1. Introduction
RetireFree ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our retirement planning application and services.
By using RetireFree, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and password when you create an account
- Retirement Inputs: Age, retirement age, savings amount, monthly expenses, and other calculator inputs you provide
- Communications: Messages you send to our support team
2.2 Financial Data via Plaid
When you choose to connect your bank or investment accounts through Plaid Technologies, Inc., we collect the following financial information with your explicit consent:
- Account Information: Account names, types (checking, savings, 401k, IRA, brokerage), and account numbers
- Balance Information: Current and available balances for connected accounts
- Transaction Data: Your transaction history for the last 90 days, including:
- Transaction amounts and dates
- Merchant names
- Automatic categorization (groceries, healthcare, travel, etc.)
- Investment Holdings: Investment account balances and asset values
We only have READ-ONLY access to your financial accounts. We cannot move money, make transactions, or make any changes to your accounts.
2.3 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on pages
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and essential functionality
3. How We Use Your Information
We use your information for the following purposes:
- Provide Services: Calculate safe retirement withdrawal amounts based on your savings and spending
- Spending Analysis: Analyze your transaction data to show where your money goes and compare to your budget
- Account Management: Maintain your account and authenticate your access
- Personalization: Provide personalized retirement recommendations based on your actual financial situation
- Communications: Send important service updates, security alerts, and respond to your inquiries
- Improvements: Improve our application and develop new features
- Security: Detect and prevent fraud, abuse, and security incidents
- Legal Compliance: Comply with applicable laws and regulations
4. How We Share Your Information
4.1 We DO NOT Sell Your Data
We will NEVER sell, rent, or share your financial data with third parties for marketing purposes.
4.2 Service Providers
We share information with trusted service providers who help us operate our application:
- Plaid Technologies, Inc.: Securely connects to your financial accounts (see Plaid's Privacy Policy at plaid.com/legal)
- Supabase: Database and authentication services (SOC 2 Type II certified)
- Vercel: Application hosting and infrastructure (SOC 2 Type II certified)
These service providers are contractually obligated to protect your data and use it only for providing services to us.
4.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal processes (subpoenas, court orders)
- Requests from law enforcement or government agencies
- Protection of our rights, property, or safety
- Prevention of fraud or security threats
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.
5. How We Protect Your Information
We implement industry-standard security measures to protect your data:
- Encryption in Transit: All data transmitted between your device and our servers uses TLS 1.3 encryption
- Encryption at Rest: Your financial data is encrypted in our database using AES-256 encryption
- Access Controls: Strict authentication requirements and role-based access to production systems
- Secure Infrastructure: SOC 2 certified cloud providers (Vercel, Supabase)
- Data Isolation: Row Level Security (RLS) policies ensure users can only access their own data
- Regular Audits: Ongoing security monitoring and vulnerability scanning
- Plaid Security: Bank-level security for financial connections (Plaid is SOC 2 and ISO 27001 certified)
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your Privacy Rights
6.1 Access and Portability
You have the right to:
- Access your personal information
- Request a copy of your data in a portable format
- View your connected accounts and transaction data in your dashboard
6.2 Correction
You can update your account information and calculator inputs directly in your dashboard at any time.
6.3 Deletion
You have the right to request deletion of your account and all associated data:
- Go to Settings → Delete Account
- All your data will be permanently deleted within 30 days
- Your Plaid connections will be immediately revoked
- Backup copies will be removed within 90 days
6.4 Disconnect Bank Accounts
You can disconnect your bank accounts at any time:
- Go to Dashboard → Accounts → Disconnect
- This immediately revokes RetireFree's access to your financial data
- Your previously synced transaction data will remain until you delete your account
6.5 Marketing Communications
You can opt out of promotional emails by clicking "unsubscribe" in any marketing email.
6.6 State-Specific Rights
California (CCPA): California residents have additional rights including the right to know what personal information we collect, the right to delete, and the right to opt-out of sales (though we don't sell data).
European Union (GDPR): EU residents have rights including access, rectification, erasure, data portability, and the right to object to processing.
To exercise these rights, contact us at privacy@retirefree.app
7. Data Retention
We retain your information as follows:
- Active Accounts: Data retained while your account is active
- Inactive Accounts: Transaction data deleted after 2 years of inactivity
- Deleted Accounts: All data permanently deleted within 30 days of account deletion
- Legal Requirements: Some data may be retained longer if required by law
- Backups: Backup data purged within 90 days of account deletion
8. Children's Privacy
RetireFree is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@retirefree.app.
9. International Data Transfers
RetireFree is based in the United States. If you access our services from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.
We use cloud providers (Vercel, Supabase) that comply with international data protection frameworks including GDPR.
10. Third-Party Links
Our application may contain links to third-party websites (e.g., Plaid). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Sending an email notification for material changes
Your continued use of RetireFree after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@retirefree.app
- Website: retirefree.app
For security issues or data breaches, contact: security@retirefree.app
13. Disclaimer
RetireFree provides informational tools for retirement planning. Our recommendations are NOT financial advice. We are not registered investment advisors. You should consult with a qualified financial professional before making retirement decisions.