Privacy
Privacy policy
This policy describes how sentientFi handles personal information in the mobile app, on sentientfi.app, and in the payment service. Contact jason@sentientfi.app for any request in this policy. That is the only mailbox we use.
Information you give us
- Account: email address, a password held by our login provider, and the display name you set.
- Apple or Google, if you use those buttons to sign in: the identifier and email those companies share with the login. We do not receive your Apple or Google password.
- Settings you choose: utilization target, autopay limits, which cards are paused, and notification preferences.
- A credit score, only if you type one in. We store the number, an optional bureau name, and the date. We do not pull a score from a credit bureau.
- Waitlist: the email address you submit on sentientfi.app, and the optional card-count range.
- A question you ask the in-app assistant. We do not keep a chat transcript in our database.
Information from linked accounts
When you link a bank or card through Plaid, we receive and store:
- Institution name and identifier, account name, mask, and account type.
- Balances, available balance, and credit limit.
- Transactions on the linked account.
- Credit-card liability details such as APR, statement balance, and due date.
We do not call Plaid for bank account and routing numbers, and we do not store those numbers. A Plaid access token, which lets our server keep reading the Item, stays on the server. It is not sent to the app.
Linking is also covered by Plaid’s End User Privacy Policy.
Payments
We store payment amount, status, time, and which linked card and bank were involved. Stripe holds the payment credentials and creates a customer record. We store Stripe customer and payment-method identifiers, not a full card number or bank account number. Stripe’s privacy policy is at stripe.com/privacy.
Deleting your sentientFi account deletes our copy of the payment rows. It does not, by itself, delete the Stripe customer. Email us if you also want that Stripe record deleted.
Messages we send
- Email about your account and about payments, sent through Resend to the address on the account.
- Push notifications, if you turn them on. The device token is stored so the notice can be delivered. Delivery uses Expo, then Apple or Google, depending on the phone.
- In-app notification history, so you can read it later.
The assistant
The assistant explains activity that already happened. It cannot start or change a payment. To answer, it reads your accounts, payments, settings, and notifications. If the live model is switched on, that question and that account context are sent to Anthropic to write the reply. If the live model is off, the reply is produced on our server and is not sent to Anthropic. Either way, we do not store the conversation.
Face ID and device unlock
If you turn on Face ID or Touch ID, the check happens on your phone. We do not receive a biometric template, a photo, or the result beyond unlocking the app on that device.
Logs
Our hosts record operational logs such as IP address, time, and error details so we can run and debug the service. Those logs are not a product feature and are not used to advertise to you. We do not write Plaid access tokens or full payment credentials into those logs.
Why we use it
- To create and secure your account.
- To show utilization against the target you set.
- To schedule and record paydowns from your linked bank, within the limits you set.
- To explain a past payment or alert, including through the assistant.
- To send the notifications you enabled and to answer a support email.
- To keep the waitlist and tell you if a beta spot opens.
- To detect abuse and fix failures.
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it to decide credit eligibility, and we do not promise that sentientFi will raise or repair a credit score.
Who processes it
These companies process information so the product can run:
- Plaid — linking and the financial data described above.
- Stripe — payment credentials, the customer record, and charges.
- Supabase — database and login, hosted in the United States (us-east-2).
- Fly — hosts the API and this website.
- Apple and Google — sign-in, if you use those buttons, and delivery of push notifications.
- Resend — email delivery.
- Expo — push notification transport.
- Anthropic — only when the live assistant is on, and only for that question and the account context needed to answer it.
We also share information if a law, a court, or a regulator requires it, or if it is necessary to investigate fraud or a security incident. If the service is transferred, the account data required to run it would transfer with it, and we would email the address on the account.
How long we keep it
We keep account and linked-account data while the account is open, because the product needs it. Unlinking a bank or card tells Plaid to remove that Item. Deleting the account deletes the login and the rows tied to it, including tokens, transactions, payments we stored, notifications, settings, and a score you entered. That deletion finishes in the same request. There is no 30-day trash.
Waitlist emails stay until you ask us to remove them or we close the list. Server logs are kept for operations and then age out with the host’s log retention. Stripe may keep its own customer and charge records under Stripe’s policy after we delete our copy.
Your requests
You can, and we will not charge you or treat you worse for asking:
- Download your data from Settings. The file omits Plaid access tokens and Stripe secrets.
- Delete the account from Settings, which is the deletion path described above.
- Email jason@sentientfi.app to know, correct, or delete personal information, to appeal a denied request, or to ask that the Stripe customer also be deleted. You may use an authorized agent if you give us written permission and we can verify you.
We will check that the request comes from the account holder, usually by sending a message to the account email. We aim to respond within 45 days. If we need more time, we will tell you why and may take up to another 45 days. This covers requests under the CCPA and other state privacy laws that give the same rights. We do not sell or share personal information, so there is no separate “do not sell or share” switch.
Security
The API and this website use TLS. The database is encrypted at rest by the host. Plaid access tokens stay on the server. No method of storage or transmission is perfectly secure.
Children
sentientFi is not for anyone under 18. We do not knowingly collect personal information from a child. If you believe we have, email us and we will delete it.
Changes
We will change the effective date on this page when the policy changes. For a material change, we will also email the address on the account before it applies, when we have that address.
Contact
Jason Feliz
jason@sentientfi.app