1. Scope
This Privacy Policy covers Personal Data we collect when you access or use the Service, create an account, connect financial accounts, use budgeting or investment tools, participate in account-linking or household features, subscribe, contact support, visit our website, receive communications, or otherwise interact with Consul Money.
Your use of the Service is also subject to our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given in the Terms of Service.
This Privacy Policy does not apply to websites, services, applications, or businesses that we do not own or control, or to people we do not manage, even if they are linked to or integrated with the Service.
Consul Money is operated from the United States. We and our service providers may process, store, and transfer Personal Data in the United States and other countries where we or our providers operate. Those countries may have data protection laws that differ from the laws where you live.
2. Personal Data
"Personal Data" means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to a particular individual or household. Personal Data includes information referred to as "personal information," "personally identifiable information," "sensitive personal information," or similar terms under applicable privacy laws.
"Financial Data" means Personal Data related to your financial life, including account balances, transactions, holdings, investments, liabilities, income, categories, budgets, rules, recurring payments, subscriptions, merchants, account identifiers, and information retrieved from financial institutions or other third-party data sources you connect.
"Sensitive Personal Data" means information considered sensitive under applicable law, which may include account login credentials, financial account information, precise geolocation, government identifiers, health-related information where it relates to debt or transactions, biometric information, and other sensitive categories. We do not collect Sensitive Personal Data to infer characteristics about you unless we expressly tell you otherwise and obtain consent where required.
3. Categories Of Personal Data We Collect
Depending on how you use the Service, we may collect the following categories of Personal Data and may have collected them in the past 12 months:
| Category | Examples | Typical Purposes | Typical Disclosure Categories |
|---|---|---|---|
| Account Data | Login information, user ID, authentication tokens, account settings, account status, subscription status, household or account-link identifiers. | Create and manage accounts, authenticate users, provide and secure the Service, support account linking and subscriptions. | Service providers, authentication providers, parties you authorize, security providers. |
| Profile Data | Name, email address, phone number, profile photo, preferences, language, region, referral information, support identifiers. | Provide the Service, personalize experiences, communicate with you, provide support, administer referrals or promotions. | Service providers, support vendors, marketing and advertising partners where permitted, parties you authorize. |
| Financial Data | Account balances, transactions, merchants, categories, budgets, recurring charges, debts, investments, holdings, net worth, account names, institution names, settlement or sharing information. | Provide budgeting, tracking, reporting, account-linking, financial aggregation, subscription, investment, and notification features. | Service providers, financial data providers, parties you authorize, household members, account-link members, financial professionals. |
| Payment Data | Payment method type, last four digits, expiration date, billing address, subscription plan, purchase history, invoices, refunds, app-store purchase identifiers. | Process payments, manage subscriptions, prevent fraud, provide support, maintain accounting records. | Payment processors, Stripe, RevenueCat, Apple, Google, app stores, service providers. |
| Household And Account-Link Data | Household membership, account-link membership, sharing permissions, linked profiles, permissions, relationship to account owner, shared categories, visibility settings, invite status. | Provide household, account-linking, shared-account, permission, and settlement features. | Service providers, household members, account-link members, financial professionals, parties you authorize. |
| Professional Or Employment Data | Employer, job title, income source, payroll-related transaction information, financial professional role or client relationship, if provided or linked. | Provide financial organization tools, support account linking, provide professional access features if used. | Service providers, parties you authorize, financial professionals. |
| Device And Network Data | IP address, device ID, advertising ID, operating system, browser, device type, app version, crash logs, diagnostic identifiers, push notification tokens. | Operate, secure, debug, personalize, analyze, and improve the Service; deliver notifications; prevent fraud. | Service providers, analytics providers, security providers, advertising partners where permitted. |
| Usage And Web Analytics | Screens or pages viewed, features used, links clicked, referring URL, session events, access times, email opens, interaction with content, error logs, non-sensitive text entered into support or feedback forms. | Understand use of the Service, improve product design, debug, measure campaigns, personalize content, support users. | Service providers, analytics providers, advertising partners where permitted. |
| Location Data | Approximate location from IP address, city, state, ZIP code, country, or precise location if you grant device permission for a feature that uses it. | Security, fraud prevention, localization, compliance, feature support where enabled. | Service providers, security providers, parties you authorize. |
| Consumer Demographic Data | Age range or date of birth, gender, city, state, ZIP code, region, country, language, household composition, or similar demographic information if you provide it or it is inferred from your use of the Service. | Provide, personalize, analyze, secure, market, and improve the Service; administer promotions and referrals. | Service providers, advertising partners where permitted, parties you authorize. |
| Sensory Or Uploaded Data | Images, receipts, attachments, files, screenshots, support recordings, profile photos, if you choose to provide them or permit access. | Provide requested features, support, identity or troubleshooting workflows, improve the Service. | Service providers, support vendors, parties you authorize. |
| Inferences | Budget patterns, spending insights, recurring transaction predictions, category suggestions, financial trends, preferences, inferred interests. | Provide insights, categorize transactions, personalize the Service, improve product features. | Service providers, parties you authorize. |
| Communications And Voluntary Information | Emails, support requests, survey responses, feedback, feature requests, promotion entries, reviews, comments, and other information you choose to provide. | Respond to you, provide support, improve the Service, administer promotions, protect rights, enforce terms. | Service providers, support vendors, business partners, parties you authorize. |
We may collect additional information with your consent or as described when you provide it.
