This Privacy Policy explains how GroFunds (“we”, “us”, “our”) collects, uses, and protects your information when you use the GroFunds mobile app and related services (the “Service”). GroFunds is a personal finance tool. Your financial information is sensitive, and we’ve designed the Service to collect only what we need to run it.
Overview
GroFunds helps you see your accounts, track income and spending, plan budgets and goals, and share a household’s finances with people you invite. You can add accounts by hand, or connect your bank so balances and transactions arrive on their own. We connect to a bank only when you choose to, through our data provider Plaid, and that connection can only read your data — it cannot move money. We do not sell your personal or financial data.
Data we collect
Account information
- Your name and email address, provided when you sign up or sign in with email and password, Sign in with Apple, or Google Sign-In.
- An authentication identifier issued by our authentication provider (Supabase).
- A profile photo and birthday, if you choose to add them.
Bank information you choose to connect
When you connect a bank through Plaid, we receive, for the accounts you choose to share:
- Account details: the account name and the name your bank uses, its type, the last few digits of the account number, and the institution’s name and logo.
- Balances: current and available balances and, for cards, the credit limit.
- Transactions: amounts, dates, merchant names, the bank’s category, and whether a charge is still pending.
- For credit cards and loans: the statement balance, minimum payment, payment due date, interest rate, and original loan amount, where your lender provides them.
We do not receive your bank username or password, and we do not request your full account or routing numbers or identity details from your bank.
Financial information you enter
- Accounts you add by hand, and transactions you record, including amounts, dates, categories, notes, tags, and the account involved.
- Transfers, recurring bills and income, goals, debts, budgets, and rules you create.
- Receipt photos you attach to a transaction.
- Workspaces you create or join, and your membership and role within them.
Personalization information
- Onboarding answers used to tune the Service to you, such as your estimated monthly income and your goals.
- App preferences such as default currency, theme, notification settings, and whether you’ve agreed to marketing email.
Technical information
- Basic device and diagnostic information needed to operate the Service, deliver requests securely, and fix problems — for example, request identifiers, error logs, crash reports, and a push-notification token for your device.
Bank connections (Plaid)
GroFunds uses Plaid Inc. (“Plaid”) to connect to your financial institutions. When you choose to connect a bank, you sign in to your bank on Plaid’s screen, not ours, and choose which accounts to share. Plaid then provides us the information described above.
By connecting a bank, you acknowledge and agree that Plaid will collect, use, and share your information in accordance with Plaid’s End User Privacy Policy, and that we will use the information Plaid provides as described in this Privacy Policy.
- Read-only. The connection reads balances, transactions, and card and loan details. It cannot move money or make payments.
- Your choice of accounts. You choose which accounts to share, and you can change that choice later. An account you stop sharing stops updating; it stays in the app with its history until you delete it.
- Disconnect any time. You can disconnect a bank in the app. We then end our access with Plaid, and the bank’s accounts stay with their history until you delete them. Deleting a bank’s last account, or your GroFunds account, also ends our access.
- The access credential stays on our servers. Plaid gives us a credential to read your connected accounts. It is stored encrypted in a dedicated secrets service, is never sent to your device, and is destroyed when the connection ends.
Why we collect it
- To provide the Service. We store your financial records, keep connected accounts up to date, compute balances, net worth, spending, budgets and bill reminders, and show them to you.
- To personalize. We adapt the Service to the goals and preferences you give us.
- To enable collaboration. We let workspace members you invite see shared financial data.
- To communicate with you. We send account email (such as sign-in codes, password resets, and workspace invitations) and push notifications you can control in Settings. We send marketing email only if you agree to it, and every such email lets you unsubscribe.
- To process subscriptions. We verify and manage GroFunds Premium through the App Store and Google Play. We also use your workspace memberships to decide whether a workspace owner’s subscription covers you as their one included partner, and we pause syncing of the banks you connected when your access ends.
- To secure and improve the Service. We authenticate requests, prevent abuse, and diagnose issues.
How financial data is used
Your financial data is used to operate features you ask for. Balances, totals, budgets, and forecasts are calculated by deterministic code on our servers and on your device. These numbers are not generated by AI. Our servers hold the authoritative copy of your data, and a local copy is kept on your device so the app works offline.
How AI is used
Balances, totals, budgets, forecasts and every other figure in GroFunds are calculated by our own code on our servers and on your device. They are never generated by AI.
GroFunds uses an outside AI provider, OpenAI, for two things:
- Checking profile photos. A photo you upload is sent to OpenAI to check it for inappropriate content before it is shown to the other members of any workspace you share, such as a partner you invited. Your photo is never shown to anyone outside your shared workspaces.
