Privacy Policy

• We never sell your data. Not to advertisers, not to data brokers, not to lenders.
• We never report you to a credit bureau.
• Our analytics never include what you bought. Transaction contents stay out of our product analytics entirely.
• Your record is private by default. Sharing is something you do, one person at a time.

You give us: your email, your name and photo if you add them, your handle, your Circle invitations, your Journey updates, and a shipping address if you order a physical card.

Your bank gives us, through Plaid: account balances and transaction history — dates, amounts, merchant names, and categories. We use this to detect your recurring obligations and compute your Score.

Your device gives us: basic usage events (which screens you opened, whether a flow completed), plus error reports. These carry no transaction contents.

Your mailing address is collected only when you order a physical card. It is used to print a label and put the card in the mail — we see it to fulfill the order, and the carrier sees it to deliver. It is stored with that order, and like everything else here, it is never sold.

To compute your Teenth Score, to show you your obligations and when they are due, to let your Circle vouch for you, to produce a credential you can share, to send you the messages you asked for, and to keep the service working and secure. That is the whole list.

Bank connections are handled by Plaid Inc. When you link an account, you interact with Plaid directly and your credentials go to them, not to us — we never see or store your bank password. Plaid’s handling of your information is governed by their own end-user privacy policy, shown to you during the connection flow.

You can disconnect an institution at any time from your account settings.

Only service providers we need to run the product, each limited to their job: Supabase (database and authentication), Vercel (hosting), Plaid (bank data), Stripe (membership payments), Resend and Twilio (email and messages you asked for), Google (Sherman’s AI responses), PostHog (product analytics), and Sentry (crash reports).

None of them are permitted to use your information for their own purposes. We do not give any of them your record to resell.

When you talk to Sherman, your message and a summary of your Score situation are sent to Google’s Gemini API to generate a reply. We do not send your raw transaction list. Your conversations are not used to train public models.

Sherman also keeps notes: what you told him during setup (your goal, how you are paid, your ZIP code, who is counting on you) and a small number of things he works out from your own transactions, such as how often deposits arrive. Every one of those notes is listed on his notebook screen inside the app, showing where it came from and how certain he is, and you can correct or delete any of them at any time. A note you correct outranks anything he works out later.

Sherman’s analysis runs on our servers against your own data. He cannot move money, and he never messages anyone on your behalf — if something should be sent to your Circle, he writes it and you decide whether to send it.

Nothing about your record is public unless you turn it on. Your public profile shows only the fields you have enabled, and those settings are enforced on our servers — a field you have turned off is not sent to the visitor’s browser at all.

If you hand someone a Teenth Card, they can reach your public profile. Changing your handle stops old cards from working. See the Platform Terms.

Your record stays while your account is open. Score snapshots are kept as an immutable history while the account is active — that history is the point of the product.

Deleting your account is at the bottom of your Profile. We wait seven days before anything is destroyed, and signing in during those days cancels it. A record takes months to build; we would rather hand you the week back than let you lose it in a bad moment.

After those seven days we delete your Score and every snapshot behind it, your bank connection, the vouches on your record, your milestones, your profile and handle, your messages, and anything you wrote.

Three things stay, and here is why each one does. The record that you agreed to these documents stays, with your account no longer attached to it, because that record is the evidence consent was given. Any card order already placed stays, so it can still be delivered and so our tax records remain honest. Any supporter payment stays, because it is a financial record we are required to keep. Signing the Economic Inclusion Amendment is a public act rather than account data, so your signature stays on the roll unless you ask us to remove it — the delete screen offers that choice.

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to privacy@teenth.app and we will respond within 30 days. Depending on where you live, you may have additional rights — we honor them regardless of where you live, because drawing that line felt wrong.

Access to your data is restricted at the database level, so one user’s record is unreachable from another’s session. If we ever suffer a breach affecting your information, we will tell you what happened, what was exposed, and what we are doing — promptly, and without minimizing it.