4. Sources Of Personal Data
We collect Personal Data from the following categories of sources:
- You, when you create an account, enter information, use interactive tools, set budgets, categorize transactions, create rules, upload files, respond to surveys, participate in referrals or promotions, contact us, or otherwise provide information.
- Your use of the Service, including app events, pages and screens viewed, links clicked, feature interactions, crash reports, device data, diagnostic data, notification events, and similar usage information.
- Financial institutions and Third-Party Data Sources you choose to connect, including banks, brokerages, card issuers, payroll providers, merchants, financial platforms, crypto wallets or exchanges, and similar sources.
- Financial data and account-linking providers, such as Plaid, MoneyKit, Quiltt, or similar providers that help connect and sync financial accounts.
- Payment and subscription providers, such as Stripe, RevenueCat, Apple, Google, app stores, and payment processors.
- Authentication providers and platform services, such as Apple Sign In, Google Sign-In, Firebase, device operating systems, and similar login or infrastructure providers.
- Household members, account-link members, linked account users, financial professionals, advisers, or other people you authorize through the Service.
- Vendors and service providers, including analytics providers, crash reporting providers, security and fraud prevention vendors, customer support tools, cloud hosting providers, notification providers, and marketing providers.
- Other third parties or public sources, where permitted by law and relevant to the Service.
When you contact us with questions, comments, support requests, complaints, or other outreach, we may collect your contact information, such as your name and email address, and any information you provide in connection with the request. If you post or submit information in publicly accessible parts of the Service, such as feature requests, reviews, public comments, forums, or community spaces we make available, we may collect that information and it may be visible to others. If you participate in promotions, referral programs, events, surveys, sweepstakes, contests, beta programs, or research, we may collect basic contact information and any other information you provide or that is needed to administer the activity.
5. Financial Data And Account Linking
When you connect a financial account or other Third-Party Data Source, we collect and process Financial Data from that source to provide the Service. This may include balances, transactions, account names, account types, holdings, investments, liabilities, merchants, categories, account identifiers, institution information, and other data available through the connection.
If you connect Apple Card, Apple Cash, Savings, or other eligible Apple Wallet financial accounts through Apple FinanceKit, we collect the Apple Wallet account details, balances, available balances, Apple Card credit limits where available, transaction dates, descriptions, merchants, amounts, status, and account identifiers that you authorize Apple Wallet to share with Consul Money. FinanceKit access occurs on your device through Apple's permission flow; after Consul Money imports the data, we may sync it to our cloud systems so your account data can be backed up, categorized, analyzed, and displayed in the Service.
You can revoke Apple Wallet data sharing through Apple or the Service where available. Revoking access may stop future syncing but may not automatically delete Apple Wallet data that was previously imported into Consul Money, backups, logs, derived data, or records retained as described in this Privacy Policy. Apple is not responsible for Consul Money's storage, processing, or deletion of Financial Data after you authorize sharing with us.
We may collect credentials, tokens, API keys, session cookies, or other authorization information necessary to establish or maintain a connection you request. In many cases, your financial institution login credentials are handled by a third-party provider and may not be received by Consul Money directly.
By connecting a Third-Party Data Source, you agree that we and our service providers may collect, use, and disclose information as needed to establish, maintain, troubleshoot, refresh, and secure that connection, subject to this Privacy Policy and applicable third-party terms and privacy policies.
