Privacy Policy

1Who We Are & Scope

trackify is a personal finance app operated by JFM Capital Group LLC ("trackify", "we", "us", "our"). This Policy explains what information we collect when you use the trackify app or any site we operate, why we collect it, who we share it with, and the choices and rights you have over it.

This Policy applies to the trackify iOS and Android apps, the trackify web app, and this site. It does not apply to third-party sites or services we link to or that you connect through trackify — your bank, brokerage, or card issuer has its own privacy practices, and we encourage you to read them.

2Information We Collect

We collect the smallest set of information the feature in front of you actually needs. In practice, that is:

Information you give us directly

• Account basics — name, email address, and phone number, when you create an account or sign in.
• Phone verification data — your phone number and, where a linked card requires it, your date of birth, used solely to verify your identity by one-time SMS code (see Section 3).
• Anything you type into the app — labels you give transactions, notes on a split or a goal, budget names, questions you ask Clara (our in-app AI assistant), and similar content you create.
• Support communications — anything you send us at support@jfmcapital.com or through in-app help.
• Beta sign-ups and feature requests — if you join the TestFlight beta on this site, your first name, last name, and email, used only to confirm your address, invite you to the beta, and write to you about it; if you post on the feature board, what you write and, if you choose to give them, a name (shown with your request) and an email (never shown, used only to follow up). A beta sign-up that is never confirmed is deleted after 30 days, and you can remove yourself at any time with the "Leave the beta" link shown once you confirm, or by writing to support@jfmcapital.com. Votes on the board are counted against a random identifier kept in a cookie on your device, not against your name, email, or IP address.

Financial information, from your linked accounts

When you connect a bank, credit card, brokerage, or loan account, we use Plaid Inc. to retrieve, on your authorization: account balances, transaction history, investment holdings, loan and liability details, and identity information your institution returns (such as the name and contact details on file). We never see or store your online banking username or password — Plaid's connection flow handles that directly with your institution.

Card art and issuer verification

If you opt in to real card artwork, we use Spinwheel to match your card to its issuer. That feature asks for your phone number and date of birth and verifies you by a one-time SMS code sent by Spinwheel. We use this only to render your card's real design — never for marketing, scoring, or any other purpose — and you can decline it without losing any other feature.

Device, usage and diagnostic information

• Device type, operating system, app version, and a device token used to deliver push notifications, if you enable them.
• IP address and basic request metadata (such as your browser or app version), used for security, abuse prevention, and debugging — see "Security and abuse-prevention records" below for how long each is kept.
• Sign-in security signals — a one-way hash of your IP address, the kind of network and the country it belongs to, and how you signed in — recorded when a new sign-in first reaches us. See "Security and fraud prevention" in Section 5.
• Crash reports and performance diagnostics.
• For quality-assurance testing only, an anonymized session recording may be captured on internal test builds; this tooling is not present in, and does not run against, real user accounts in production.

Security and abuse-prevention records

To keep accounts safe and to stop automated abuse, we keep a small set of security records (how a new sign-in is assessed is in Section 5, "Security and fraud prevention"). We never build a fingerprint of your device, and we never collect your precise location for this.

• Account security records. When an account signs up, signs in a new way, changes its email or phone, registers a device, or moves money or changes who can see it, we record what happened, which account did it, when, and the IP address and browser or app details (user agent) the request came from. We clear the IP address and user agent from these records after 90 days. Copies of these records also sit in our weekly encrypted database exports for disaster recovery (Section 6). Each export is deleted 91 days after it is made and can be restored for 7 days after that, so a cleared IP address can remain in an export for up to 98 days longer. The record of the action itself never holds a full email address or phone number — at most a masked fragment of one (the first letter and the domain of an email address, or the last four digits of a phone number) — and it is kept as part of our security audit trail, including after an account is closed.
• Circle agreement signatures. When you sign a Circle's sharing agreement, we keep the IP address and browser or app details (user agent) the signature came from, as the standard evidence of an electronic signature. They are never shown to anyone, including you, and are kept with the signature for as long as it is on file: until the Circle is deleted or you close your account.
• Rate-limit counters. To enforce limits such as "at most three password-reset emails to one email address an hour", we keep short-lived counters. Each is stored under a keyed one-way hash of your network address (for IPv6, its /64 network prefix), your account ID, or your email address — never the value itself — and is deleted within three days of being created.
• Breached-password check. When you choose a new password on our password-reset page, we check it against the Have I Been Pwned list of passwords exposed in data breaches. Only the first five characters of the password's SHA-1 hash leave our servers; the password itself and its full hash never do.
• Server and sign-in logs. Our servers' request logs include the IP address each request came from and are kept for up to 400 days for security investigations. Our identity provider (Google Identity Platform) logs sign-in and verification-code attempts, including the IP address, and those logs are kept for 30 days.

