Privacy Policy

Overview

This Privacy Policy explains how [Company name] ("FlameFolio", "we", "us") collects, uses and shares information when you use our website, the founding-member waitlist, and the FlameFolio app (together, the "Services"). Your use of the Services is governed by our Terms of Service; this policy explains our practices.

The short version: your financial data is encrypted, we don't sell it, we don't show you ads, and you can delete it whenever you want.

1. Scope of Services

FlameFolio is a retirement planning and personal finance tool. It lets you build retirement plans from numbers you type in or from accounts you choose to link, works out projected taxes year by year, tests plans against historical market returns, and tracks spending, balances and net worth.

2. Types of Information We Collect

Waitlist information: your email address, the social platform and handle you choose to give us (or that you'd prefer not to say), which signup form you used, and when you joined.

Account information: a password-protected account, and passkeys if you add them. We store a one-way hash of your password, never the password itself.

Planning information you enter: ages, income, spending, savings, account balances, assumptions, goals, life events and other inputs you add to a plan.

Information about other people in your plan, such as a spouse or partner, children or other dependents (for example their ages, income or benefits), entered by you. We use it only to run your plan. Please add someone only if you have the right to share their information with us.

Linked financial information, if you choose to connect accounts: account names, balances, holdings and transactions from banks, cards, brokerages and exchanges, and public wallet addresses with their on-chain balances and history.

Email information, if you choose to connect a Google account (see section 7).

Technical information: your IP address and basic request details, used to keep the Services running, prevent abuse and limit repeated requests.

3. How We Collect Your Information

Directly from you, when you join the waitlist, create an account, or type information into the app.

From services you connect. Bank and card data comes through account aggregators such as Plaid and SimpleFIN, which have their own privacy policies (Plaid's End User Privacy Policy is at plaid.com/legal); we never see or store your bank login. Exchange data comes through read-only API keys you add. Wallet data comes from blockchain data providers (such as Zerion, Alchemy, Helius and Etherscan) using the public addresses you enter.

Cookies and browser storage. We use a small number of first-party cookies that the Services need to work: one that keeps you signed in, one that protects forms against cross-site request forgery, and one that remembers a display preference. The app also keeps layout preferences in your browser. We don't use third-party analytics, advertising or tracking cookies, and no third party collects information about your activity across other websites through our Services.

Do Not Track and Global Privacy Control. Because we don't track you across websites or sell or share your information, there is nothing for these browser signals to turn off; we treat a Global Privacy Control signal as a request to opt out of any sale or sharing.

4. Use of Your Information

We use information to provide and improve the Services: to run your plans and projections, sync linked accounts, keep your account secure, answer support requests, and prevent fraud and abuse.

We use waitlist information to send your founding-member invite and occasional launch news, and to understand which communities people come from. Every marketing email has an unsubscribe link, and you can ask us to stop at any time; it can take up to 10 business days to take effect. We don't send marketing texts, and we don't use third-party email publishers.

We don't use your financial data for advertising, and we don't build profiles of you for anyone else.

Some of what you give us, such as financial account information and the contents of emails you let us read, counts as sensitive personal information under California and other state laws. We use it only to provide the Services you ask for, to keep them secure, and to comply with the law.

5. Sharing Your Information

We do not sell your personal information, and we do not share it for advertising.

We don't have a partner network. We don't pass your details to lenders, insurers, advisers or other companies that want to sell to you, and no one will call you because you used FlameFolio.

We share information only: with service providers that help us run the Services (our hosting provider, exe.dev; the account and data providers you choose to connect; the AI provider you configure; and a payment processor and an email provider once billing and invites start, which we will name here when they do), and only as needed for that purpose; when you ask us to; to comply with the law, a court order or valid legal process, or to protect the rights and safety of our users and others; and, if we are involved in a merger, acquisition or sale of assets, with the buyer, who must keep honoring this policy. We will email you before your information is transferred, and tell you about any choices you have.

6. AI Features

Some optional features use an AI provider that you configure yourself (Anthropic Claude, OpenAI or Google Gemini). When you use them, the information needed for that request is sent to the provider you chose, under your own agreement with them. FlameFolio works without AI, and nothing is sent to an AI provider unless you set one up.

