Privacy Policy
Your financial life is not an advertising product. Fisciva uses your information to provide the finance tools you choose. We do not sell personal information or use connected financial data for advertising.
Fisciva is a personal finance application that helps people understand expenses, income, bills, budgets, debt, taxes, investments, and net worth. This Privacy Policy explains what information Fisciva collects, why it is used, when it is disclosed, how long it is kept, and the choices available to you.
This policy applies to the Fisciva mobile applications, web application, and related services. It does not replace the privacy notice of a financial institution or another service that you choose to connect.
1. Information we collect
The information Fisciva collects depends on the features you use.
Information you provide
- Account information, such as your name, email address, authentication status, and household membership.
- Financial planning information, such as income, expenses, bills, budgets, debts, assets, tax profile details, estimated payments, and financial goals.
- Receipt and document information, including uploaded images or files and extracted merchant, date, total, tax, tip, line-item, payment-method, category, and business-purpose information.
- Information you enter about mileage, subscriptions, refinancing scenarios, investment assets, and other financial records.
- Corrections, preferences, feedback, and choices that help Fisciva adapt to your household.
- Communications and privacy or support requests that you send to us.
Information from connected services
When you choose to connect a financial account, Fisciva may receive institution name, account type, partial account identifiers, balances, transactions, liabilities, holdings, and investment information. The exact information depends on the provider, products you authorize, and accounts you select.
Fisciva uses Plaid to connect eligible bank and credit accounts. Plaid collects information under its own End User Privacy Policy. Fisciva does not receive or store the username and password you use to sign in to your financial institution through Plaid.
Fisciva may use other providers, such as SnapTrade, when you expressly connect a supported investment account. Those providers process information under their own privacy notices and the permissions you approve.
Information collected automatically
Fisciva may collect limited technical information needed to operate and secure the service, such as IP address, device and browser type, operating system, app version, request timing, crash details, and security events. We configure application telemetry to exclude financial record content, authentication tokens, and uploaded documents.
2. How we use information
Fisciva uses information to:
- Provide the features you request, including transaction tracking, receipt processing, budgets, debt plans, tax estimates, and net worth views.
- Import and reconcile financial records from services you connect.
- Match receipts to transactions and identify duplicates.
- Generate household-specific categories, forecasts, reminders, and suggestions.
- Calculate deterministic financial results, such as ledger balances, debt schedules, tax estimates, and savings arithmetic.
- Authenticate users, enforce multi-factor authentication before financial account linking, prevent abuse, and investigate security events.
- Maintain, troubleshoot, and improve reliability, accessibility, and performance.
- Respond to support, privacy, and legal requests.
- Comply with applicable law and protect the rights, safety, and integrity of users and the service.
Fisciva does not use connected financial data for advertising. Fisciva does not initiate payments, make trades, file tax returns, perform credit checks, or automatically cancel subscriptions.
3. Artificial intelligence and household learning
Fisciva may use artificial intelligence to extract and classify information from receipts or documents and to explain information already contained in your records. Deterministic software, not an AI model, produces ledger balances, debt schedules, tax calculations, and other financial arithmetic.
When an AI provider processes a receipt or document for Fisciva, we limit the information sent to what is needed for that task and configure supported provider controls not to retain the request for model training. Fisciva does not train a shared model on one household's financial records or use one household's records to influence another household.
Household learning may remember merchant categories, business or personal treatment, notification preferences, useful subscriptions, and dismissed suggestions. You can inspect, disable, reset, or export supported learned behavior from Learning Center. Learning cannot override tax rules, ledger controls, debt minimums, or security requirements.
4. How we disclose information
Service providers
We use service providers to operate specific parts of Fisciva, such as authentication, account connectivity, cloud hosting, databases, private file storage, message delivery, error monitoring, and AI-assisted receipt extraction. They may process information only to provide contracted services to Fisciva, subject to contractual and technical restrictions.
Current or planned providers include Google Identity Platform and Firebase, Plaid, SnapTrade, OpenAI, Fly.io, Neon, Upstash, Tigris, Postmark, and Sentry. A provider receives information only when its related feature is enabled and used.
Household members
Information is visible only within the household workspace to which it belongs. Each member chooses which connected accounts become household-visible. Workspace owners manage membership and security recovery. Do not add someone to a household unless you want that person to access the household information made available to them.
