1. Introduction

Money Ball ("we," "our," or "us") is a personal finance application that helps users track spending, manage debt, and build healthy financial habits. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Money Ball mobile application.

By using Money Ball, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, and password when you register
• Financial account credentials: When you connect a bank account, you authenticate directly with your financial institution through Plaid. We do not store your bank login credentials.

2.2 Information From Third-Party Services (Plaid)

When you link a financial account, we receive the following data from Plaid on your behalf:

• Account names, types, and balances
• Transaction history (descriptions, amounts, dates, categories)
• Institution names

We use Plaid to access this data. Plaid's privacy policy is available at plaid.com/legal.

2.3 Information Generated by the App

• Usage data: Features used, screens viewed, in-app actions
• Device information: Device type, operating system version, app version
• AI Advisor interactions: Messages you send to the AI Advisor feature

2.4 Information We Do Not Collect

We do not collect Social Security numbers, full payment card numbers, or government-issued ID numbers.

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Money Ball application
• Display your financial data, spending breakdowns, and net worth
• Power the AI Advisor feature to give personalized financial insights
• Send you important account and service notifications
• Detect and prevent fraud and unauthorized access
• Comply with legal obligations

4. How We Share Your Information

We share your information only in the following circumstances:

Recipient	Purpose	Data Shared
Plaid	Bank account linking and data retrieval	Authentication tokens
Anthropic (Claude API)	AI Advisor responses	Anonymized financial context you choose to share
Cloud infrastructure provider	App hosting and data storage	Encrypted user data
Law enforcement / legal process	Legal compliance	As required by law

We require all third-party service providers to maintain appropriate security standards and to use your data only as directed by us.

5. Data Storage and Security

5.1 Where Your Data Is Stored

Your data is stored on encrypted cloud servers. All data transmitted between the app and our servers is protected with TLS 1.2 or higher encryption. Data at rest is encrypted using AES-256 encryption.

5.2 Security Practices

• Multi-factor authentication on all systems that access your data
• Role-based access controls limiting who can access production data
• Regular security reviews and dependency audits
• API keys and credentials stored securely, never in source code

5.3 No Guarantee

While we implement strong security practices, no method of transmission or storage is 100% secure. In the event of a data breach affecting your information, we will notify you as required by applicable law.

6. Data Retention

Data Type	Retention Period
Account information	Duration of account + 30 days after deletion
Financial transaction data	Duration of account + 30 days after deletion
AI Advisor conversations	Duration of account + 30 days after deletion
Usage/analytics data	12 months rolling

When you delete your account, your personal and financial data is permanently deleted from our production systems within 30 days. Some data may be retained in encrypted backups for up to 90 days before being purged.

7. Your Rights and Choices

You have the right to:

• Access - Request a copy of the personal data we hold about you
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your account and associated data
• Data portability - Request your data in a machine-readable format
• Withdraw consent - Disconnect linked bank accounts at any time through the app
• Opt out - Opt out of non-essential communications

To exercise any of these rights, contact us at gillen.ben3@gmail.com. We will respond within 30 days.

8. Consumer Consent

Before connecting a bank account through Plaid, you will be presented with a clear disclosure explaining:

• What data will be accessed
• How it will be used
• That Plaid acts as an intermediary

Your explicit consent is required before any financial data is retrieved. You can revoke this consent at any time by disconnecting your accounts within the app.

9. Children's Privacy

Money Ball is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To submit a request, contact us at gillen.ben3@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app, sending an email notification to your registered address, and displaying a prominent notice within the app.

Your continued use of Money Ball after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

Ben Gillen
Founder, Money Ball
gillen.ben3@gmail.com