What we store, and why

What we collect

• Your email — used only for sign-in (magic links, no passwords are stored).
• Your financial data — account balances, transaction history, and the Plaid access tokens that let us refresh them. Read-only.
• What you write — goals, merchant flags, cancellation records, and the monthly reflection answer.
• Subscription state — only if you pay for automatic property values (Stripe customer/subscription IDs).

What we never do

We don't sell data, share it with advertisers, or build profiles for anyone else. Your data exists to answer one question: where is your money?

Who actually hosts it

Auth and database: Supabase (Postgres, row-level security per user). Bank connections: Plaid (read-only institution access). Insights: Anthropic — a compact summary of numbers you're already seeing, never raw transaction dumps. Billing: Stripe, only if you use a paid plan.

Cookies

No tracking pixels, no third-party cookies, no ad SDKs. The only session data is the Supabase auth session in your browser.

Deleting everything

Deleting your Supabase account cascades to every row (accounts, transactions, goals, cancellations, insights). If you'd like it done for you, hello@sharkfinsoup.cc.

Last updated: September 22, 2026