Privacy Policy
Hosted draft — replace placeholders before App Review
# Privacy Policy — Dalio
**Effective date:** November 3, 2026
**Last updated:** November 3, 2026
**Operator:** [LEGAL_ENTITY_NAME — replace with LLC legal name after filing]
## 1. Introduction
Dalio ("we," "our," or "us") is a personal finance tracking application available on iOS. We respect your privacy and are committed to being transparent about how we handle your data. **Dalio is not a financial advisor, bank, or financial institution.** The app provides informational analysis only and does not offer financial advice.
This Privacy Policy explains what information we collect, how we use it, your rights, and how we protect your data. By using Dalio, you agree to the practices described here.
## 2. Data We Collect
### 2.1 Transaction Data (via Plaid)
When you connect a US checking, savings, or credit card account through Plaid:
- We receive **transaction history** (dates, amounts, merchant names, descriptions, pending status).
- We receive **account metadata** (account type, mask / last four digits, balances).
- We receive **institution identifiers** (which bank or card issuer the account belongs to).
- We store an **encrypted Plaid access token** on our servers so we can refresh your ledger. We **do not receive or store** your full account number, PIN, or bank login credentials.
All banking credentials are entered directly into Plaid's secure interface. We never see your username or password for your financial institution.
### 2.2 Categories and Budgets
Dalio maps each transaction into a spending **category** used for budgets (for example Food, Utilities, Shopping, or Other). We store:
- Category assignments derived from Plaid and any category you set when adding a manual transaction
- Monthly budget limits and calculated spend against those limits
We do **not** store a separate goals product, planned contributions, or a three-level category tree in the current version of the app.
### 2.3 Chat Messages
Dalio includes FinAI, a chat interface for asking questions about your ledger. Messages you send and replies you receive may be stored to support conversation history. We do not use chat messages to build advertising profiles. FinAI answers are informational only and are not financial advice.
### 2.4 Account Information
When you create a Dalio account, we collect:
- Email address (for account creation and communication)
- Profile / display name
### 2.5 What we do not collect today
The current app does **not** collect a persistent device advertising identifier, page-view analytics, or usage analytics for profiling. If we add crash reporting later, we will update this policy and the App Store nutrition labels before that data is collected.
## 3. How We Use Your Data
| Purpose | Data Used |
|---------|-----------|
| Show balances, transactions, and the spending calendar | Transactions, account metadata |
| Power monthly budgets | Transactions, categories, budget limits |
| Answer FinAI questions about your ledger | Accounts, budgets, recent transactions, chat messages |
| Keep your vault in sync across sessions | Email, account id, vault rows |
| Communicate with you about the account | Email address |
We do **not** sell your personal information to third parties. We do **not** use your financial data for advertising or profiling.
## 4. Plaid and Third-Party Services
### 4.1 Plaid
We use **Plaid Inc.** ("Plaid") as our secure bank-account-connection provider. Plaid handles the authentication process between Dalio and your financial institution.
- Plaid collects your financial institution login credentials directly.
- Plaid shares transaction data with us only after you authorize the connection.
- Plaid has its own privacy policy at [plaid.com/legal/privacy/](https://plaid.com/legal/privacy/).
- We do not share your data with Plaid's advertising or analytics partners beyond what is required for the connection service.
### 4.2 Other Third Parties
We may use the following third-party services:
- **Apple App Store / Apple ID:** For distribution and, if you subscribe, In-App Purchase billing.
- **Cloud hosting provider (Supabase):** For authentication and secure storage of your synced vault (encrypted in transit; Plaid access tokens encrypted at rest before storage).
Each of these providers is subject to its own privacy policy. We do not control their practices.
## 5. Data Retention
- **Transaction, account, budget, and profile data** is retained as long as your account is active.
- **Chat messages** are retained to support conversation history while your account is active.
- When you delete your account, the data above is permanently removed from our servers (see Section 8).
## 6. Data Security
We take reasonable measures to protect your data:
- All data in transit is encrypted using **TLS 1.2+** on production builds that talk to our cloud services.
- Banking access tokens are encrypted at rest using industry-standard encryption before they are stored.
- We limit access to user data to systems that require it for app functionality.
- We do not store your banking login credentials.
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password for your Dalio account.
## 7. Your Rights and Choices
Depending on your location, you may have the following rights:
- **Access:** Request a copy of the personal data we hold about you.
- **Correct:** Request correction of inaccurate data.
- **Delete:** Request deletion of your data (see Section 8).
- **Portability:** Request a machine-readable export of your data.
To exercise any of these rights, contact us at **privacy@dalio.coach** (placeholder — replace with the real contact before App Store submission). We will respond within 30 days.
## 8. Account Deletion
You can delete your Dalio account at any time from **Settings → Delete account** in the app, or by contacting us.
**When you delete your account:**
- Your profile, accounts, transactions, budgets, chat messages, and Plaid item records are **permanently deleted** from our servers.
- Your connection to Plaid is **terminated** — we call Plaid to remove the Item. Accounts remain active at your bank or card issuer.
- Deletion is permanent; we cannot recover deleted data.
If you have an Apple subscription, manage cancellation through your Apple ID settings to avoid future charges.
## 9. Children's Privacy
Dalio is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.
## 10. California Privacy Rights
California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
## 11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective date" at the top of this page and, if appropriate, by in-app notification.
## 12. Contact
For privacy-related questions or requests:
- **Email:** privacy@dalio.coach (placeholder — replace with the real contact before App Store submission)
- **In-app:** Settings → Privacy Policy
---
*Dalio is not a financial advisor. This app provides informational analysis only and does not constitute financial advice.*