Privacy Policy

• We don't sell your data, and we don't show ads or share your information for advertising.
• Your financial data is used to run Thinkfund for you: budgets, goals, insights and Centrix answers.
• Every account's data is isolated at the database level, so other users can never see yours.
• You can correct your information anytime in Settings, and ask us to export or delete everything.
• We never ask for your bank passwords.

Information you give us

• Account details: first and last name, email address and password (stored only as a secure hash by our authentication provider).
• Optional profile details: phone number, mailing address, city, state or region and country, currency and time zone.
• Financial information you enter or import: accounts and balances, transactions, categories, budgets, income sources, recurring bills, savings goals, and your Markets & currencies watchlist.
• Your conversations with Centrix, our AI assistant, and the suggestions you approve or decline.
• Messages you send us, for example to support.

Information from sign-in providers. If you sign in with Google, Google shares your name, email address and profile picture with us. We don't get your Google password or access to anything else in your Google account.

Information collected automatically

• Security records about your account, such as sign-ins and changes to your email, password, name, phone or address, so we can alert you and help protect your account.
• The days you used the app (not what you looked at), which we use for aggregate usage counts.
• Standard technical data our hosting providers log when your device connects, such as IP address, browser type and time of request.

Coming soon: linked accounts. When bank, card and brokerage linking launches, it will run through regulated data partners (such as Plaid and SnapTrade). You'll sign in with your institution through them, never through Thinkfund, and we'll receive read-only data like balances, transactions and holdings. We'll update this policy before that feature goes live.

• To provide Thinkfund: show your spending, budgets, net worth, income and goals, and keep your data in sync across devices.
• To power Centrix: when you ask a question, we send Centrix a snapshot of the relevant financial data so the answer reflects your real numbers (see Centrix and AI).
• To create Centrix Notices, such as weather-related bill alerts, market moves, interest rate changes and tax deadlines.
• To send service emails: account confirmations, password resets, security alerts and your weekly summary.
• To keep the service secure, prevent abuse, and fix problems.
• To understand overall usage through aggregate counts (for example, how many people used budgets this week). These counts never include your financial details.
• To comply with the law.

Centrix runs on Claude, a model provided by Anthropic. When you chat with Centrix, the question, recent messages in that conversation and a snapshot of your relevant Thinkfund data are sent to Anthropic to generate the reply. We also use AI to suggest categories for transactions.

We use Anthropic's commercial API, under terms that do not allow it to use your data to train its models. We send only what Centrix needs to answer, such as your financial data, first name and city (for local weather). We never send your password.

Centrix can only suggest changes to your budgets or goals. Nothing changes until you approve it. The one exception is your Markets & currencies panel, which Centrix updates when you directly ask it to.

AI can make mistakes. Centrix gives general, educational information, not professional financial, investment, tax or legal advice. See our Terms.

We share information only with service providers that help us run Thinkfund, and only what each one needs:

• Supabase: database, authentication and file storage.
• Vercel: website and app hosting.
• Anthropic: AI responses for Centrix and categorization.
• Resend: sending emails.
• n8n: scheduled automations such as email summaries.
• Google: only if you choose Sign in with Google.

To show weather and market data we request public information from Open-Meteo, Yahoo Finance, Stooq, the European Central Bank (via Frankfurter), ExchangeRate-API and the Federal Reserve Bank of St. Louis (FRED). These requests contain only a city name or ticker symbols, never your name or financial data.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the service. If that happens, this policy will continue to apply to your information or you'll be notified.

We do not sell or rent your personal information, and we do not share it for targeted advertising.

We use only what's needed to make the app work:

• Sign-in cookies that keep you logged in securely.
• Small items saved in your browser: your light or dark theme, your current Centrix conversation, and your last activity time (for the automatic sign-out after 10 minutes of inactivity).
• An offline cache so the installed app opens even without a connection.

We don't use advertising cookies or third-party tracking pixels.

• All traffic is encrypted with HTTPS, and our database provider encrypts data at rest.
• Row-level security in the database means every request can only reach the data that belongs to the signed-in user.
• We email you whenever your email, password or profile details change, and sign you out automatically after 10 minutes of inactivity.
• Access to production systems is limited to the operator, and only to run the service, fix a problem you report, or meet a legal obligation.

We keep your information while your account is open. If you ask us to delete your account, we remove your personal and financial data from our active systems within 30 days, except for anything we must keep to comply with the law, resolve disputes or prevent fraud. Provider backups and logs expire on their own schedules.

• Access and correct: edit your profile, accounts, transactions, budgets, income and goals at any time in the app.
• Export: ask us for a copy of your data.
• Delete: ask us to delete your account and data.
• Emails: email us to stop the weekly summary. Security and account emails can't be turned off while you have an account.

Depending on where you live (for example California, other U.S. states, the EU, the UK or Brazil), you may have additional rights: to know what we hold, to delete or correct it, to restrict or object to some uses, to data portability, and not to be treated differently for exercising them. We honor these requests for everyone, wherever you live. Email support@thinkfund.money from the address on your account and we'll respond within 30 days.

If you are in the EU or UK, we process your data to provide the service you signed up for (contract), to keep it secure and improve it (legitimate interests), and where you've agreed to it (consent). You can also complain to your local data protection authority.

Thinkfund is operated from the United States. If you use it from another country, your information will be transferred to and processed in the United States and other countries where our service providers operate, which may have different data protection laws than yours.

Thinkfund is for people 18 and older. We don't knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we'll delete it.

We'll update this page when our practices change and revise the effective date above. If a change is significant, we'll let you know by email or in the app before it takes effect.

Thinkfund is operated by Francisco Bornacelly in Florida, United States. For privacy questions or requests, email support@thinkfund.money.