Privacy Policy

Last updated: April 9, 2026

Flux ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our personal finance tracking platform.

1. Information We Collect

We collect the following types of information:

• Account information: Your name and email address when you create an account.
• Financial data via Plaid: When you connect your bank accounts, we receive transaction history, account balances, and account information (account name, type, and institution) through Plaid's secure API.
• Payment information: Billing details are collected and processed by Stripe. We do not store your credit card number on our servers.
• Usage data: Basic usage patterns to improve the product experience.

2. How We Use Your Data

Your data is used to provide core Flux functionality:

• Generating spending insights, category breakdowns, and trend analysis.
• Tracking your net worth across connected accounts.
• Powering budgets, savings goals, and financial summaries.
• Sending account-related notifications and updates.

3. Data Storage & Security

All user data is encrypted and stored in Supabase with Row Level Security (RLS) policies ensuring users can only access their own data. Plaid access tokens are encrypted with AES-256-GCM before being stored. Data is transmitted over HTTPS/TLS at all times.

4. Third-Party Services

We use the following third-party services to operate Flux:

• Plaid — Securely connects to your bank accounts and retrieves financial data.
• Stripe — Processes subscription payments.
• Clerk — Handles user authentication and session management.
• Supabase — Hosts our database infrastructure.
• Vercel — Hosts the Flux web application.

Each service operates under its own privacy policy and is contractually obligated to handle your data securely.

5. We Never Sell Your Data

Flux does not sell, rent, or trade your personal or financial data to third parties. Your data is used solely to provide and improve the Flux service.

6. Data Deletion

You can delete all of your data at any time from the Settings page within Flux. This will permanently remove your account, connected bank links, transaction history, and all associated data. You may also request deletion by emailing [email protected].

7. Cookies

Flux uses session cookies managed by Clerk for authentication purposes only. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

8. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify all affected users within 72 hours via email, along with details of what data was impacted and steps being taken to resolve the issue.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a notice within the Flux application.

10. Contact Us