- Glint, only if you turn it on. GroFunds answers a few simple questions itself,
without AI: your balance, your next pay, bills coming up, your net worth and what you've spent
this month. With AI on, every other question is answered by OpenAI's model, working from
figures GroFunds calculates. For each of those questions it sends OpenAI what that question needs:
- the question you typed, and the last few messages of the chat so far, word for word, so follow-ups make sense;
- the parts of your money summary that question needs: account and card balances, income and pay dates, bills, spending by category and merchant, debts, budgets, goals and what's free to spend, with the amounts;
- when it looks something up, up to 25 matching transactions at a time: date, merchant or description, amount, category and account name;
- the names of your accounts, cards, loans and goals, and their interest rates;
- facts Glint works out from your transactions to give answers that fit you, such as your country, whether you rent or own your home, and whether you pay for childcare;
- things you told Glint to remember, such as a raise or a debt that isn't linked.
Glint asks for your permission before it uses AI for the first time, and asks again whenever what it sends changes. You can turn it off at any time in Glint's menu; with it off, Glint answers only the questions it can work out without AI. Glint's answers are general information about your own money, not professional financial, investment, tax or legal advice.
OpenAI does not use what we send to train its models. It may keep it for up to 30 days to detect abuse, and then deletes it. Your Glint conversation is stored on our servers so it is there when you come back, on any device, until you clear it with Clear chat. Glint also keeps a few short notes about what you've asked before or asked it to remember, like a purchase you're saving for or a raise, so it can pick up where you left off. You can see, delete or turn off these notes in Glint's menu. Both are deleted with your account. We keep a count of AI questions and their cost per day to limit spending, and questions Glint could not understand without AI, with any amounts removed, for up to 30 days so we can improve it.
Data sharing
We do not sell your data. We share information only in these limited cases:
- Service providers who process data on our behalf to run the Service:
- Plaid, to connect your bank accounts (see Bank connections).
- Supabase, for our database, authentication, and file storage (receipts and profile photos).
- Google Cloud, for hosting our servers and storing access credentials.
- Firebase (Google), for push notifications, crash reports, and hosting our website.
- Resend, to deliver email.
- OpenAI, to check profile photos and, if you turn on AI answers in Glint, to answer those questions (see How AI is used).
- Apple and Google, to process subscriptions through the App Store and Google Play.
- Workspace members you invite. Financial data in a shared workspace is visible to its members.
- Legal reasons. We may share information if required by law, or to protect the rights, safety, and security of users and the Service.
How we protect data
We use encryption in transit (HTTPS) and at rest, secure authentication, and access controls scoped to each workspace. Our backend verifies your identity on every request and checks that you’re a member of a workspace before returning its data. Bank access credentials are kept in a dedicated secrets service and are never sent to your device. We collect the minimum data needed. No method of transmission or storage is 100% secure, but we work to protect your information using standard industry practices.
Retention & deletion
We keep your information for as long as your account is active. When you delete something in the app — an account and its transactions, a bank connection, or a recurring item — it is removed from the app at once and permanently deleted from our systems 30 days later. You can delete your entire account and data at any time; your sign-in is removed immediately and your data is permanently deleted within 30 days. See our Data Deletion page for how, what is removed, and what may be retained for legal or security reasons. You can also export your transactions to CSV at any time.
Your rights
Depending on where you live, you may have rights over your personal data. Subject to applicable law, you can:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete. Most of this you can edit directly in the app.
- Delete your account and data (see Data Deletion).
- Export your data. You can download your transactions to CSV from the app at any time.
- Withdraw consent or object to certain processing, where that applies — for example, by disconnecting a bank, turning off AI in Glint's menu, or turning off marketing email.
- Complain to your local data protection authority if you have concerns about how we handle your data: in Canada, the Office of the Privacy Commissioner of Canada, or your provincial commissioner (in Quebec, the Commission d'accès à l'information).
To exercise any of these, email privacy@grofunds.app. We may need to verify your identity before acting on a request.
International data transfers
GroFunds relies on service providers (such as Plaid, Supabase, Google Cloud and OpenAI) whose infrastructure may be located in countries other than your own, including the United States. When your data is transferred and processed in another country, we take steps to ensure it remains protected consistent with this Privacy Policy and applicable law.
Children's privacy
GroFunds is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We’ll change the “Last updated” date above and, for significant changes, provide additional notice where appropriate.
Contact
Questions about privacy or your data? Email privacy@grofunds.app.
The person in charge of the protection of personal information at GroFunds is our Founder, who can be reached at the same address. Before sending personal information outside Quebec or Canada, as with OpenAI for Glint, we assess the privacy risks and have a written agreement with the provider that requires it to protect that information.