Privacy Policy

Effective date: October 22, 2026

Company: Hundo LLC ("Hundo", "we", "us"), 6650 Rivers Ave Ste 100, North Charleston, SC 29406

Contact: privacy@hundo.money

The short version

• Hundo exists to show you your own money. We use your data to run the app for you and for nothing else.
• We do not sell your data. We do not share it for advertising. There are no ads and no ad trackers in Hundo.
• Bank connections run through Plaid. We never see or store your bank password.
• Some features use outside AI models. We tell you which, what they receive, and we ask before the Advisor sends anything.
• You can delete your account and everything in it from Settings, at any time, in the app.

1. What we collect

You give us:

• Account details: your email, password (stored only as a hash by our auth provider), phone number, and your name. If you use Sign in with Apple, Apple gives us your name and either your email or a private relay address.
• Profile details: date of birth, gender, relationship status, your partner's first name, your children's first names and birthdays, your ZIP code, and your employment type. We ask for these because retirement, Social Security and college planning depend on them.
• Money details you enter: income, expenses, assets such as a home or car (including addresses and VINs if you choose to add them), private investments, loans, goals, budgets, insurance policies, estate documents, equity compensation, tax details and a credit score if you type one in.
• Files: documents you add to the vault (for example tax returns and statements) and receipts you scan or share.
• Messages: what you write to the Advisor, and what you post in Community rooms.
• Household details: the email of anyone you invite to your household, and your sharing choices for each account.

From services you connect:

• Plaid (when you link a bank): account names, types, the last four digits of account numbers, balances, transactions, investment holdings and liabilities. Plaid's own handling is described in the Plaid End User Privacy Policy, which you see in Plaid Link.
• Apple Wallet through FinanceKit (only if you turn it on): Apple Card, Apple Cash and Savings balances and transactions, read on your iPhone and synced to your Hundo account.
• Credit vendor (only if you connect it; currently Spinwheel, reporting Equifax VantageScore 3.0): your score and summary credit attributes such as utilization and account counts. Connecting is a soft inquiry and does not affect your score.
• Monarch (only if you import): the export files you upload, or, in the beta path, a temporary Monarch session you sign in with. The session token is encrypted and deleted when the import finishes or within 24 hours.
• Stripe (only if you book a paid call with a human advisor): whether the payment succeeded. Your card details go to Stripe, not to us.

Automatically:

• Your device's push notification token, if you allow notifications.
• Basic server logs (request times, errors) that our hosting provider keeps for operations. We do not use analytics, crash reporting or advertising SDKs in the app.

We do not collect your precise location, your contacts, your photos library beyond the files you choose, your health data, or your voice recordings (voice mode turns speech into text on your iPhone).

2. How we use it

• To run Hundo for you: show your balances, net worth, budgets, investments, forecasts, scores and wealth markers; categorize transactions; read documents you add; send the alerts and summaries you turned on.
• To personalize what the app suggests to you, such as next best actions and budget suggestions.
• To keep the service secure and working, and to answer you when you contact us.
• Benchmarks (part of using Hundo, see the Terms of Service): your posted transactions join anonymous cohort averages, never with your name or account. A cohort is never shown with fewer than 50 contributors.

We do not use your data to train AI models, and our AI providers do not either (section 4).

3. Who we share it with

We share data only with the service providers that run Hundo for us, only what each needs, under contracts that limit their use to providing the service:

Your household. If you create or join a household, the people in it see what you choose to share, account by account. If you leave or delete your account, the shared household plan stays with your partner.

Human advisors. If you book a call, the advisor sees your booking and what you choose to share for the call. [LEGAL: confirm what advisors can access; confirm the advisor relationship and any registration]

Legal reasons. We may disclose data if the law requires it, to protect people's safety, or to protect Hundo's rights, and we will tell you when we are allowed to.

Business transfers. If Hundo is acquired or merges, your data would move with the service under this policy, and we would tell you first.

We never sell your personal information and never share it for cross context behavioral advertising.

