Privacy Policy
Last updated: July 8, 2026
This Privacy Policy explains how Stacks ("Stacks", "we", "us") collects, uses, and shares information when you use the Stacks mobile application and related services (the "Service"). By using the Service you agree to the practices described here.
1. Information we collect
Account information
When you create an account we collect your email address and authentication details. Sign-in and password management are handled by our authentication provider, Clerk; we do not store your password.
Financial account data (via Plaid)
If you choose to connect a bank, card, loan, or investment account, we use Plaid Inc. to establish that connection. You enter your financial institution credentials directly with Plaid — we never see or store your bank login. Through Plaid we receive information such as account names and balances, transaction history, and, where you enable it, account details like loan interest rates or investment holdings. Plaid's handling of your information is governed by the Plaid End User Privacy Policy.
Information you provide
We store the budgets, savings buckets, categories, and transactions you create, as well as any manual accounts you add (for example a property, vehicle, or crypto holding).
Receipt emails
If you set up receipt forwarding, emails you forward to your personal Stacks address are processed to extract the merchant, date, line items, and total. We use those details to create and categorize receipts and match them to your transactions. We do not retain the body of your forwarded emails — only the extracted structured fields. If an email cannot be parsed, we keep only the sender and subject as a diagnostic breadcrumb.
Device and usage information
To operate and troubleshoot the Service we process basic technical information such as your device platform and operating system (for example when you submit a bug report) and standard server logs. We do not log the contents of your bank or email data.
2. How we use information
- Provide, maintain, and improve the Service — budgeting, syncing transactions, categorization, receipt matching, and net-worth tracking;
- Authenticate you and keep your account secure;
- Respond to support requests and diagnose problems you report;
- Comply with legal obligations.
3. Service providers we share with
We share information only with the providers we use to run the Service, and only as needed for them to perform their function. We do not sell your personal information.
| Provider | Purpose |
|---|---|
| Plaid | Connecting your financial accounts and retrieving account and transaction data |
| Clerk | Account creation, sign-in, and session management |
| Mailgun | Receiving the receipt emails you forward |
| OpenRouter | Extracting structured receipt details from forwarded emails using a language model |
| Railway & Neon | Application hosting and database storage |
| Valuation APIs (RentCast, MarketCheck, CoinGecko, HERE, NHTSA) | Optional estimates for property, vehicle, and crypto values you choose to track |
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.
4. Data retention and deletion
We retain your information for as long as your account is active. You can disconnect a linked financial institution at any time in the app, which stops further data retrieval from that institution. You may request deletion of your account and associated data by contacting us at [email protected]; we will delete it except where we are required to retain certain records by law.
5. Security
We protect your information using industry-standard measures, including encryption in transit (HTTPS) and access controls. Access to production data is limited to authorized personnel for operating, supporting, and debugging the Service, and is used only for those purposes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
6. Your choices and rights
You can review and edit your data in the app, disconnect linked accounts, turn off receipt forwarding, and request account deletion. Depending on where you live, you may have additional rights to access, correct, or delete your personal information; contact us to exercise them.
7. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their information.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the app.
9. Contact us
Questions about this policy or your data? Email [email protected].
← Back to home