Account data retrieved from Third-Party Data Sources may be delayed, incomplete, inaccurate, or unavailable. You should consult official records from your financial institution for transactional, tax, legal, investment, or account-balance decisions.
6. How We Use Personal Data
We use Personal Data for the following business and commercial purposes:
- Provide, operate, maintain, and improve the Service and the features you request.
- Create, authenticate, secure, and manage accounts, profiles, subscriptions, account links, and household features.
- Retrieve, sync, categorize, display, analyze, and organize Financial Data.
- Provide customer support, respond to requests, troubleshoot, and resolve issues.
- Personalize the Service, communications, budgets, categories, insights, alerts, and recommendations.
- Process payments, subscriptions, referrals, promotions, refunds, invoices, and app-store transactions.
- Send operational, transactional, security, account, billing, support, and administrative notices.
- Send marketing communications, offers, referral information, surveys, and promotional content according to your preferences and applicable law.
- Analyze usage, test features, conduct research, measure performance, debug, and improve functionality and usability.
- Detect, investigate, prevent, and respond to fraud, abuse, security incidents, illegal activity, and violations of our terms.
- Understand and resolve crashes, diagnostics, syncing failures, notification issues, and other technical problems.
- Use automated systems, algorithms, rules, AI-assisted tools, or machine-learning features to categorize transactions, generate insights, detect duplicate or recurring items, personalize the Service, detect fraud or abuse, debug issues, and improve functionality.
- Comply with laws, regulations, legal processes, audits, tax obligations, and enforceable governmental requests.
- Establish, exercise, defend, or protect legal rights, enforce our Terms of Service, and resolve disputes.
- Carry out other purposes described when you provide information or with your consent.
We may combine information collected through the Service with information received from other online and offline sources and use the combined information as described in this Privacy Policy.
Unless we expressly tell you otherwise, automated outputs and AI-assisted features are used to support the Service and do not make decisions that produce legal or similarly significant effects about you. Where applicable law gives you rights related to automated decision-making or profiling, you may exercise those rights as described below.
We will not collect additional categories of Personal Data or use Personal Data for materially different, unrelated, or incompatible purposes without providing notice or obtaining consent where required by law.
7. Aggregated And De-Identified Data
We may aggregate, de-identify, or anonymize Personal Data so that it can no longer reasonably be linked to you or your device ("Aggregated De-Identified Data"). We may create Aggregated De-Identified Data by removing information that makes the data personally identifiable to a particular user.
Consul Money, our suppliers, and our licensors may use Aggregated De-Identified Data and disclose it to third parties for lawful business purposes, including research, analytics, security, product development, benchmarking, marketing, advertising measurement, and improving or promoting the Service and related products or services, provided the data is not disclosed in a manner that identifies you.
9. Analytics, Advertising, And Session Replay
We may use analytics, crash reporting, security, and performance tools, such as Firebase Analytics, Firebase Crashlytics, Google Analytics, or similar services, to collect and analyze usage information, audit performance, detect fraud, resolve crashes, debug syncing issues, and improve the Service.
We may also use third-party analytics services such as Google Analytics, Amplitude Analytics, or similar providers to collect and analyze usage information through cookies, SDKs, pixels, and similar technologies; engage in auditing, research, reporting, fraud prevention, debugging, and product analytics; and provide certain features. You may be able to limit Google Analytics by using Google's opt-out tools. For more information about Amplitude's privacy practices, review Amplitude's privacy materials or contact Amplitude at privacy@amplitude.com.
We may work with advertising partners, ad networks, marketing providers, or analytics partners to market the Service and measure advertising performance. These partners may use cookies, pixels, mobile identifiers, hashed or encrypted contact information, or similar technologies to collect information about your use of the Service and activity across other websites or apps.
We may use session replay or similar technology on our website or web app to identify and resolve customer issues, monitor and analyze how people use the Service, improve usability, and debug errors. Session replay settings may be available through cookie preferences where provided.
We do not show third-party ads inside the Consul Money app. We may advertise Consul Money on third-party websites, apps, or services.
Do Not Track is a browser preference. Because there is not a uniform industry standard for Do Not Track, we do not guarantee that we will respond to Do Not Track signals. Where legally required, we will treat Global Privacy Control or similar legally recognized opt-out preference signals as requests to opt out of applicable sales, sharing, or targeted advertising for that browser or device.
