Privacy Policy

Data We Collect

Account Data

Email address, display name, and authentication provider (Google or email). We do not store passwords; sign-in is OAuth or one-time codes.

Usage Data

Episodes viewed, reports accessed, shows followed, saved items, notebook entries, onboarding answers.

Subscription Data

Plan and billing status. Card numbers are handled and stored by Stripe, not by us.

Technical Data

IP address, browser, and device information for security and abuse prevention.

How We Use It

Provide and personalize the service.
Send the reports and notifications you have opted into.
Process subscription payments via Stripe.
Improve the product through aggregate, de-identified usage analysis.
Send essential account communications (verification, security, billing).

We do not sell your data. We do not use it for advertising. We do not share it with brokers.

Storage & Security

Database

Supabase Postgres, hosted on AWS in the United States (us-east region).

Encryption

TLS 1.3 in transit. AES-256 at rest. Backups encrypted with separate keys.

Access

Narrowly-scoped service credentials; every query is scoped to your account by the application. No engineer reads your private data without an explicit support request from you.

Third-Party Services

Supabase

Database hosting (AWS us-east region)

Stripe

Subscription billing and payment processing

Resend

Transactional and report email delivery

Google

OAuth sign-in provider

OpenAI · Perplexity

AI models for summaries and the daily brief

Vercel

Application hosting, edge delivery, and cookieless page analytics

Railway

Background processing infrastructure

Upstash

Rate limiting (IP-keyed request counters)

Better Stack

Operational logs (may include IP addresses)

Sentry

Error reporting; on errors, a fully-masked session replay (no text or media)

Your Rights (GDPR)

Access

Request a copy of every record we hold about you.

Rectification

Correct anything that is wrong.

Erasure

Delete your account and all associated data — completed within 30 days.

Portability

Export a complete copy of your data as a downloadable HTML file.

Objection & Restriction

Opt out of non-essential processing or limit how we use your data.

Most rights can be exercised directly in Settings. For anything else, email privacy@simplicity.finance.

Cookies

Essential — authentication and session state.
Referral Attribution — if you arrive through an invite link, a first-party cookie remembers the referral code for 30 days so the inviter gets credit.
Preferences — remembers layout choices such as whether the sidebar is collapsed.
No advertising or cross-site tracking cookies.
No third-party cookies set by our application.

Email Communications

Transactional — verification codes, billing receipts, important account notices. Cannot be disabled while your account is active.
Reports — only sent if you opt in. Toggle off any time in Settings.
Product Updates — rare, opt-out via the unsubscribe link in any such email.

Retention

Active Accounts

Retained for as long as your account exists.

After Deletion

All personal data is removed within 30 days. Backups containing residual data age out within 90 days.

Aggregated Analytics

De-identified product metrics may be retained indefinitely for service improvement.

Contact

Data Protection Officer

privacy@simplicity.finance

Last Updated: 16 July 2026

Privacy Policy

Data We Collect

Account Data

Email address, display name, and authentication provider (Google or email). We do not store passwords; sign-in is OAuth or one-time codes.

Usage Data

Episodes viewed, reports accessed, shows followed, saved items, notebook entries, onboarding answers.

Subscription Data

Plan and billing status. Card numbers are handled and stored by Stripe, not by us.

Technical Data

IP address, browser, and device information for security and abuse prevention.

How We Use It

Provide and personalize the service.
Send the reports and notifications you have opted into.
Process subscription payments via Stripe.
Improve the product through aggregate, de-identified usage analysis.
Send essential account communications (verification, security, billing).

We do not sell your data. We do not use it for advertising. We do not share it with brokers.

Storage & Security

Database

Supabase Postgres, hosted on AWS in the United States (us-east region).

Encryption

TLS 1.3 in transit. AES-256 at rest. Backups encrypted with separate keys.

Access

Narrowly-scoped service credentials; every query is scoped to your account by the application. No engineer reads your private data without an explicit support request from you.

Third-Party Services

Supabase

Database hosting (AWS us-east region)

Stripe

Subscription billing and payment processing

Resend

Transactional and report email delivery

Google

OAuth sign-in provider

OpenAI · Perplexity

AI models for summaries and the daily brief

Vercel

Application hosting, edge delivery, and cookieless page analytics

Railway

Background processing infrastructure

Upstash

Rate limiting (IP-keyed request counters)

Better Stack

Operational logs (may include IP addresses)

Sentry

Error reporting; on errors, a fully-masked session replay (no text or media)

Your Rights (GDPR)

Access

Request a copy of every record we hold about you.

Rectification

Correct anything that is wrong.

Erasure

Delete your account and all associated data — completed within 30 days.

Portability

Export a complete copy of your data as a downloadable HTML file.

Objection & Restriction

Opt out of non-essential processing or limit how we use your data.

Most rights can be exercised directly in Settings. For anything else, email privacy@simplicity.finance.

Cookies

Essential — authentication and session state.
Referral Attribution — if you arrive through an invite link, a first-party cookie remembers the referral code for 30 days so the inviter gets credit.
Preferences — remembers layout choices such as whether the sidebar is collapsed.
No advertising or cross-site tracking cookies.
No third-party cookies set by our application.

Email Communications

Transactional — verification codes, billing receipts, important account notices. Cannot be disabled while your account is active.
Reports — only sent if you opt in. Toggle off any time in Settings.
Product Updates — rare, opt-out via the unsubscribe link in any such email.

Retention

Active Accounts

Retained for as long as your account exists.

After Deletion

All personal data is removed within 30 days. Backups containing residual data age out within 90 days.

Aggregated Analytics

De-identified product metrics may be retained indefinitely for service improvement.

Contact

Data Protection Officer

privacy@simplicity.finance

Last Updated: 16 July 2026