Privacy Policy

Account information: your name, email address and sign-in details, including information from Google if you sign in with Google.

Financial information from Plaid: when you connect a bank, credit card, loan or investment account, we receive information through Plaid Inc. ("Plaid"), such as account names, account types, the last digits of account numbers, balances, credit limits, interest rates, minimum payments, due dates and transaction history. We never see or store your bank username or password.

Information you provide: accounts you add by hand, budgets, savings goals, debt plans, payments you record, statements you upload, and messages you send to the AI Coach and AI planner.

Technical information: basic device, browser and usage information needed to run, secure and improve the Service.

We use your information to show your balances, debts, budgets, goals and net worth; to build debt payoff plans and calculations; to power the AI planner, AI Coach and statement import; to keep your accounts synced; to secure the Service and prevent fraud; to communicate with you about your account; and to meet legal obligations.

We do not sell your personal information, and we do not share it with advertisers.

We share information only with service providers that help us run the Service, and only as needed:

• Plaid, to connect your financial accounts. By connecting an account, you also agree to Plaid's handling of your data as described in the Plaid End User Privacy Policy.
• Hosting, database and sign-in providers that store and deliver the Service.
• AI service providers that process statements you upload and messages you send to the AI features, only to generate your results.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

We use top-end security measures and do everything in our power to keep your information secure, including:

• Encryption of all data in transit using TLS 1.2 or higher.
• AES-256 encryption of stored data, with an extra layer of application-level encryption for bank connection keys, account numbers, balances and transaction details.
• Required two-step verification before any financial data can be viewed or changed.
• Strict access controls so each person can only see their own information.
• Regular security and software vulnerability checks.

No method of transmitting or storing information online is completely secure, so we cannot guarantee absolute security.

The Service is provided "as is" and "as available," and you use it at your own risk. By using the Service, you acknowledge and accept the risks that come with storing and sharing sensitive personal and financial information online, including the risk of unauthorized access, data breaches, service interruptions and loss of data. While we work hard to protect your information, to the fullest extent permitted by law Harmoney is not liable for any loss or damage arising from your use of the Service or from unauthorized access to your information that occurs despite our security measures.

Harmoney provides educational tools and information only. It is not a bank, and nothing in the Service, including AI-generated plans and suggestions, is financial, legal, tax or investment advice. You are responsible for your own financial decisions.

You are also responsible for keeping your password, authenticator app and backup codes safe.

• You can disconnect linked accounts, edit or delete your data within the app at any time.
• You can ask us to delete your account and all of your data by contacting us.
• Depending on where you live (for example, Virginia under the Virginia Consumer Data Protection Act, or California), you may have rights to access, correct, delete or get a copy of your information. Contact us to make a request; we will not discriminate against you for using these rights.

We keep your information only while your account is active.

• Delete anytime: you can permanently delete your account from the Accounts page. This disconnects all linked banks through Plaid and erases your financial data and sign-in right away.
• Inactive accounts: if you don't sign in for 18 months, we automatically delete your account and data the same way.
• Uploaded statements are read to extract transactions and are never stored.
• Backups: deleted data may remain in encrypted backups kept by our hosting provider for a limited time before being overwritten.
• Records we keep: a record that you agreed to this policy (date, time and policy version) and any information we are legally required to keep.

We review this retention policy at least once a year.

The Service is not intended for anyone under 18, and we do not knowingly collect information from children.

We may update this policy from time to time. We will post the new version here with a new effective date and, for significant changes, let you know in the app or by email.

This policy and your use of the Service are governed by the laws of the Commonwealth of Virginia, without regard to its conflict-of-law rules.

Ross Ventures Group, LLC DBA Harmoney, Virginia.

Questions or requests? Email us at privacy@getinharmoney.com.