We don't store your AI chat conversations on our servers, and we don't use your data to train AI or machine-learning models. The AI provider you configure keeps data under its own policies.

7. Gmail Data

When you choose to connect a Google account, we request read-only access to Gmail (the gmail.readonly scope) and your basic account identity. We cannot send, delete or change your email.

We search for specific kinds of messages: sign-up and account notification emails (to build a directory of which email address you used for each service) and travel confirmations such as flight, hotel and car bookings (to import trips). Full email bodies are not stored; for the account directory, the subject, sender and a short snippet are kept, encrypted, as evidence of where each entry came from.

If you have configured an AI provider, the subject and text of matching messages are sent to that provider solely to extract those details. Trip import requires an AI provider; the account directory falls back to a rule-based parser without one.

Data we receive from Google, including Gmail data, is: used only to provide the features you turned it on for; never sold; never transferred to anyone except the AI provider you configure for the purpose above, as the law requires, or in a merger, acquisition or sale of assets; never used for advertising or for credit or lending decisions; never used to develop, improve or train AI or machine-learning models; and never read by people, except with your permission, for security, to comply with the law, or in anonymized, aggregated form for internal operations.

You can disconnect a Google account at any time from the Accounts page, which deletes its stored tokens, or revoke access at myaccount.google.com/permissions.

8. Cryptocurrency and Blockchain Considerations

Wallet tracking uses public addresses only. We never ask for private keys or seed phrases, and you should never enter them. Blockchain records are public and permanent; we can delete the copy we store, but not the record on the chain.

9. Your Controls and Choices

You can edit or delete your plans and data in the app, disconnect any linked account or Google account, and delete all of your data at any time. You can also ask us to access, correct or delete your personal information, or to remove you from the waitlist, by emailing [privacy email]. We may need to verify your identity first.

10. Third-Party Websites and Services

The Services link to and work with third-party services, such as account aggregators, exchanges and AI providers. Their privacy practices are governed by their own policies, and we are not responsible for them.

11. Children's Privacy

The Services are for adults. We do not knowingly collect personal information from anyone under 18; parents may enter details about their dependents as part of a plan (section 2). If you believe a child has given us information directly, email [privacy email] and we will delete it.

12. Data Security and Retention

Your financial data is encrypted at rest with AES-256-GCM, using a per-user key derived from your password (PBKDF2-SHA256, 600,000 rounds). While you are signed in, the server holds your key so it can sync accounts and run your plans; this means the Services are not zero-knowledge. People at FlameFolio don't look at your data, except with your permission, to keep the Services secure, or to comply with the law. Because your key comes from your password, we cannot recover your data if you forget it.

No system is perfectly secure, but we use encryption, access controls and limits on repeated requests to protect your information. If a security incident affects your personal information, we will notify you and, where required, regulators, without undue delay.

We keep your information for as long as your account exists or as needed to provide the Services, meet legal obligations and resolve disputes. When you delete data it is removed from the live database, and any copies in backups are removed as those backups are replaced. If you close your account, we delete its data within 60 days unless the law requires us to keep it. Waitlist entries are deleted 12 months after the founding offer closes, unless you've become a customer.

13. International Data Transfers

The Services are run from and intended for the United States, and your information is stored in the United States. If you use them from elsewhere, your information will be transferred to and processed in the United States.

14. Updates to This Privacy Policy

We may update this policy from time to time and will change the date at the top when we do. If a change materially expands how we collect, use, share or keep your information, we will tell you in the app or by email before it takes effect, and where the law requires your consent, we will ask for it first. Otherwise, continuing to use the Services after an update means you accept it.

15. Your State Privacy Rights

Depending on where you live, including California and other states with privacy laws, you may have the right to know what personal information we collect and how we use and share it, to get a copy of it, to correct it, to delete it, and to opt out of its sale, sharing or use for targeted advertising. We do not sell or share personal information as those terms are defined under California law, and we don't use it for targeted advertising, so there is nothing to opt out of.

To make a request, email [privacy email]. We may need to verify your identity first, and we respond within 45 days. If we turn down your request, you can appeal by replying to our answer. We will not treat you differently for using these rights.

16. Contact Us

Questions about this policy: [contact email]. Privacy requests: [privacy email]. By mail: [Company name], [Mailing address].

Google API Services User Data Policy

FlameFolio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.