Legal and safety reasons
We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users or others, investigate fraud or misuse, or protect the security and integrity of Fisciva. Where legally permitted, we will seek to notify the affected user before disclosing information in response to legal process.
Business transfer
If Fisciva is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. Any recipient must honor this policy unless users receive notice and any choice required by law.
5. No sale of personal information
Fisciva does not sell personal information. Fisciva does not share personal information for cross-context behavioral advertising or targeted advertising, and does not use financial records to build advertising profiles.
6. Connected account controls
Connecting an account is optional. Before Plaid Link is shown, Fisciva presents this policy and requires authentication, including authenticator verification when financial account linking is requested.
You can disconnect a Plaid connection in Fisciva. Disconnecting causes Fisciva to revoke provider access when the provider supports revocation and makes the locally stored access token unusable. You may also manage eligible Plaid connections through Plaid Portal.
Disconnecting stops future retrieval. It does not automatically delete historical records that were already imported and used in your ledger. You may separately request deletion as described below.
7. Retention and deletion
Fisciva retains personal information only for as long as reasonably necessary to provide the service, meet the purposes described in this policy, protect the service, resolve disputes, and comply with applicable law.
- Active household records are generally retained while the workspace is active.
- Provider credentials are retained only while the related connection remains active or as briefly as needed to complete revocation and security records.
- Uploaded receipts and documents are retained while attached to active records, unless you delete them or request their deletion.
- Privacy and deletion requests are logged only as long as reasonably necessary to demonstrate completion and comply with law.
- Security and audit records are retained for a limited period appropriate to their purpose.
- Deleted information may remain temporarily in encrypted backups until those backups expire through the normal retention cycle. Backup information is isolated and is not restored for ordinary product use.
After verifying a workspace deletion request and resolving any legal restriction, Fisciva removes active customer data within 30 days. If information must be retained for a legal, fraud-prevention, security, or dispute purpose, it is isolated, access-restricted, and deleted when that purpose ends. De-identified information that cannot reasonably be linked back to a person may be retained.
8. Your choices and privacy rights
Depending on where you live, you may have rights to:
- Know whether Fisciva processes your personal information and access that information.
- Correct inaccurate personal information.
- Receive a portable copy of information you provided or authorized Fisciva to obtain.
- Delete personal information, subject to lawful exceptions.
- Withdraw consent and disconnect a financial provider.
- Opt out of processing for targeted advertising, sale, or certain profiling. Fisciva does not perform these activities.
- Appeal a denied privacy request where applicable.
- Use an authorized agent where applicable.
- Receive equal service and pricing without discrimination for exercising a privacy right.
You can correct many records directly in Fisciva, disconnect providers from the connection controls, and reset supported household learning in Learning Center. To request access, export, correction, or deletion that is not available in the app, email ingenuitylabs@gmail.com with the subject “Fisciva Privacy Request.”
We will verify requests using information associated with the account. We will not ask for a financial institution password. We respond within the time required by applicable law. If we deny a request, we will explain the reason and any available appeal method.
9. Security
Fisciva uses administrative, technical, and physical safeguards designed to protect personal information. These include encrypted network connections, encrypted storage, restricted production access, multi-factor authentication for sensitive actions, workspace authorization controls, private document storage, secret management, logging controls, dependency review, and incident response procedures.
No system can guarantee absolute security. If you believe your Fisciva account or information may be at risk, contact ingenuitylabs@gmail.com promptly with the subject “Fisciva Security Report.”
10. United States service and data location
Fisciva is initially intended for adults in the United States. Service providers may process information in the United States and other locations where they operate, subject to their contractual safeguards and applicable law.
11. Children
Fisciva is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so it can be investigated and deleted.
12. Changes to this policy
We may update this policy to reflect changes in the service, providers, law, or security practices. The updated version will show a new effective date. If a change materially affects how previously collected information is used or disclosed, we will provide additional notice and obtain consent when required.
13. Contact
For privacy questions or requests, contact:
Fisciva Privacy
ingenuitylabs@gmail.com
Subject: Fisciva Privacy Request
You may also contact Plaid about Plaid's own processing through Plaid's privacy controls or Plaid Portal.