Your data, in plain words

What Falcon keeps

• Your account: your name, your email address, and your password, stored only as a one-way hash that nobody can read back.
• Your household's settings: currency, time zone, the no-think limit and your ranges.
• What you build in Falcon: your plan, vision, priorities, goals, rules, money-flow steps and check-ins.
• Your money data: the accounts and balances you add, and the transactions you import, connect or type in.
• A sign-in cookie, plus a few display preferences in your browser, like dark mode. No tracking or advertising cookies, and no analytics.

Falcon never sees or stores your bank password.

Bank connections through Plaid

Connecting a bank is optional. You can import CSV or OFX files from your bank, or add transactions by hand, and never connect anything. When this Falcon site offers bank connections, they go through Plaid Inc., a service that connects apps to banks. Falcon's access is read-only, and you sign in to your bank inside Plaid's window, so Falcon never sees your bank login.

Bank connections are switched off on this site right now, so nothing is sent to Plaid.

If you connect a bank, Plaid sends Falcon:

• each account's name, type and subtype, and the last four digits of its number;
• balances;
• transactions: amounts, dates, merchant names, categories and, where the bank provides it, location;
• the name of your bank or institution.

Plaid handles your information under its own End User Privacy Policy (opens in a new tab).

What it's used for

One thing: your own budgeting and planning inside Falcon. Your four numbers, goals, money-flow checks and monthly check-ins are built from it, and nothing else is. Falcon doesn't use your data in anonymised or combined form either.

Never sold

Falcon doesn't sell or rent your data, share it with advertisers, or show you offers based on it. There are no ads in Falcon.

How it's protected

• Everything travels over encrypted connections (HTTPS), and the database encrypts data at rest.
• The keys that let Falcon read a connected bank are sealed with their own encryption (AES-256-GCM), and only Falcon's server can open them.
• Passwords are stored as slow, salted one-way hashes.
• Each household's data is walled off: every request is limited to your own household's records.
• To slow down password guessing, Falcon briefly keeps hashed, unreadable versions of email and network addresses.
• You can sign out every other device from Settings at any time.

How long it's kept, and deleting it

• Your data is kept while your account exists.
• Disconnecting a bank tells Plaid to end Falcon's access to it right away. You choose whether to keep the transactions already brought in.
• Deleting your account (Settings, then Delete your account) first removes every bank connection with Plaid, then deletes all of your data immediately. The only copies left are in the database host's backups, which expire on their own schedule.
• If access to an account is revoked at your bank or through Plaid, Falcon deletes that account's bank data once it hears about it.

Revoking access at Plaid or your bank

Besides disconnecting inside Falcon, you can end Falcon's access to a bank at my.plaid.com (opens in a new tab), or in your bank's own settings for connected apps.

Who in your household can see it

Falcon keeps money data per household. Today a household has one member: you. If partner invites arrive later, every member of a household will see its accounts and transactions, including the ones that come from a connected bank.

Services that help run Falcon

These companies process data on Falcon's behalf, only to provide their part of the service:

• MongoDB AtlasDatabase hosting. Stores your Falcon data, encrypted at rest.
• NetlifyHosts the website and the server code that runs it.
• ResendSends account emails: sign-up confirmations and password resets.
• PlaidBank connections, only if you choose to connect a bank.

Your choices and how to reach us

• See and take your data: Settings, then Your data. Download everything as JSON, or your transactions as CSV.
• Correct it: anything you entered can be edited where it lives in Falcon.
• Delete it: Settings, then Delete your account. It takes effect immediately.

For questions about your data, or a request these tools don't cover, contact the team that runs this Falcon site.