Privacy Policy

Last updated: June 29, 2026

1. Overview

Threshold Money LLC (“Threshold,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our mobile application (“the App”). We believe you should understand exactly what happens with your data, so we've written this policy in plain language.

By creating an account or using the App, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use Threshold.

2. Information We Collect

We collect the following categories of information:

Account Information

• Email address
• First name (optional)
• Password (hashed — we never store your password in plain text)

Financial Data

• Bank account names, types, and balances retrieved through Plaid
• Transaction history (amounts, dates, merchant names, categories)
• Institution names and logos

We never receive or store your bank login credentials. Plaid handles all bank authentication directly.

Usage Data

• Device type and model
• Operating system and version
• App version
• Crash logs and error reports (collected via Sentry)
• CAPTCHA verification tokens (processed via Cloudflare Turnstile during authentication)

3. How We Use Your Information

We use your information to:

• Authenticate your identity and secure your account
• Display your financial accounts, balances, and transactions
• Provide personal finance organization tools (canvas, goals, groups, calculations)
• Send transactional emails (password resets, account notifications)
• Diagnose and fix bugs using crash reports
• Improve and maintain the App

We do not sell your personal information. We do not use your data for advertising. We do not share your financial data with third parties for their own marketing purposes.

4. Third-Party Services

We use a limited number of third-party services to operate the App. Each serves a specific purpose, and none of them receive more data than necessary.

Plaid— Connects to your bank. Plaid acts as a secure bridge between Threshold and your financial institution. It retrieves your account information and transactions on your behalf. Your bank login credentials go directly to Plaid and are never shared with us. Plaid's privacy policy is available at plaid.com/legal.

Supabase— Stores your data. Supabase provides our database and backend infrastructure. Your account information, financial data, and app settings are stored on Supabase's encrypted cloud servers. Supabase's privacy policy is available at supabase.com/privacy.

Sentry— Catches bugs. Sentry collects crash logs and error reports so we can identify and fix problems. Crash data may include device type, OS version, app version, and the technical details of the error. It does not include your financial data. Sentry's privacy policy is available at sentry.io/privacy.

Cloudflare Turnstile— Prevents bots. During authentication, Cloudflare Turnstile verifies that you are a real person using a non-intrusive CAPTCHA. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy, and Cloudflare's collection and use of data in connection with Turnstile is governed by the Cloudflare Turnstile Privacy Addendum, available at cloudflare.com/turnstile-privacy-policy.

Resend— Sends emails. We use Resend to deliver transactional emails such as password reset links and account notifications. Resend's privacy policy is available at resend.com/legal/privacy-policy.

RevenueCat— Manages subscriptions. We use RevenueCat to process subscription purchases and entitlements. We send it a pseudonymous user identifier and it returns your subscription and purchase status. RevenueCat does not receive your financial account data. RevenueCat's privacy policy is available at revenuecat.com/privacy.

5. Connecting Your Own AI Tools (Model Context Protocol)

Threshold supports the Model Context Protocol (MCP), an open standard that lets you connect your own AI assistant — such as Claude or ChatGPT — to your Threshold data. This connection is off by default and only happens if you choose to set it up.

When you connect an AI tool through MCP and authorize access, you are directing Threshold to share the data you approve with that tool so it can answer your questions. Threshold does not send your data to any AI provider on its own — this happens only at your request, through a connection you create and control.

Once your data reaches a connected AI tool, it is governed by your agreement with that tool's provider, not by this Privacy Policy. You can revoke a connected tool's access at any time by disconnecting it within that AI tool (for example, removing the Threshold connector in Claude's settings), which immediately stops any further data from being shared with it. You can also revoke all connections by deleting your Threshold account.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using HTTPS/TLS
• Plaid access tokens are encrypted at rest using AES-256-GCM
• Your bank login credentials are never stored on our servers — Plaid handles all bank authentication
• Passwords are hashed and salted before storage
• Our backend infrastructure uses row-level security policies to isolate user data

No system is 100% secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@thresholdmoney.app.

7. Data Retention

We retain your data according to the following schedule:

• Account data (email, settings, canvas layout): Retained while your account is active. When you delete your account, this data is permanently and immediately deleted and cannot be recovered
• Financial data (accounts, balances, transactions): Retained while your account is active. Permanently and immediately deleted when you delete your account
• Crash logs and error reports: Retained for 90 days, then automatically purged

Account deletion is immediate and irreversible. Any residual copies in routine infrastructure backups are overwritten in the normal backup rotation; they are not an account-recovery mechanism.

