Privacy Policy

Effective date: September 21, 2026 Applies to: getaurelo.app and the Aurelo mobile app

Plain-English summary: We collect what we need to run the App: account info, financial data you connect through Plaid, and basic device data. We do not sell your data. We do not share your data with advertisers. The only third parties we share with are the service providers we need to operate Aurelo (mainly Plaid, Supabase, RevenueCat, Resend, PostHog, and Google’s Firebase for crash reports). Other Aurelo users see your information only where you choose to share it, such as your profile or a budget you share with them. We also learn from spending patterns across many users — with the details that identify you removed — to make categorization and budgeting better. That data is not about you individually, we never re-identify it, and it is never sold or shared. You can request a copy of your data, ask us to delete it, or opt out of any future sales — though we don’t sell.

1. Who We Are and How to Contact Us

This Privacy Policy describes how Aurelo collects, uses, shares, and protects personal information about you when you use the Aurelo mobile app (the “App”) or the Aurelo website at getaurelo.app (the “Website”). For purposes of applicable U.S. state privacy laws, Aurelo is the “business” or “controller” of your personal information.

Privacy questions or requests:

Email: support@getaurelo.app Subject line for privacy requests: “Privacy Request”

2. Information We Collect

2.1 Information you provide

• Account information: first name (optional), last name (optional), display name, username, email address, and a password (which we store only as a salted cryptographic hash). If you sign in with Google or Apple instead of a password, see Section 2.5.
• Profile information: any optional information you add such as savings goals, household composition, money goals, language preference, and avatar.
• Budget content: pockets you create, allocations you set, savings goals, notes, and tags you enter.
• Communications: the contents of emails you send to support@getaurelo.app or other support addresses, and feedback or problem reports you send from the App. A problem report includes the device, operating system, App version and recent screens; the App shows you exactly what it will send before you send it.

2.2 Information collected automatically

• Device and technical data: device model, operating system, App version, language, time zone, IP address, and crash reports. Crash reports are collected through Firebase Crashlytics and are scrubbed on the device of financial data and personal identifiers before they are sent; they are not linked to your account.
• Usage data: screens you visit, features you use, taps and time on screen. We use PostHog for product analytics.
• Cookies and similar technologies (Website only): we use a small number of strictly necessary cookies to operate getaurelo.app. We do not use advertising cookies.

2.3 Information collected via Plaid

Aurelo uses third parties — principally Plaid Inc. (“Plaid”) — to gather your data from financial institutions. If you connect a bank account, Plaid collects on our behalf: your bank account number, routing number, account holder name, account type, transactions (date, amount, merchant, category), and balances. Plaid handles the actual collection at the source bank; Aurelo receives only the data necessary to run the App.

By using our service, you grant our third-party provider the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution according to terms of our third-party provider’s privacy policy. You acknowledge and agree that your personal and financial information will be treated in accordance with the Plaid End User Privacy Policy.

2.4 Information we do not collect

Aurelo does not store your bank credentials, full account numbers, or routing numbers in the App.

Aurelo does not collect:

• Your Social Security Number.
• Your driver’s license or government ID number.
• Your full credit card number or CVC. Every subscription is an in-app purchase, so your payment details stay with Apple or Google. Aurelo never sees a card number.
• Biometric data, precise geolocation, health data, or any “sensitive personal information” beyond what is incidentally part of bank transaction history.

Because Aurelo no longer offers a custodial product, Aurelo no longer collects KYC information (date of birth, SSN, government ID). If you used a prior version of Aurelo that included the now-discontinued Vault, see Section 11.

2.5 Sign in with Google and Sign in with Apple

You can create your Aurelo account with an email address and password, or with Sign in with Google or Sign in with Apple.

If you choose Google or Apple, Aurelo asks that provider only for the basic profile information needed to create your account and sign you in: your name, your email address, and a unique account identifier. From Google we request the openid, email and profile scopes; from Apple we request name and email. We do not request, and never receive, access to your Gmail, Google Drive, Google Contacts, Google Calendar, iCloud, or any other data in your Google or Apple account.

