Privacy Policy
Last updated: July 1, 2026
1. Who we are
Networthy is a personal finance app that connects to your financial institutions through Plaid to show you a unified view of your net worth, cash flow, and spending. We are operated by ThumbTech, LLC (“we,” “us,” or “our”). You can reach us at trey@reicopilot.com.
2. Your data is yours — we cannot see it
Individual transaction names and account balances are not accessible to Networthy employees in day-to-day operations. Our application database stores transaction names and balances to power your dashboard, but internal team database access is restricted to anonymized, aggregated views — the underlying rows containing your actual merchant names and balances are not readable by the team. Plaid access tokens are stored encrypted with AES-256 and are never logged or readable in plaintext. The app processes your data automatically to power features like recurring detection and anomaly alerts, but this is done entirely by software, not people.
3. Information we collect
Account information
When you create an account we collect your name, email address, and a hashed password (if you sign up with email) or a Google identity token (if you use Google Sign-In). We never store your raw password.
Financial data via Plaid
When you link a financial institution, Plaid authenticates you directly and returns a read-only access token to us. Through that token we pull account balances, transaction history, and (where available) loan or investment details. We do not receive or store your bank username or password at any point.
Manual assets
If you add manual assets (real estate, vehicles, private investments), we store the name and value you provide, along with any optional depreciation or appreciation rule you configure.
Usage and device data
We log authentication events (login time, provider, IP address, and user agent) for security and fraud detection. We do not use third-party analytics trackers or ad networks.
Push notification tokens
If you enable push notifications on the mobile app, we store a device token issued by Apple or Google in order to deliver those notifications. We do not share this token with any third party.
4. How we use your information
- To display your accounts, balances, transactions, and net worth to you.
- To detect anomalies (duplicate charges, price creep, unusual activity) and surface them on your dashboard.
- To send you email digests and push notifications if you have them enabled.
- To comply with legal obligations and protect against fraud or abuse.
We do not sell your personal or financial data. We do not use your data for advertising. We do not share individual transaction or balance data with any third party except as described in Section 5.
5. Third parties we share data with
Plaid
Plaid facilitates the connection to your financial institutions. Plaid's own privacy policy governs how it handles your credentials and identity during the linking process. See plaid.com/legal/privacy-policy.
Vercel
Our web and API infrastructure runs on Vercel. Your data passes through Vercel's servers in the United States. See vercel.com/legal/privacy-policy.
Neon (database)
Your data is stored in a PostgreSQL database hosted by Neon, running in the United States. See neon.tech/privacy.
Google Gemini / AI features
The chat assistant and automatic transaction categorization are powered by Google Gemini. Neither feature sends any data to Google until you explicitly enable AI features from the in-app consent prompt — you can decline, and the rest of Networthy works normally without it. Once enabled, the data we send is account names, current balances, and transaction summaries (merchant names, amounts, dates) — never your real name, email address, password, or account/routing numbers. We use a Google Cloud API tier that explicitly prohibits Google from using submitted data for model training, product improvement, or any purpose beyond fulfilling the API request itself. See Google Cloud Data Processing Addendum.
SendGrid / Twilio
Email notifications are delivered via SendGrid; SMS alerts via Twilio. These services receive your email address or phone number solely to deliver messages you have opted into.
6. Data retention
We retain your data for as long as your account is active. If you request account deletion, we will delete your account and all associated financial data promptly. Plaid access tokens are revoked at the time your account or a linked institution is removed.
7. Security
All data is encrypted in transit using TLS. Passwords are hashed with bcrypt before storage — we cannot recover your password. Plaid tokens are encrypted at rest using AES-256 and are never stored or logged in plaintext. We do not store raw bank credentials at any point.
Internal team access to the database is enforced at the database level: team members use a restricted role that can only query anonymized, aggregated views. Individual transaction names, merchant details, and raw account balances are not accessible through that role. Only the application itself — authenticated as a separate database role — can read the underlying data to render your personal dashboard.
8. Your rights
- Access: You can view all your connected accounts, transactions, and data within the app at any time.
- Correction: You can update account nicknames and manual asset values directly in the app.
- Deletion: Delete your account at any time from Settings → Danger zone, which permanently removes your account, unlinks every connected institution from Plaid, and erases all transactions, balances, and history. You can also email trey@reicopilot.com to request deletion.
- Opt-out: You can disable all email and push notifications from the Settings page at any time.
9. Children
Networthy is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. If we make material changes we will notify you by email or by posting a notice in the app before the changes take effect. Continued use of Networthy after the effective date constitutes acceptance of the updated policy.
11. Contact
Questions or concerns about this policy? Email us at trey@reicopilot.com.