Information from people you share with

If you invite someone into a shared "Circle" or split a purchase with them, we process the name, contact handle, and split details needed to show that shared ledger to everyone in it. See Section 4 for how Circles affect who can see what.

3How We Use Your Information

We use the information above to:

• Operate the core features you signed up for — linking accounts, showing balances and transactions, tracking net worth, detecting recurring charges and subscriptions, and running budgets and goals.
• Authenticate you and keep your account secure, including by sending one-time codes by SMS or email and alerting you to new sign-ins or devices.
• Provide customer support and respond to what you write to us.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Send service messages (security alerts, weekly digests you've opted into, account notices) and, only with your separate consent, anything promotional.
• Power Clara, the in-app artificial-intelligence assistant. When you ask Clara a question, we send the prompt and the ledger facts needed to answer it to our model provider so she can reply. Clara is optional — you can use every other feature without opening her. She is not a financial advisor. See Clara's disclosure.
• Scan receipts you photograph, using an AI vision model, so line items can appear on a charge. You choose when to photograph a receipt.
• Maintain, debug, and improve the app — for example, understanding which features are used and where errors occur.
• Comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.

4How We Share Information

We do not sell your personal information, and we do not share it with anyone for cross-context behavioral advertising. We share information only in the following circumstances.

Service providers who process data on our behalf

Each of these providers is contractually restricted to using your information only to provide their service to us — not for their own independent purposes.

People you choose to share with

trackify's "Circles" feature is opt-in and explicit: if you invite someone or accept an invitation, the household or split members you're connected to can see the ledger, balances, or split entries you've chosen to share in that Circle — never anything outside it.

Legal and safety reasons

We may disclose information if required by law, subpoena, or court order; to protect the rights, property, or safety of trackify, our users, or the public; or to investigate fraud or security incidents.

Business transfers

If trackify is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5Data Security

We apply layered technical safeguards proportionate to the sensitivity of financial data:

• Data in transit is encrypted with TLS.
• Sensitive tokens (such as the access token that lets us refresh your linked accounts) are encrypted at rest with AES-256-GCM; the encryption key is held in a separate secret-management system, not in the database itself.
• Our database uses least-privilege roles — the application itself, for example, cannot alter its own schema, and reporting access is read-only.
• Access to production systems is limited to what a given service needs to do its job.

Security and fraud prevention

To protect your account from stolen passwords and automated sign-in attempts, when a new sign-in first reaches our servers we assess how likely it is to be someone other than you. For that assessment we record, with your account:

• a keyed one-way hash of your IP address and of the network block it belongs to — never the address itself;
• the network's operator (its autonomous system number) and whether it is a mobile carrier, a home or business provider, or a data center or VPN;
• the country your IP address is registered to — an approximate location only, never GPS or any precise location;
• the kind of app or browser and its version, and how you signed in (password, text message, Apple, or Google);
• whether the device has registered for notifications on your account before;
• the resulting risk score and the reasons for it.

We use these only to keep accounts secure — never for advertising or profiling, and never to decide anything about you other than whether a sign-in looks like yours. We do not fingerprint your device. For now these assessments are recorded and reviewed only, to measure how well they work; they do not block or change any sign-in, and we will update this section before that changes. Section 6 says how long each record is kept.

To tell which network and country an address belongs to, we look it up in an offline copy of IPinfo's free database on our own servers; no address is sent to IPinfo. IP address data powered by IPinfo, licensed under CC BY-SA 4.0.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

6Data Retention

We keep your information for as long as your account is active and as needed to provide the service. When you delete your account (see Section 13 and our Data Deletion page), we delete your personal data from our production systems, including linked financial data, receipts, and statements. Because we maintain database backups for disaster recovery, a residual copy may persist in encrypted backups: up to 14 days in our database's automatic daily backups, and up to 98 days in the weekly encrypted exports we keep in a separate, write-once store (an export cannot be altered or deleted before it is 90 days old, is deleted 91 days after it is made, and can be restored for 7 days after that).

Security records follow the clocks in Section 2: IP addresses and user agents on account security records are cleared after 90 days (and leave the weekly exports within 98 days after that), the IP address and user agent on a Circle agreement signature are kept with the signature, rate-limit counters are deleted within three days, and request logs are kept for up to 400 days.

We may retain limited information longer than that where the law requires it (for example, records needed to respond to a legal request already in progress) or where necessary to detect and prevent fraud across accounts.