We use this information solely to create your Aurelo account, sign you in, secure your account, and send you service-related email. It is stored with your account by Supabase, our authentication provider (Section 4), and is retained and deleted under the same rules as the rest of your account (Sections 6 and 7). It is never sold, never shared with advertisers, and never used for any purpose beyond operating your account.

Aurelo’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you use Apple’s Hide My Email, Aurelo receives Apple’s private relay address instead of your real address and will only send service-related email to it.

You can revoke Aurelo’s access at any time from your Google Account permissions or your Apple ID settings (Sign-In & Security → Sign in with Apple). Deleting your Aurelo account (Section 6) removes the name, email address and identifier we hold.

2.6 Notice at collection

This table summarizes, for each category of personal information we collect, why we collect it, whether we sell or share it, and how long we keep it. The sections named hold the detail.

We do not sell personal information and do not share it for cross-context behavioral advertising (Section 4).

3. How We Use Information

We use the information described above to:

• Provide the core features of the App, including pocket budgeting, transaction sync, and savings recommendations.
• Learn from your own choices so the App sorts your money the way you do. For example, when you move a transaction to a different pocket or set a rule for a merchant, Aurelo remembers it and files that merchant’s future transactions the same way for you. What the App learns from your choices is part of your account data. It is used to run your account, and it is deleted with your account. It contributes to the data described in Section 3.1 only in aggregated, de-identified form.
• Authenticate you, secure your account, and prevent fraud and abuse.
• Process and bill your subscription.
• Send service-related communications (transactional emails about your account, renewals, and policy updates).
• Provide customer support.
• Maintain, debug, improve and develop the App and its features — including making transaction categorization, auto-built budgets and savings suggestions more accurate. Where we do this with data derived from your transactions, we use it in aggregated and de-identified form, as described in Section 3.1.
• Comply with applicable law and respond to lawful requests from authorities.

We will not send you marketing emails about Aurelo without your prior opt-in consent. Service-related emails (such as security alerts, verification codes, and policy updates) are sent regardless of marketing preferences because they are necessary to operate the service.

3.1 Aggregated and de-identified data

To improve how Aurelo sorts transactions into pockets, builds budgets and suggests what you can save, we create and use aggregated and de-identified data derived from the information described in Section 2, including transaction data sourced through Plaid. Aggregated data describes patterns across many users — for example, which pocket most users file a given merchant under — and cannot be traced back to any individual user or household. De-identified data has had the details that identify you removed, so that it cannot reasonably be linked to you.

When we use data this way:

• We take reasonable technical and organizational measures to ensure the data cannot be associated with you or your household. Aggregates are built only from patterns shared by multiple users; your account identifiers, transaction identifiers and individual transaction records are not part of them.
• We commit to maintaining and using this data only in aggregated or de-identified form, and not to attempt to re-identify it, except to test that our de-identification works.
• If we ever provide aggregated or de-identified data to a service provider, we will contractually require them to keep it de-identified and not to attempt to re-identify it.
• We use this data to improve and develop Aurelo itself, for the benefit of the people who use it. We do not sell it, and we do not share it with advertisers, data brokers or any third party for their own use (Section 4).

Aggregated and de-identified data is not personal information. Your individual account, budget and transaction data remain personal information and are handled as described in the rest of this Policy, including your rights in Section 6 and deletion in Section 7. When you delete your account, your records stop contributing to the data we build from; patterns already derived from many users’ data are not linked to you and cannot be removed individually.

4. How We Share Information

We do not sell your personal information. We do not share your personal information with advertisers or for cross-context behavioral advertising. We do not use Google Ads, Meta pixels, TikTok pixels, or any similar advertising tracking on the App or Website. Using aggregated and de-identified data to improve Aurelo (Section 3.1) is not a sale or sharing of your personal information: that data does not identify you and is used only inside Aurelo.

