Privacy Policy

Trixie exists to help you understand your own money. That only works if we handle your data with more care than anyone else would. This policy explains, in plain language, what we collect, why we collect it, and what we will never do with it.

The short version

• We collect financial data solely to show it back to you, organized and analyzed.
• We never sell your data, never share it with advertisers, and show no ads.
• We never see or store your bank passwords — account connections run through Plaid.
• You can delete your data by deleting your account, or ask us to do it for you.

What we collect

• Account information: your name, email address, and a securely hashed password. Optionally your birth year (used only for age-based planning features).
• Financial account data: when you connect a bank, brokerage, or card through Plaid, we receive and store account balances, transaction history, holdings, and liability details (such as statement balances and APRs) so the app can work.
• Data you enter: manual transactions, notes, receipts you upload, budgets, goals, properties and their details, categories, and rules.
• Property estimates: for properties you add, we retrieve publicly listed information and valuation estimates by address.
• Technical basics: session cookies to keep you signed in, and server logs for reliability and security. We do not use advertising trackers or third-party analytics scripts.

How account connections work

Bank connections are established through Plaid, a regulated financial data network used by thousands of financial apps. Your banking credentials are entered directly with Plaid or your bank — they never touch our servers, and we cannot see them. We receive read-only access tokens: Trixie can see your data but can never move money, make payments, or change anything at your institution. You can revoke a connection at any time from the accounts page, or centrally at my.plaid.com.

How your data is used

• To display and analyze your finances: net worth, budgets, cash flow, investment performance, rewards analysis, retirement projections.
• To automatically categorize transactions, including optional AI-assisted categorization. When AI is used, transaction descriptions are processed to make suggestions; the results are always shown to you and correctable.
• To send the notifications you enable (bill reminders, budget alerts) to your email address.
• Never for advertising, profiling for third parties, or sale in any form.

Household sharing

If you join a household, other members see the financial data you choose to share. Per-connection visibility controls let you share everything, balances only, or nothing for each account, and you can change these or leave a household at any time. Your login remains yours alone; household members never gain access to your account itself.

Where your data lives

Data is stored in managed, encrypted infrastructure: a Postgres database and secure file storage for receipts you upload. Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to operators of the service. Receipt files are served only through short-lived, per-request links tied to your login.

Service providers

We share the minimum data necessary with the providers that make the product work: Plaid (account connectivity), our hosting and database providers, cloud file storage (receipts), an email delivery provider (only the notifications you enable), a property-data provider (only addresses you add), and an AI provider for optional categorization. Each receives only what its function requires.

Your rights

• Access: everything we hold is visible in the product, and transactions are exportable to CSV/Excel at any time.
• Correction: categories, notes, values, and details are all editable in the app.
• Deletion: deleting your account removes your data from the live database. You may also contact us to request deletion.
• Revocation: disconnect any linked institution at any time.

Data retention

We retain your data while your account is active so history and trends keep working. When an account is deleted, associated data is removed from the live database promptly and from backups on their rotation schedule.

Children

Trixie is not directed to children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes materially, we will update the date above and note the change prominently in the product. Continued use after a change means you accept the updated policy.