Welcome to Trusty ("we", "our", "us"). We are committed to protecting your personal data and being transparent about how we collect, use, and store it.
This Privacy Policy explains what information we gather when you use the Trusty personal finance application ("App"), how we use it, and your rights regarding your data.
By using Trusty, you agree to the collection and use of your information in accordance with this policy. If you do not agree, please do not use the App.
When you sign up, we collect:
To provide our services, we may collect:
If you connect a bank account via Plaid (available in the US, Canada, UK, and EU), Plaid facilitates a secure connection between your bank and Trusty. Your bank login credentials are entered directly into Plaid's secure interface — Trusty never sees them. We receive a secure access token, transaction data (amounts, dates, merchant names, categories), account balances, and basic account details (account type, last 4 digits). We do not access full account numbers.
If you connect a bank account in Australia or New Zealand, we use Basiq as our accredited data recipient intermediary. Basiq operates under Australia's Consumer Data Right (CDR) legislation, which provides additional protections for your bank data.
When you connect via Basiq:
Withdrawing CDR Consent: You may withdraw your consent to share bank data at any time by disconnecting your bank account within the App (Profile → Bank Connections → Disconnect), or by contacting us at support@trustyfinance.app. Upon withdrawal, we will cease collecting new data from your bank and delete all previously collected CDR data within 30 days, unless required by law to retain it.
We may automatically collect:
We use your data to:
Your data is stored securely using Supabase (hosted on AWS infrastructure) with Row Level Security (RLS) enabled. This ensures that only you can access your own data.
Bank connection tokens (via Plaid or Basiq) are encrypted and stored separately. We never store your bank login credentials. Bank statement files uploaded for import are processed and then deleted — we do not retain the original files.
All API communications occur over HTTPS. Passwords are hashed and managed by Supabase Auth — we do not store plain-text passwords.
We retain your data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days, except where we are required by law to retain it.
Bank data retention: Synced bank transaction data is retained for as long as your bank connection is active and your account exists. If you disconnect a bank account or withdraw consent, we will delete the associated bank data within 30 days. You can request earlier deletion by contacting us.
We do not sell your data. We may share data with:
We do not sell, rent, or share your financial data with advertisers, data brokers, or any other third parties. CDR data collected via Basiq is never used for purposes beyond providing the App's features.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, contact us at support@trustyfinance.app. We will respond within 30 days.
You can request deletion of your data in the following ways:
Trusty is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of any significant changes through the App or by email. Continued use of the App after changes means you accept the updated policy.
If you have any questions about this policy, you can reach us at:
Trusty — trustyfinance.app