Privacy Policy

Last updated October 14, 2026

Centability ("Centability", "we", "us") makes the Centability app for iPhone and Android. This policy explains what we collect when you use the app and this website, why, who we share it with, and the choices you have. It applies to everyone who uses Centability in the United States.

The short version

We collect what we need to show you your money: your account details, the bank data you choose to link, and what you set up in the app.
We never sell your personal information, never share it for advertising, and never show you ads.
Bank data comes through Plaid. We never see your bank username or password.
Friends you add see your first name, streaks and challenge progress, never your amounts, merchants or transactions.
You can unlink a bank or delete your account in the app at any time.

1. Information we collect

Information you give us

Account details: your email address, first and last name, and password. We store only a one-way hash of your password, never the password itself.
Sign in with Apple or Google: if you use them, the account identifier and email address Apple or Google shares with us. If you choose Apple's "Hide My Email", we receive only the relay address.
Two-step verification: the secret that links your authenticator app to Centability, and one-way hashes of your recovery codes.
What you set up in the app: budgets and spending limits, category changes and rules, labels, notification preferences, your progress through getting started, daily check-ins, streaks, wins and challenges.
Your agreement to these terms and this policy, and when you agreed.
Messages you send us, such as support emails.

Information from your banks, through Plaid

When you link an account, we receive, through Plaid, the information described in section 2: account details and balances, transactions, recurring payments, and, for credit cards, loans and investment accounts, their balances, payment details and holdings.

Information collected automatically

Device and notifications: your phone's push notification token and whether it's an iPhone or Android phone, so we can send the notifications you turn on; and your time zone, so "today" and your streaks match where you are.
Error reports: when the app or our servers hit an error, a report with technical details (such as the app version, device model and what went wrong) is sent to our error tracking provider. We set it up not to include your name, email address, IP address or financial data.
Server logs: our servers record requests, including IP addresses, to keep the service running and secure, for example to stop repeated attempts to guess a password.

We don't use advertising identifiers, ad networks, or third-party analytics or tracking tools, and this website sets no cookies.

Information that stays on your phone

Receipt photos you take or attach stay on your phone; they aren't uploaded to us.
Face ID, Touch ID and fingerprint unlock are handled by your phone. We never receive your biometric data, only whether the check passed.

2. Connecting your bank accounts

Centability uses Plaid Inc. ("Plaid") to connect to your bank, credit card, loan and investment accounts. When you link an account, you give your bank login to Plaid, not to us; Centability never sees or stores your bank username or password.

With your permission, Plaid collects from your financial institution and shares with us:

Account details: account names, types, the last few digits of account numbers, and balances.
Transactions: dates, amounts, merchant names, categories, and whether they're pending.
Recurring payments Plaid identifies, such as subscriptions and bills.
Credit cards and loans: balances, credit limits, interest rates, minimum payments and due dates.
Investments: holdings, securities and investment transactions.

We use this information only to provide Centability: to show your spending, budgets, bills and net worth, and to send the alerts you choose. We don't sell it, and we don't use it for advertising.

Plaid's use of your information is governed by the Plaid End User Privacy Policy. By linking an account, you agree to it.

You can unlink an account at any time in Account › Linked banks. When you do, we disconnect it at Plaid, so Plaid stops collecting from it for us, and we delete its accounts and transactions from Centability. Deleting your Centability account does the same for every linked account.

3. How we use it

To provide the app: sorting your transactions, tracking your budgets, finding bills and subscriptions, and showing your balances and net worth.
To run your account: signing you in, verifying your email, resetting your password, and sending account emails, such as confirming a change to your email address.
To send the notifications you turn on, such as a budget nearing its limit or a daily check-in reminder. You can turn each kind off in the app.
To keep Centability and your account secure: preventing fraud and abuse, and finding and fixing problems.
To answer you when you contact us.
To comply with the law and enforce our Terms of Service.

Insights in the app, like where your spending is up this month, are worked out from fixed rules applied to your own data. We don't use your data to train machine learning or AI models, and we don't share it with anyone who does.

