Privacy Policy

Why I’m Richer (“we,” “us,” “our”) provides personal‑finance tools and an AI assistant that help you understand your money and plan your financial future. This Privacy Policy explains what we collect, how we use it, and the choices you have. By using our website and services (the “Service”), you agree to this policy.

1. Information we collect

• Account information — your email address and, if you provide it, your name.
• Financial account data — when you connect a bank, card, or other financial account through our aggregation partner Plaid, we receive read‑only information such as account names, balances, transactions, and account‑holder identity. We never receive or store your bank login credentials.
• Information you enter — assets, debts, bills, insurance, income, goals, and other details you add manually.
• Payment information — processed by our payment provider Stripe. We do not store your full card number.
• Usage data — basic technical and usage information (e.g., device, log data) to operate and secure the Service.

2. How we use your information

• To provide the Service — calculating your net worth, spending, cash flow, and financial projections.
• To power Atlas, our AI assistant, so its guidance reflects your real numbers.
• To process your subscription, provide support, and communicate with you.
• To secure, maintain, and improve the Service.

3. How we share information

We do not sell your personal information. We share it only with service providers who help us run the Service, under contract and only as needed:

• Plaid — connects your financial accounts. Plaid’s handling of your data is governed by its own privacy policy at plaid.com/legal.
• Stripe — processes payments.
• Supabase — database and authentication hosting.
• Anthropic — provides the AI model behind Atlas. Relevant context is sent to generate responses; it is not used to train third‑party models on your identifiable data.
• Vercel — application hosting.

We may also disclose information if required by law or to protect our rights and users.

4. Security

We protect your data with encryption in transit (TLS/HTTPS) and at rest, including AES‑256‑GCM encryption of sensitive access tokens. Access to your data is restricted by database row‑level security so you can only reach your own records. Financial‑account access is read‑only. No system is perfectly secure, but we work to protect your information using industry‑standard practices.

5. Data retention & deletion

We keep your information while your account is active. You can disconnect a financial account at any time, and you can request deletion of your account and associated data by emailing support@whyimricher.com. We will delete it except where we must retain limited records to comply with law.

6. Your rights & California privacy

You may access, correct, or delete your personal information. If you are a California resident, the CCPA gives you the right to know what we collect, to request deletion, to opt out of the sale of personal information (we do not sell it), and not to be discriminated against for exercising these rights. To make a request, email support@whyimricher.com.

7. Cookies

We use essential cookies to keep you signed in and to operate the Service. We do not use them to sell your data.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.

10. Contact

Questions about this policy? Email support@whyimricher.com.