Privacy Policy
Last updated: [DATE] · Effective: [DATE]
Harbor is an iPhone app that answers one question: can you afford this purchase? To do that it needs to see your financial picture. This policy sets out what is collected and what happens to it.
Harbor is operated by [LEGAL ENTITY NAME] (“Harbor”, “we”, “us”), [ADDRESS]. Contact us at privacy@YOURDOMAIN.com.
What we collect
Account identity
You sign in with Sign in with Apple. We receive a stable Apple user identifier and, if you choose to share it, an email address (which may be Apple's private relay address). We never receive your Apple ID password.
Financial data, through Plaid
When you link a bank, you authenticate inside Plaid's own secure flow. Your bank credentials are never sent to Harbor and we never see them. Plaid returns a read-only access token, which we store encrypted. Using it, we retrieve and store:
- Account names, types, and balances
- Transaction history, including the date, amount, merchant, and description
- Derived information: income, recurring bills, debt balances, and spending categories
The connection is read-only. Harbor cannot initiate transfers, payments, or any other movement of money.
Your questions
The purchase questions you type, the item and amount extracted from them, and the recommendations returned to you.
Subscription
Your subscription is purchased through Apple. Apple handles payment; we receive a transaction receipt and entitlement status from Apple in order to unlock the app. We never receive your card or payment details.
Technical data
Standard operational data such as app version, device type, IP address, timestamps, and error reports. We use it to keep the service running and to diagnose faults.
How we use it
- To produce an affordability recommendation for a purchase you ask about
- To keep your balances and transactions current
- To verify your subscription and provide support you request
- To secure the service and diagnose faults
We do not sell your data, share it with advertisers or data brokers, or use it to target advertising.
Who we share it with
Only service providers that make the app work, each limited to what they need:
- Plaid: connects to your bank and supplies account and transaction data. Plaid's handling of your data is governed by its own End User Privacy Policy.
- Anthropic: a summary of your financial position (balances, income, upcoming bills, debt, spending level) and the purchase you asked about are sent to the Claude API to generate the recommendation. This data is not used to train models.
- Apple: sign-in and subscription billing.
- Cloud hosting and error-monitoring providers in the United States, which store and process data on our behalf.
We may also disclose data where legally required, or to protect the rights and safety of users and the service.
Retention
We keep your data for as long as your account is active. Transaction history is retained for [RETENTION PERIOD] so that spending patterns can be assessed. When you delete your account, we revoke every bank connection and permanently erase your data, except anything we are legally required to keep.
Your choices
- Disconnect a bank at any time in Settings. We stop syncing that institution immediately.
- Delete your account from Settings. This revokes all bank connections and hard-deletes your data.
- Access, correction, and portability: email privacy@YOURDOMAIN.com and we will respond within [30] days.
Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA or GDPR, including the right to object to processing and to lodge a complaint with a supervisory authority. [ADD JURISDICTION-SPECIFIC SECTIONS AS YOUR COUNSEL ADVISES.]
Security
Data is encrypted in transit (TLS) and at rest. Bank access tokens are additionally encrypted at the application layer before they are written to our database. Access to production systems is restricted and credentials are held in a managed secret store. No system is perfectly secure, but this data is handled as sensitive.
Children
Harbor is not directed to anyone under 18, and we do not knowingly collect data from children.
Changes
If we change this policy materially, we will update the date above and notify you in the app before the change takes effect.