We never sell your personal information or share it for cross-context behavioral advertising. We share it only with:

Who	Why	What
Plaid	Connecting your bank accounts	What's needed to link and keep your accounts up to date
Render	Hosting our servers and database in the United States	All the data described above, stored encrypted
Postmark (ActiveCampaign)	Sending account emails	Your email address, name and the email's contents
Sentry	Error reports	Technical details of errors, without your name, email, IP address or financial data
Expo, Apple and Google	Delivering push notifications	Your notification token and the notification's text
Apple and Google	Sign in with Apple or Google, if you use it	What's needed to confirm it's you

These providers may use the information only to provide their service to us. We may also share information:

With other Centability users, only as described in section 5.
When the law requires it, such as in response to a valid subpoena or court order, or to protect the rights, safety and security of our users, Centability or others.
In a business transfer, such as a merger or acquisition, in which case this policy continues to apply to your information, and we'll tell you before it's governed by a different one.
With your consent, or at your direction.

5. Buddies and group challenges

If you invite someone to be your budget buddy, or start or join a group challenge, the other people in it see your first name, your check-in streak and whether you've checked in today, and your progress through a challenge as a percentage. They never see your amounts, balances, merchants, transactions or budgets. You can end a buddy pairing or leave a challenge at any time.

6. How we protect it

Data is encrypted in transit (TLS) and at rest. The keys that connect us to your banks through Plaid are encrypted again by our application (AES-256-GCM).
Passwords are stored as one-way hashes. One-time email links and sign-in session tokens are stored only as hashes, so a copy of our database couldn't be used to sign in.
Two-step verification with an authenticator app is required before you can link a bank, and you can add Face ID or a fingerprint to open the app.
Repeated sign-in, sign-up, password reset and verification attempts are limited.
Only people who need it to run Centability can reach customer data. They use two-step verification, and their actions in our support tools are logged.

No system is perfectly secure. If we learn of a breach affecting your personal information, we'll notify you as the law requires.

7. How long we keep it

We keep your information while your account is open, and delete it when you delete your account. Some data is removed sooner:

An unlinked bank's accounts and transactions are deleted when you unlink it.
Password reset, email verification and email change links are deleted within 7 days of expiring or being used.
Expired sign-in sessions are deleted within 30 days.
Database backups expire within 7 days, so deleted data can remain in a backup for up to 7 days.
Server logs and error reports expire on our providers' standard schedules.

We may keep information longer if the law requires it, or to resolve a dispute or prevent fraud.

8. Deleting your account

You can delete your account in the app at Account › Delete account. We disconnect every linked bank at Plaid, then delete your account and all the data in it: your profile, linked accounts, transactions, budgets, settings, check-ins and challenges. We send you an email to confirm. Copies in our backups expire within 7 days.

If you can't get into the app, email privacy@centability.app from the address on your account, and we'll delete it for you after confirming it's yours.

9. Your choices and rights

See and correct your information: your name, email address and settings are in the app. Your financial data comes from your bank; to correct it, contact your bank.
Get a copy: email us to request a copy of the personal information we hold about you.
Delete it: unlink banks or delete your account in the app, or email us.
Notifications: turn each kind on or off in the app, or turn off notifications for Centability in your phone's settings.

Depending on where you live, including California, Colorado, Connecticut, Virginia and other states with privacy laws, you may have the right to know what personal information we collect and how we use it, to get a copy of it, to correct it, to delete it, and to opt out of its sale, sharing for targeted advertising, or profiling. We don't sell or share personal information for targeted advertising, and we don't use it for profiling that has legal or similarly significant effects. To exercise any of these rights, email privacy@centability.app. We'll confirm your identity, usually through the email address on your account, and respond within the time the law requires. You may use an authorized agent, and we won't treat you differently for exercising your rights. If we decline your request, you can appeal by replying to our response.

10. Children

Centability is for people 18 and older. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.

11. Changes to this policy

If we change this policy, we'll update the date at the top. If the change affects how we use information we've already collected, or is otherwise significant, we'll tell you in the app and ask you to review and agree to the new version before you continue.

12. Contact us

Questions or requests about your privacy: privacy@centability.app.
Anything else: support@centability.app.