Privacy policy

Ember (ember.justinwilkins.dev) shows you your own finances: accounts, transactions, net worth and plans. This page says what it collects, why, who else handles it, and how to remove it. It never sells your data or uses it for advertising.

What we collect

• Your account: your email address, and your name and profile picture if you sign in with Google.
• Financial data you connect: through Plaid, the accounts, balances, transactions, investment holdings and loan details your banks share. The credentials that let us fetch this are encrypted.
• What you enter: categories, tags, notes, rules, card and reward details, and retirement plans.
• Technical records: a record of sensitive actions (an audit log) and error reports with secrets and personal details removed.

How we use it

Only to run Ember for you: showing your numbers, suggesting categories, finding recurring charges, computing rewards and net worth, and sending the emails you ask for (sign-in links and, if you turn it on, a weekly summary).

Who else handles it

These services process data on our behalf, each only for the purpose listed:

• Plaid, to connect your financial accounts. Plaid's handling of your data is described in the Plaid End User Privacy Policy.
• Vercel (hosting), Neon (database) and Inngest (background jobs), which store and run the service.
• Resend, to send email.
• Google, if you choose to sign in with Google.
• Anthropic, to suggest a category for a merchant we haven't seen. It receives the merchant's name as it appears on a statement and your category names, never amounts, dates, account details or who you are.
• Sentry, for error reports, after tokens, account numbers, keys and personal details are removed.
• Stripe, only if you choose a paid plan, to handle payment.

How it's protected

Data is sent over HTTPS. Bank access tokens are encrypted with a key held only by the service. Each household's data is kept separate in the database, so one household can never read another's.

Your choices

• Export: Settings → Your data downloads everything as JSON, and your transactions as CSV.
• Disconnect a bank: Settings → Accounts ends the connection at Plaid and deletes its data here.
• Delete everything: Settings → Delete everything ends every bank connection and permanently deletes your household's data.
• Emails: the weekly summary can be turned off in Settings.

We keep your data until you delete it. Deleted data is gone from the live database at once; backups age out within the database provider's retention period.

Changes and contact

If this policy changes in a way that matters, the date above changes and you get an email about it. Questions or requests: ember@justinwilkins.dev.