Subscription records

When a Trackify Plus free trial starts, we keep keyed hashes (never the values themselves) of the phone number, email address, name and date of birth, network and store subscription it began with, so that a second free trial by the same person can be recognised. Each is deleted one year after the trial began, including when you delete your account before then. When you delete your account, RevenueCat is asked to delete your purchase history; a plan bought on the web is cancelled first.

Security records

The sign-in security records described in Section 5 are kept for less time than your account, on a fixed schedule:

When you delete your account, your sign-in sessions are deleted with it, and any assessment still inside its retention window loses its link to you.

7Your Privacy Rights

Wherever you live, you can:

• Access and correct most of your information directly in Settings.
• Export your transaction data from within the app.
• Delete your account, which erases your personal data as described in Section 6 — see Data Deletion for exact steps, including how to do this without opening the app.
• Control notifications, including turning off push notifications and marketing email, in Settings or your device's notification settings.

To exercise any of these rights, or if something in Settings isn't working the way you expect, you can also reach us at support@jfmcapital.com. We will not discriminate against you for exercising any privacy right — the service works the same either way.

8California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), gives you the right to:

• Know what personal information we collect, use, and disclose, and the categories of sources and recipients (Sections 2 and 4 of this Policy).
• Delete personal information we've collected from you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of "sale" or "sharing" — we do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of today; if that ever changes, we will update this Policy and provide an opt-out first.
• Limit use of sensitive personal information — we use sensitive information (such as precise financial account data) only to provide the service you asked for, not to infer characteristics about you for other purposes.
• Non-discrimination for exercising any of these rights.

You can submit a request through either of two methods: in the app under Settings, or by emailing support@jfmcapital.com from the address on your account. We will verify your identity before acting on a request and will respond within the time the CCPA requires. An authorized agent may submit a request on your behalf with your written permission.

9Financial Privacy Notice

Because trackify handles nonpublic personal financial information, we follow the spirit of the Gramm-Leach-Bliley Act's privacy principles even though trackify itself is not a bank:

• We do not share your nonpublic personal financial information with non-affiliated companies for their own marketing purposes.
• We share it only with the service providers listed in Section 4, each acting on our behalf and under contract to use it only to provide their service to us.
• Because we do not share for the purposes GLBA lets you opt out of, there is no opt-out to exercise — but you can still stop the sharing entirely at any time by disconnecting an account or deleting your trackify account.

10European & UK Privacy Rights

If you are located in the European Economic Area, the UK, or Switzerland, we process your personal data on these legal bases:

• Contract — to provide the trackify service you signed up for.
• Legitimate interests — for security, fraud prevention, and improving the service, balanced against your rights.
• Consent — for optional features (such as card art verification) and any marketing communication.
• Legal obligation — where we must retain or disclose information by law.

You have the right to access, correct, erase, restrict, or object to our processing of your data, and to receive a portable copy of it. Where a service provider outside your region processes your data (for example, on Google Cloud infrastructure), we rely on that provider's standard contractual clauses or equivalent safeguards for the transfer. You may lodge a complaint with your local data protection authority at any time.

11Children's Privacy

trackify is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from anyone under 13. If we learn that we've collected information from a child under 13, we will delete it. If you believe a child has provided us with information, contact us at support@jfmcapital.com.

12Cookies, Local Storage & Similar Technologies

The trackify web app uses local storage and session storage — not third-party advertising cookies — to keep you signed in and to remember your theme preference.

One exception: signing in with a phone number on the web runs Google reCAPTCHA (the invisible kind) to confirm the request comes from a browser rather than a script. reCAPTCHA is operated by Google, sets Google cookies in your browser, and is subject to Google's Privacy Policy and Terms of Service. The iPhone app verifies phone sign-in natively through Apple's push service and shows a reCAPTCHA only when that silent check cannot complete.

We do not use third-party ad-tracking pixels or cross-site tracking cookies. Any session-replay tooling described in Section 2 is limited to internal test builds used for quality assurance and is never active against real production accounts.

13Communications & Push Notifications

We send service email (security alerts, receipts of requests you make) that you cannot opt out of while your account is active, because they are how we tell you something happened to your account. Digest email and push notifications are optional and can be turned off in Settings or in your device's notification settings at any time.

14International Data Transfers

trackify is operated from the United States, and information we collect is processed and stored in the United States. If you access trackify from outside the United States, your information will be transferred to, stored, and processed in the United States, whose data protection laws may differ from those of your country.

15Changes to This Policy

We may update this Policy as trackify changes. If we make a material change, we will notify you in the app or by email before it takes effect. The "Last updated" date at the top of this page always reflects the current version.

16Contact Us

Questions about this Policy or your data? Write to us at support@jfmcapital.com. JFM Capital Group LLC operates trackify.