You may be able to opt out of certain interest-based advertising through browser settings, device settings, the Network Advertising Initiative, Digital Advertising Alliance, Google Ads Settings, or other tools provided by advertising partners. These tools are controlled by third parties and may change.
10. How We Disclose Personal Data
We may disclose Personal Data in the following circumstances:
- Service providers. We disclose Personal Data to vendors that help us provide the Service, including cloud hosting, database, authentication, analytics, crash reporting, account aggregation, payment processing, subscription management, notification, support, security, fraud prevention, email, and infrastructure providers.
- Financial data providers and Third-Party Data Sources. We disclose information as needed to establish, maintain, refresh, troubleshoot, and secure financial account connections you request.
- Payment and subscription providers. We disclose payment and subscription information to Stripe, RevenueCat, Apple, Google, app stores, payment processors, or similar providers as needed to process purchases, renewals, refunds, taxes, and subscription status.
- Parties you authorize, access, or authenticate. We disclose Personal Data to household members, account-link members, linked account users, financial professionals, advisers, integrated services, connected apps, or other third parties when you authorize, direct, or enable that disclosure.
- Other users or the public. If you post publicly, share content, create an account link, join a household, or otherwise make information viewable to others, those people may read, collect, copy, use, modify, or further disclose the information.
- Legal obligations and rights protection. We may disclose Personal Data if we believe disclosure is necessary or appropriate to comply with law, legal process, audits, governmental requests, tax obligations, enforce our Terms of Service, protect rights, privacy, safety, or property, investigate fraud or security issues, or pursue available remedies.
- Corporate transactions. We reserve the right to disclose, transfer, or make Personal Data available to service providers, advisors, potential transaction partners, financing sources, acquirers, successors, assigns, or other third parties in connection with the consideration, diligence, negotiation, financing, completion, or post-closing integration of a merger, acquisition, financing, bankruptcy, reorganization, sale, liquidation, or transfer of all or part of our business, equity, or assets.
- Affiliates, successors, and assigns. We may disclose Personal Data to current or future affiliates, subsidiaries, successors, or assigns for purposes consistent with this Privacy Policy.
- Consent or direction. We may disclose Personal Data when you consent, direct us, or ask us to do so.
We do not disclose Financial Data to other companies for their own joint marketing purposes or sell Financial Data for monetary consideration. Advertising and analytics disclosures may be considered a "sale," "share," or "targeted advertising" under certain U.S. state privacy laws, as described in this Privacy Policy.
12. Data Security
We seek to protect Personal Data from unauthorized access, use, disclosure, alteration, and destruction using appropriate physical, technical, organizational, managerial, and administrative safeguards based on the type of Personal Data and how we process it. These safeguards may include access controls, encryption in transit or at rest where appropriate, monitoring, logging, authentication, security reviews, vendor security measures, internal policies, and other controls.
No method of transmission over the internet, mobile network, or electronic storage is completely secure. We cannot guarantee that Personal Data will not be accessed, disclosed, altered, or destroyed due to a breach or failure of physical, technical, organizational, or managerial safeguards.
You should help protect your data by choosing and protecting strong passwords and sign-on mechanisms, enabling available security features, limiting access to your computer, mobile device, browser, and account, signing out after using the Service where appropriate, keeping your devices and software updated, and notifying us promptly if you believe your interaction with us is no longer secure or someone else is using your account.
13. Data Retention
We retain Personal Data for as long as your account is active or as needed to provide the Service, maintain your account, perform the business or commercial purposes for which it was collected, comply with legal obligations, resolve disputes, collect fees owed, prevent fraud, protect Consul Money and users, enforce agreements, and as otherwise permitted or required by law.
Retention periods may vary depending on the type and sensitivity of the data, the source of the data, the purpose for collection, account status, legal requirements, backup cycles, security needs, and operational requirements. For example, we generally retain profile information and account connection information for as long as you maintain an account, unless deletion is required or appropriate earlier.
If you delete your account, disconnect a financial account, or submit a deletion request, we may retain certain information where permitted or required by law, including in backups, logs, archives, billing records, tax records, security records, fraud-prevention records, dispute files, legal compliance records, records needed to enforce agreements, information shared with household members or account-link members, copies already disclosed to parties you authorized, and Aggregated De-Identified Data.