4. AI features

Hundo uses large language models from outside providers:

• The Advisor. When you ask a question, Hundo sends the model you picked (Anthropic Claude, OpenAI GPT or Google Gemini) your question, the recent conversation, facts you asked the Advisor to remember, and a summary of your finances: scores and markers, totals by account type, spending by category, goals, forecast results, insurance coverage, credit score and the names of documents in your vault. It does not send your bank login, full account numbers, or the contents of your documents. The Advisor asks for your permission before the first message is sent.
• Categorization and cleanup (Anthropic): merchant names, amounts and dates of new transactions, so they land in the right category.
• Reading documents and receipts (Anthropic): the contents of files you add to the vault or receipts you scan, to pull out totals, line items and key facts.
• Imports, recaps and suggestions (Anthropic): statistics about your spending history to propose rules, budgets and your monthly recap.

Under their API terms, Anthropic and OpenAI do not train their models on data sent through their business APIs and keep it for a limited time (up to 30 days) for abuse monitoring, unless the law requires longer. [LEGAL: confirm each provider's current commercial terms and retention; Google's Gemini API does not use data for training only on the paid tier, so confirm the Gemini key is on a paid Google Cloud billing account before launch.]

4a. [LEGAL] Background AI consent

The Advisor asks for permission before sending anything. Categorization and document reading run as part of the core service without a separate prompt. Counsel to decide whether App Store guideline 5.1.2(i) or state law requires an explicit in app permission for these too; the app can add one.

5. How long we keep it

• While your account is open, we keep your data so the app can show your history (for example, two years of transactions for trends).
• When you delete your account (Settings, Delete account), we immediately delete your account and everything linked to it: your profile, linked bank connections, transactions, balances, holdings, budgets, goals, plans, scores, Advisor conversations, community posts, documents, receipts and uploaded files. We ask Plaid to disconnect each linked bank. If you used Sign in with Apple, we revoke Hundo's access with Apple.
• What remains after deletion: billing records of Plaid usage are kept with the user reference removed; payment records Stripe must keep under financial law stay with Stripe; our hosting provider's encrypted backups roll off on their normal schedule [LEGAL: confirm the Supabase backup window for our plan, typically 7 days, up to 30 with point in time recovery]; server logs expire on their own schedule.
• Temporary data: Monarch session tokens are deleted when an import ends or within 24 hours; sync logs are pruned after 30 days.

6. Security

Data is encrypted in transit (TLS) and at rest by our hosting provider. Plaid and Monarch access tokens are additionally encrypted with AES GCM before storage. Every table is protected by row level security so an account can read only its own rows. You can turn on Face ID to lock the app. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.

7. Your choices and rights

• See and correct your data in the app at any time.
• Delete your account and data in the app: More, Settings, Delete account.
• Disconnect any bank in More, Accounts, Connections.
• Turn off notifications and Face ID in Settings, and the credit connection in Accounts.
• Export: [LEGAL: we do not yet offer a self serve export; requests to privacy@hundo.money are answered within 30 days]
• California residents (CCPA/CPRA) have the right to know, delete, correct and to opt out of sale or sharing; we do not sell or share personal information as those laws define it. [LEGAL: confirm applicability thresholds and required disclosures, including the categories table]
• Other US states with privacy laws (for example Virginia, Colorado, Connecticut): the same rights apply; contact us to exercise them. [LEGAL]
• Financial privacy (GLBA): [LEGAL: determine whether Hundo is a financial institution under GLBA and whether a GLBA privacy notice is required]

We will not treat you differently for exercising any of these rights.

8. Children

Hundo is for adults 18 and over. We do not knowingly collect data from children under 13 as users. Parents may enter their children's first names and birthdays for planning; that data belongs to the parent's account and is deleted with it.

9. Where data is stored

In the United States. [LEGAL: confirm the Supabase region for the production project]

10. Changes

We will post changes here and tell you in the app before material changes take effect.

11. Contact

privacy@hundo.money, or Hundo LLC, 6650 Rivers Ave Ste 100, North Charleston, SC 29406.