The short version: ClearFlow collects only what's necessary to run the service. We do not sell your data, show ads, or share your financial information with third parties for marketing. Your bank credentials are never stored by us.
ClearFlow ("we," "us," "our") operates the ClearFlow budgeting application at clearflow.app. We are the data controller for personal information described here. Questions: privacy@clearflow.app or our Contact page.
| Data Type | What It Includes | Why We Collect It |
|---|---|---|
| Account information | Name, email address, password (hashed with bcrypt) | To create and authenticate your account |
| Household information | Household name, member names and emails | To enable shared budgeting |
| Budget data | Income, spending categories, amounts | To calculate and display your budget |
| Expense data | Amounts, dates, merchant names, categories | To track and report your spending |
When you connect a bank through Teller.io or Plaid, we receive read-only transaction data: amounts, dates, merchant names, account names, types, and last four digits. We never receive or store your bank login credentials, full account numbers, or Social Security numbers.
Log data (IP addresses, browser type, timestamps) for security; session tokens in httpOnly cookies; activity logs (sign-in events, password changes) for account security.
| Service | Purpose | Data Shared |
|---|---|---|
| Teller.io | Bank connectivity and transaction import | Enrollment tokens; transaction data received in return |
| Plaid | Alternative bank connectivity (inactive by default) | Public tokens exchanged for access tokens |
| Brevo | Transactional email delivery | Email addresses, names, email content |
| Cloud hosting | Infrastructure | All application data, stored in the United States |
We do not use advertising networks, social media tracking pixels, or third-party analytics. We do not sell your data.
Passwords are hashed with bcrypt (cost 12). All connections use HTTPS/TLS. Bank connections use mutual TLS in production. Sessions are stored in httpOnly, Secure, SameSite=Lax cookies. Two-factor authentication is required at every sign-in. See our Security page for full details.
Contact privacy@clearflow.app to exercise any of these rights.
ClearFlow does not sell personal information. California residents may request to know, correct, or delete their personal information by contacting privacy@clearflow.app.
ClearFlow is not directed to anyone under 18. If you believe a minor has provided us information, contact privacy@clearflow.app and we will delete it immediately.
We use one essential cookie: cf_token — an httpOnly authentication cookie required to keep you signed in, expiring after 30 days. We do not use advertising cookies, analytics cookies, or any third-party tracking technology.
Material changes will be communicated by email before they take effect. Continued use of ClearFlow after changes are posted constitutes acceptance.