We may retain information in aggregated, de-identified, or anonymized form where it does not identify you personally.
14. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect or solicit Personal Data from anyone under 18. If you are under 18, do not register for or use the Service and do not send Personal Data to us.
If we learn that we collected Personal Data from a person under 18, we will delete that information as quickly as reasonably practical and may terminate the account. If you believe a person under 18 may have provided Personal Data to us, contact us at support@consul.money.
15. Your Choices
Account information
You may be able to access, correct, update, export, or delete certain account information through the Service. You can also contact us at support@consul.money.
Financial account connections
You may disconnect a linked financial account through available Service settings or by contacting us. Disconnecting an account may stop future syncing but may not automatically delete previously synced data, backups, logs, derived data, or records retained as described in this Privacy Policy.
Marketing communications
You may opt out of promotional emails by following the unsubscribe instructions in those emails or by contacting us. Removing your name from marketing lists may take a reasonable amount of time. We may still send operational, transactional, security, billing, account, or support messages.
Push notifications
You may disable push notifications through your device settings or Service settings. Some notification settings may affect alerts, reminders, or account features.
Cookies
Your browser may allow you to block, delete, or receive notice about cookies. You may also use any cookie preference tool we make available. If you disable cookies, some features may not work properly.
16. U.S. State Privacy Rights
If you reside in a U.S. state with a comprehensive consumer privacy law, such as California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or another state with similar laws, you may have some or all of the rights below, subject to legal limitations, exceptions, verification, and applicability thresholds.
- Access. You may have the right to confirm whether we process Personal Data about you and to access that Personal Data.
- Portability. You may have the right to receive a portable copy of Personal Data you provided or that we process about you, where technically feasible.
- Correction. You may have the right to correct inaccurate Personal Data.
- Deletion. You may have the right to request deletion of Personal Data we collected about you.
- Opt out of sale, sharing, or targeted advertising. You may have the right to opt out of certain disclosures for targeted advertising, cross-context behavioral advertising, "sharing," or "sales" as defined by applicable law.
- Limit or opt out of Sensitive Personal Data processing. Depending on your state, you may have the right to limit, opt out of, or require consent for certain Sensitive Personal Data uses.
- Appeal. You may have the right to appeal our denial of a privacy request.
- Specific third-party list. Residents of certain states, such as Minnesota or Oregon, may have the right to request a list of specific third parties to whom we disclosed Personal Data, subject to applicable law.
Selling, sharing, and targeted advertising
As described in the cookies, analytics, advertising, and opt-out sections above, we may incorporate cookies, SDKs, pixels, or similar technologies from third parties into the Service. Some of these technologies may allow advertising partners to receive Device And Network Data, Usage And Web Analytics, identifiers, or similar information for targeted advertising, cross-context behavioral advertising, measurement, attribution, or campaign analytics. We may also disclose Profile Data, Consumer Demographic Data, or similar information to advertising partners outside of cookies for those purposes where permitted by law.
Depending on your state of residence and the details of the disclosure, these activities may be considered a "sale," "sharing," or "targeted advertising" under applicable law, even if no money is exchanged. You may opt out by emailing support@consul.money with the subject line "Do Not Sell or Share," by using any "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" link or cookie preference tool we make available, or by using a legally recognized opt-out preference signal such as Global Privacy Control where required.
Financial incentive programs
We may offer referral programs, rewards, discounts, contests, sweepstakes, promotional campaigns, beta programs, research opportunities, or similar programs (collectively, "Programs"). When you participate in a Program, we may collect Personal Data such as your name, email address, eligibility information, referral codes, reward status, and, for referral programs, the name and contact information of the person you refer if you choose to provide it.
Because Programs may involve collecting Personal Data in exchange for rewards, discounts, or other benefits, they may be considered "financial incentive" or "bona fide loyalty" programs under certain privacy laws. The value of your Personal Data to Consul Money is reasonably related to the value of the rewards, incentives, discounts, or other benefits offered, minus the costs of administering the Program. You may withdraw from a Program at any time by contacting support@consul.money, subject to the Program terms and any benefits already provided.
We will not discriminate against you for exercising privacy rights. We may offer different features, prices, or service levels where permitted by law and reasonably related to the value of Personal Data or participation in a voluntary program.
