPEDA applies: we must explain what personal information is collected, why, how it is protected, how long it is kept, and how users can access or delete it.

What we collect

Your email address (for sign-in via magic link).
Spending profiles and wallet configurations you save.

What we don't collect

No bank credentials, no account numbers, no transaction imports.
We never sell personal information.

Your rights

You may request a copy or deletion of your data at any time. TODO: add the contact address and the deletion workflow.

Data retention

TODO: define retention periods and the deletion procedure.