We share information only with the service providers we need to operate Aurelo, and only the data each provider needs to perform its function:

• Plaid Inc. — for read-only bank connectivity. The merchant logos shown beside some transactions are also served by Plaid, so your device loads those images from Plaid’s servers.
• Supabase, Inc. — for database, authentication, and backend infrastructure. SOC 2 Type II certified.
• RevenueCat, Inc. — for subscription management and billing reconciliation across Apple and Google in-app purchase rails.
• Resend (Resend Inc.) — for transactional email delivery.
• PostHog Inc. — for product analytics. PostHog is configured to scrub personally identifiable information from event payloads.
• Google LLC (Firebase Crashlytics) — for crash reporting. Crash reports are scrubbed on the device of financial data and personal identifiers before they are sent, and are not linked to your account.

Information you choose to share with other Aurelo users. Some features show your information to other people, but only because you use them:

• Your profile. Your username, display name, avatar and any badges on your account are visible to other Aurelo users, so that people can find you and invite you to a budget. Your money goal, friend count and join date are shown only if you turn them on in your profile, and you can turn them off at any time.
• Shared budgets. When you create a budget with collaborators or join someone else’s, every member sees that budget’s pockets, amounts and activity. Transactions from one of your accounts are visible to the other members only if you add that account to the shared budget. For a credit card you add, members see the name you gave the card, what is owed on it, this month’s spending in that budget and its due day, never its card number. If every cash account you have is in a shared budget, the other members can see your money available to assign and can assign it to that budget’s pockets on your behalf; it stays recorded as your money. You can remove an account from a budget or leave a budget at any time.
• Shared savings goals and Gold Family. Members of a shared savings goal see that goal and what each member has put toward it. A Gold Family subscription shares the Gold subscription, not your finances: the people on it see who holds a seat, not your accounts or budgets.

We may also disclose information when we have a good-faith belief that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request.
• Enforce these Terms or our other agreements, including investigation of potential violations.
• Detect, prevent, or otherwise address fraud, security, or technical issues.
• Protect against harm to the rights, property, or safety of Aurelo, our users, or the public.

If Aurelo is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

5. GLBA Privacy Notice

Aurelo is a financial software company. We collect and store transaction data sourced from your own financial institutions through Plaid, so we follow privacy practices aligned with the Gramm-Leach-Bliley Act (“GLBA”) and Regulation P (12 CFR Part 1016) for the handling of nonpublic personal financial information.

Categories of nonpublic personal information we collect:

• Information from you on applications or other forms (your account information).
• Information about your transactions with us, our affiliates, or others (transactions sourced from Plaid).

Categories of nonpublic personal information we disclose: only what is described in Section 4 above. We do not disclose nonpublic personal information to non-affiliated third parties for those parties’ own marketing purposes. As a result, there is no opt-out for you to exercise under GLBA at this time. If our practices ever change, we will provide you with the opportunity to opt out before any new sharing begins. Aggregated or de-identified data that does not identify you (Section 3.1) is not nonpublic personal information.

We will deliver an annual privacy notice to active users where required by applicable law.

6. Your Privacy Rights

6.1 California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), gives you the following rights. We honor each of them, regardless of whether the CCPA legally requires us to do so.

• Right to know. You may request a list of the categories and specific pieces of personal information we have collected about you in the past twelve (12) months.
• Right to delete. You may request that we delete personal information we have about you, subject to legal retention requirements.
• Right to correct. You may request that we correct inaccurate personal information.
• Right to opt out of sale or sharing. Aurelo does not sell or share personal information for cross-context behavioral advertising. There is currently nothing to opt out of, but you may submit an opt-out request anyway and we will confirm there is no sale to opt out of.
• Right to limit use of sensitive personal information. Aurelo does not use “sensitive personal information” beyond what is necessary to provide the service.
• Right to non-discrimination. We will not deny service, change pricing, or degrade your experience because you exercised a privacy right.

To submit a CCPA request, email support@getaurelo.app with the subject “Privacy Request — California.” We will verify your identity using information already on file (typically your account email plus a confirmation link) and respond within forty-five (45) days. We may extend the response window by an additional forty-five (45) days where required, with notice to you.