8. What Happens When You Disconnect a Bank

When you disconnect a bank account from Threshold:

• We revoke the Plaid access token for that institution, stopping all future data retrieval
• We permanently delete that institution's accounts and synced transaction history from Threshold. Disconnecting is not reversible — to see that data again you would need to reconnect the bank and re-sync
• To remove all of your data across every connected account, you can delete your Threshold account in the app, or contact us at privacy@thresholdmoney.app

9. Your Privacy Rights

Depending on where you live, you may have specific rights regarding your personal information. We honor these rights regardless of whether we are technically required to under each law, because we believe they reflect good practice.

All Users

Every Threshold user can:

• Access their personal data
• Request correction of inaccurate data
• Request deletion of their account and data
• Disconnect financial accounts at any time

To exercise these rights, email privacy@thresholdmoney.app. We will respond within 30 days.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to:

• Know what personal information we collect, use, and disclose
• Delete your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information — we do not sell or share your personal information, so there is nothing to opt out of
• Non-discrimination — we will not treat you differently for exercising your privacy rights
• Limit use of sensitive personal information — we only use sensitive personal information (financial data) to provide the service you requested

We do not sell personal information as defined by the CCPA/CPRA. We do not use personal information for cross-context behavioral advertising.

Virginia Residents (VCDPA)

Under the Virginia Consumer Data Protection Act, you have the right to: confirm whether we are processing your personal data and access that data; correct inaccuracies; delete your personal data; obtain a portable copy; and opt out of targeted advertising, sale, or profiling — we do not engage in any of these activities.

If we deny your request, you may appeal by emailing privacy@thresholdmoney.appwith the subject line “VCDPA Appeal.”

Colorado Residents (CPA)

Under the Colorado Privacy Act, you have the right to: confirm whether we process your personal data and access it; correct inaccuracies; delete your data; obtain a portable copy; and opt out of targeted advertising, sale, or profiling — we do not engage in any of these activities.

If we deny your request, you may appeal by emailing privacy@thresholdmoney.appwith the subject line “CPA Appeal.”

Connecticut Residents (CTDPA)

Under the Connecticut Data Privacy Act, you have the right to: confirm whether we process your personal data and access it; correct inaccuracies; delete your data; obtain a portable copy; and opt out of targeted advertising, sale, or profiling — we do not engage in any of these activities.

If we deny your request, you may appeal by emailing privacy@thresholdmoney.appwith the subject line “CTDPA Appeal.”

Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act, you have the right to: confirm whether we process your personal data and access it; correct inaccuracies; delete your data; obtain a portable copy; and opt out of targeted advertising, sale, or profiling — we do not engage in any of these activities.

If we deny your request, you may appeal by emailing privacy@thresholdmoney.appwith the subject line “TDPSA Appeal.”

10. Global Privacy Control

We recognize and honor the Global Privacy Control (GPC) signal. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal information. Since we do not sell or share your personal information, this signal requires no change to how we process your data, but we acknowledge it as a matter of policy.

11. We Do Not Track You

Threshold does not use cookies. We do not use third-party advertising trackers. We do not build behavioral profiles. We do not engage in cross-app or cross-site tracking. We do not share your data with data brokers or advertising networks. The only data we collect is what is described in Section 2, used solely to provide and improve the service.

12. What Threshold Is

Threshold is a personal-finance software tool. It helps you view and organize financial information retrieved from your financial institutions through Plaid on a read-only basis — Threshold cannot move money, initiate transactions, or take any action on your bank accounts.

13. Not Financial Advice

Threshold is an informational tool that helps you organize and visualize your financial data. Nothing in the App — including responses from AI tools you connect, calculations, goal projections, or any other feature — constitutes financial, investment, tax, or legal advice. We provide math, not recommendations. Any decisions you make based on information in Threshold are your sole responsibility. If you need financial advice, consult a licensed professional.

14. Children's Privacy

Threshold is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@thresholdmoney.app.

15. Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected users by email within 72 hours of confirming the breach
• Describe the nature of the breach and what data was affected
• Explain what steps we are taking to address the breach
• Provide guidance on what you can do to protect yourself
• Notify relevant state authorities as required by applicable law

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page, updating the “Last updated” date, and sending a notification via email or in the App. Your continued use of Threshold after changes are posted constitutes acceptance of the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Email: privacy@thresholdmoney.app

General support: support@thresholdmoney.app