ResidualResidual

Privacy Policy

Last updated: February 2026

1. Introduction

Residual ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance application and related services (the "Service"). Please read this policy carefully. By using the Service you consent to the practices described here.

2. Information We Collect

We collect information in the following categories:

  • Account information — name, email address, and password when you register.
  • Financial data — transaction history, account balances, and institution names retrieved from your linked bank accounts via Plaid. We never receive or store your bank login credentials.
  • Budget data — budgets, envelope allocations, and notes you create within the Service.
  • Usage data — pages visited, features used, device type, browser, IP address, and crash reports collected automatically as you interact with the Service.
  • Communications — messages you send to our support team.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service.
  • Generate AI-powered budget suggestions and financial insights tailored to your spending patterns.
  • Sync your bank transactions in real time.
  • Send transactional emails such as account confirmations and security alerts.
  • Respond to support requests and resolve disputes.
  • Analyze aggregate usage trends to improve product features (using anonymized data where possible).
  • Comply with legal obligations.

4. Information We Share

We do not sell your personal information. We may share information with:

  • Plaid — to connect your bank accounts and retrieve transaction data. Plaid's use of your data is governed by their End User Privacy Policy at plaid.com.
  • Analytics providers — to help us understand how the Service is used. These providers process data on our behalf and are contractually prohibited from using it for their own purposes.
  • AI service providers — to generate budget recommendations. Only the minimum data necessary is shared, and providers are bound by confidentiality agreements.
  • Legal and safety — when required by law, court order, or to protect the rights and safety of Residual, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of all or a portion of our assets, with advance notice to you.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is 100% secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

6. Data Retention

We retain your account and financial data for as long as your account is active or as needed to provide the Service. After account deletion we may retain anonymized, aggregate data indefinitely. Certain information may be retained longer where required by law.

7. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — request that we delete your personal data, subject to legal retention requirements.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to certain processing activities.

To exercise any of these rights, contact us at the address in Section 11.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, disclose, and sell (we do not sell personal information). You also have the right to request deletion of your personal information and to not be discriminated against for exercising your rights. To submit a verifiable consumer request, contact us as described in Section 11.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or through an in-app notice and update the "Last updated" date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at alan@residualapp.com.