17. Exercising Privacy Rights
To exercise privacy rights, email support@consul.money with enough information for us to verify that you are the person about whom we collected Personal Data and enough detail for us to understand, evaluate, and respond to your request. You may also use any privacy request form, account setting, or in-product tool we make available.
We may ask for additional information to verify your identity, authenticate your account, confirm your authority, or understand your request. We may deny or limit requests that do not meet legal requirements, cannot be verified, are excessive, repetitive, manifestly unfounded, conflict with legal obligations, affect the rights of others, or fall within legal exceptions.
Where allowed by law, an authorized agent may submit a request on your behalf. We may require written permission, verification of your identity, and proof of the agent's authority.
If your state gives you the right to appeal a denial, you may appeal by emailing support@consul.money with the subject line "Privacy Appeal" and a description of the request and basis for appeal. If we deny your appeal, you may have the right to contact your state attorney general or privacy regulator.
To opt out of applicable sales, sharing, or targeted advertising, email support@consul.money with the subject line "Do Not Sell or Share" or use any "Do Not Sell or Share My Personal Information" link or cookie preference tool we make available. Where legally required, we will honor Global Privacy Control or similar legally recognized opt-out preference signals for the browser or device that sends the signal.
18. California And Nevada Notices
California
California residents may have rights under the California Consumer Privacy Act and related regulations, including rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses and disclosures of Sensitive Personal Information, and not be discriminated against for exercising rights, subject to legal exceptions.
California's "Shine the Light" law allows California residents to request information about certain disclosures of personal information to third parties for their direct marketing purposes. We do not disclose Personal Data to third parties for their own direct marketing purposes without consent.
As described above, some advertising or analytics disclosures may be considered a "sale" or "sharing" under California law. We do not sell Financial Data for monetary consideration.
Nevada
Certain Nevada residents may opt out of the sale of covered information as defined by Nevada law. We do not currently sell Personal Data as "sale" is defined under Nevada Revised Statutes Chapter 603A. If you are a Nevada resident, you may submit an opt-out request for any potential future sale by contacting support@consul.money. We may take reasonable steps to verify your identity and the authenticity of the request.
19. Third-Party Links, Features, And Software
The Service may contain links, banners, widgets, integrations, plug-ins, app-store flows, financial account connections, or other features operated by third parties, including Third-Party Data Sources. We may also incorporate third-party software, including open-source software, in the Service.
Third-party links and features are provided for convenience and do not imply endorsement, sponsorship, or association. Consul Money is not responsible for the privacy, security, or data practices of third parties. Information you provide to third parties is governed by their privacy policies and terms, not this Privacy Policy. We encourage you to review third-party privacy and security policies before using third-party services.
20. App-Surfaced Disclosures And Feature Notices
The Service may surface short notices, prompts, paywall copy, settings labels, confirmation dialogs, connection screens, onboarding copy, referral cards, and similar in-app disclosures. Those disclosures are incorporated into this Privacy Policy to the extent they describe how we collect, use, disclose, or make information available. Current in-app disclosures and feature notices include the following:
- Authentication and account access. The app may let you sign in with email and password, Apple, Google, or similar authentication providers. Google sign-in may request profile and email scopes, and password reset flows use your email address to send a reset link.
- Connected accounts and financial data. The app tells users they can securely connect accounts so Consul Money can automatically track balances, spending, transactions, investments, holdings, recurring charges, net worth, categories, and budget information. Connection flows may use Quiltt, Plaid, MoneyKit, ConnectTrade, Akoya, Apple FinanceKit, or similar providers, including OAuth callbacks, deep links, session tokens, device permission prompts, and third-party provider terms and privacy notices.
- Plaid and other connection notices. Some connection flows or mock connection screens state that Consul Money uses Plaid to connect accounts, may ask for a phone number for Plaid login or sign-up, and tell users that third-party terms and privacy policies apply. Third-party connection providers may receive information you provide directly to them and may process it under their own policies.
- Automated and AI-assisted features. The app may surface automatic categorization, recurring or subscription tracking, suggested budgets, category suggestions, AI projections, wealth-path insights, and similar automated features. These features may use Financial Data, transaction descriptions, categories, balances, holdings, and usage patterns to generate outputs, which may be incomplete or inaccurate and are for informational purposes only.