6.2 Other state privacy laws

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, or any other U.S. state with a comprehensive privacy law in effect, you have analogous rights including the right to access, correct, delete, and obtain a portable copy of your personal information, and the right to opt out of targeted advertising or profiling. Aurelo does not engage in targeted advertising or profiling for decisions that produce legal or similarly significant effects, but we will honor opt-out requests anyway.

To submit a request, email support@getaurelo.app with the subject “Privacy Request — [your state].“

6.3 How to appeal

If we deny your privacy request and you believe the denial was incorrect, you may appeal by replying to our denial email within forty-five (45) days. We will review and respond within sixty (60) days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete or de-identify your account data within ninety (90) days, except where we are required to retain certain records longer for legal, regulatory, or fraud-prevention purposes.

• Transaction records, balances and bank connections (including data sourced from Plaid): deleted with your account. We revoke the Plaid connection and remove our copy of the data. If a bank’s revocation does not complete immediately, we keep only what is needed to finish revoking it and retry automatically. We do not keep financial records after deletion.
• Aggregated and de-identified data (Section 3.1): kept in that form for as long as it is useful to improve Aurelo. It does not identify you and is not deleted with your account, but your records stop contributing to it once your account is deleted.
• Consent records: the record of the terms you agreed to when you connected a bank or subscribed (the date, the terms version, the plan and price you were shown, and the disclosure you were shown, keyed to a random account identifier and carrying no bank or transaction data) is kept after deletion as evidence of your consent.
• Anti-abuse markers: your email address, in a normalized form, with a note that it has used its one free trial, its one free bank-connected smart build, claimed its waitlist credit, or connected a bank recently, is kept after deletion so a new account cannot claim them again. These records carry no bank or transaction data.
• Subscription billing records: held by Apple or Google and by our subscription management provider, RevenueCat, under their own retention policies. Aurelo never holds your card details.
• Server logs and PostHog analytics: retained for up to twenty-four (24) months. When you delete your account we ask PostHog to delete your person record and its events.
• Crash reports (Firebase Crashlytics): retained by Google for ninety (90) days. They are not linked to your account, so there is nothing to delete with it.

8. Security

We use commercially reasonable safeguards to protect your data:

• All data is encrypted in transit (TLS 1.2 or higher) and at rest.
• Database infrastructure (Supabase) is SOC 2 Type II certified.
• Passwords are stored only as salted cryptographic hashes; we cannot read your password.
• Access to production data is limited to authorized Aurelo personnel and is logged.
• Aurelo does not store your full bank account number, routing number, or any payment card number. Bank credentials are tokenized through Plaid, and card details never leave Apple or Google.

No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

9. Children

Aurelo is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact support@getaurelo.app and we will delete it promptly.

10. International Users

Aurelo is operated from the United States and is intended for U.S. residents only. If you access Aurelo from outside the U.S., you do so at your own risk. Aurelo does not currently target users in the European Economic Area, the United Kingdom, or other jurisdictions with comprehensive privacy laws beyond U.S. federal and state laws.

11. Legacy Data from Prior Aurelo Versions

Aurelo previously offered a custodial “Vault” feature operated through Alpaca Securities LLC. This feature was discontinued before the July 1, 2026 launch of the current product. If you provided KYC information (such as date of birth, government ID, or Social Security Number) in connection with a prior beta version of Aurelo:

• Aurelo deleted the data we collected for KYC, except where retained by Alpaca for its own regulatory recordkeeping.
• Alpaca may continue to retain a copy of your information under its own privacy policy and applicable broker-dealer recordkeeping requirements.
• If you have questions about KYC data retained by Alpaca, contact Alpaca directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Non-material changes take effect immediately upon posting. For material changes, we will give you at least fourteen (14) days’ notice by email or in-App notification before the new policy takes effect.

13. Contact

Privacy questions? Email support@getaurelo.app with the subject “Privacy Question.”