Privacy Policy

Information we collect

• Account information. Your email address. Signing in works by emailing you a link, so we never ask for or store a password. Your browser's time zone is stored alongside it, so that “this week” means your week rather than ours.
• Personal details you choose to add. Your account page lets you save a name, phone number, date of birth and address. Every one of them is optional, none of them is required to use any part of Debito, and you can clear any of them at any time. We do not ask for a Social Security number, a government ID, or anything from a bank statement, and you should not send them to us.
• Debt information you enter. The debts, balances, interest rates, budget figures, and payments you record. You can use Debito as a guest without an account, in which case this stays in your browser and is never sent to our servers.
• Usage analytics. Aggregate, privacy-friendly usage metrics (via Vercel Analytics) that help us understand which features are used. These do not identify you personally.

How we use your information

• To provide the service: saving your plan and showing your progress.
• To secure your account and prevent abuse.
• To improve Debito based on aggregate usage.

We do not sell your personal information, and we do not share your debt data with advertisers.

Service providers

We rely on a small number of trusted providers to run Debito:

• Supabase, for sign-in and encrypted database storage for your saved plan.
• Vercel, for hosting and privacy-friendly analytics.
• Stripe, for payment processing for Extra subscriptions. We never see or store your full card details.
• Plaid. If you choose to connect a bank, Plaid securely links your accounts so we can import balances. See below.
• Anthropic, which provides the AI model behind Ask Debito. If you use it, your debt figures are sent to Anthropic to generate the answer. See below.

Ask Debito, the assistant (optional)

Ask Debito is optional and only runs when you open it and send a message. When you do, we send Anthropic your question along with a summary of your situation — your debt names, balances, rates, minimum payments, what you pay each month, and your budget totals — so the answer is about your actual plan rather than a generic one. We do not send your name, email address, or any of the identity details on your account page.

We do not store your conversations. They exist in your browser while the tab is open and are gone when you close it. We keep only a count of how many messages you have sent each day, which is what enforces the daily limit on the free plan. Anthropic processes the request to produce the answer and does not use it to train their models.

Ask Debito is not financial advice, and it is not a licensed adviser. It can also be wrong. Check anything important against the numbers on your own statements before acting on it.

Connecting a bank (optional)

Bank connections are optional and only available if you turn them on. When you link an account, Plaid handles the connection and we receive read-only balance and liability information for the accounts you choose, never your bank login credentials. The access token that lets us refresh balances is encrypted and stored securely, is used only to sync your accounts, and is deleted when you disconnect the bank or delete your account. We cannot move money.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time; when you do, your profile, debts, and payment history are permanently removed from our database. Guest data lives only in your browser and is cleared when you clear your browser storage.

Security

Data is encrypted in transit (HTTPS). Access to your saved plan is restricted so that only you can read or change it. No system is perfectly secure, but we work to protect your information using industry-standard practices.

Three fields get more than that. If you choose to save a phone number, a date of birth or an address, each is encrypted with AES-256-GCM before it reaches our database, using a key the database itself does not hold. They are decrypted only to show them back to you on your own account page. A name and a date of birth together are the raw material for identity theft, and unlike a password, a date of birth cannot be changed afterwards, so we treat them differently from the rest.

Children

Debito is not directed to children under 16, and we do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above.

Contact

Questions about privacy? Email us at support@debito.app.