- Households, account links, and shared access. The app states that account linking is high trust and may be difficult to unwind; shared data can be copied, exported, or screenshotted; previously shared information may remain readable after unlinking; and users should share only with people they trust. Account-link and household flows may disclose permission options for reading transactions, viewing overall category spend, writing transactions, writing accounts and joint account settings, viewing investments, viewing account balances, viewing recurring items, creating shared categories, delaying transaction visibility, tracking settlement balances, and hiding categories by default.
- Profile photos, icons, and shared identity. The app discloses that profile photo URLs may be shared with account links regardless of profile-view icon choices and may remain readable by the other user. Profile photos, initials, email-derived names, avatars, and transaction creator badges may be displayed to you, Shared Users, or people in account-link or household relationships.
- Exports, imports, spreadsheets, and local data. The app may let you export transactions, import CSV files, view or clear local app data, and export or sync data to Google Sheets. Google Sheets flows may ask you to paste a spreadsheet URL and share the spreadsheet with a configured service account; exports may be manual or webhook-based. Information exported to Google Sheets, CSV files, device storage, or other destinations may be governed by the destination service or file location, not only by Consul Money.
- Widgets, local caches, and offline data. The app may create local databases, local metadata, sync state, debug diagnostics, and widget snapshots that include budget, account, transaction, category, recurring, net-worth, or other financial summaries. Some local or widget data may remain on your device until cleared through app settings, device settings, uninstall flows, operating-system cleanup, or other deletion tools.
- Connection health and repair notices. The app may surface bank connection health, institution-unavailable messages, reverify or reconnect prompts, sync failures, repair attempts, and contact-support prompts. We may process provider error codes, account identifiers, institution names, timestamps, issue status, resolution status, and diagnostics to show these notices and troubleshoot connected accounts.
- Notifications and alerts. Settings may surface push notifications and alert types such as household invites, large expenses, category-over-budget alerts, income alerts, bank fee alerts, and test notifications. We may process device or browser push tokens, notification settings, thresholds, transaction data, category data, and account-link activity to send or suppress notifications.
- Security and biometrics. The app may surface Face ID, Touch ID, biometric unlock, and lock-screen prompts. We may store whether biometric lock is enabled and related device or account settings, but biometric authentication itself is generally handled by the device operating system or platform unless we expressly say otherwise.
- Payments, subscriptions, trials, and referrals. Paywalls and settings may surface free trials, reminder emails before a trial ends, automatic subscription start unless canceled, restore purchase, manage or cancel subscription, household-member pricing, promo codes, app-store code redemption, Stripe, RevenueCat, Apple, Google, Google Pay, and referral rewards such as free months. We may process subscription status, payment metadata, app-store purchase identifiers, referral codes, install or referrer attribution, email addresses, and household-member email addresses to provide these features.
- Analytics, attribution, and diagnostics. The app may record product events such as sign-in, password reset, transaction or category actions, account connection actions, referral-code use, paywall interactions, subscription updates, app-store or Play Store redemption attempts, screen views, crash reports, performance diagnostics, and similar events. These events may include identifiers, device data, timestamps, feature names, error messages, referral or promo codes, provider names, and other context needed to operate, analyze, secure, and improve the Service.
- Marketing and support claims. The app may state that data is encrypted, that Consul Money does not sell personal information, that support or concierge-style help is available, and that users can contact support. These statements are subject to the more detailed limitations, choices, and definitions in this Privacy Policy and the Terms of Service.
- Institution logos and external assets. The app may display institution names, merchant names, logos, favicons, images, or other external assets. When assets are loaded from third-party services or websites, those providers may receive request information such as IP address, device or browser information, and the requested asset URL.
In-app disclosures may be abbreviated for space. If an in-app disclosure conflicts with this Privacy Policy, the portion that is more protective of your privacy controls to the extent required by law; otherwise, this Privacy Policy and the Terms of Service govern.
21. Changes To This Privacy Policy
We may update or modify this Privacy Policy from time to time to reflect changes in law, technology, data practices, Service features, or business operations. We will make the revised Privacy Policy available through the Service and update the effective date above.
If we make a material change, we will provide notice as required by law, such as through the Service, by email, or by another reasonable method. If you use the Service after the revised Privacy Policy becomes effective, information collected from or about you after that time will be subject to the revised Privacy Policy.
22. Contact
If you have questions, comments, requests, or concerns about this Privacy Policy or our privacy practices, contact us at support@consul.money.
If you need this Privacy Policy in an alternative format because of a disability, contact us at support@consul.money.