Privacy notice

What this covers

Centsible is a personal finance application. This notice describes what it collects, where that data goes, and what you can do about it. It describes the software as built, not as intended.

What is collected

Your email address and, if you set one, a display name. These come from your account, not from your bank.

Bank and card account details supplied by Plaid: institution, account name, type, mask (the last digits), and balances.

Transactions: date, amount, merchant and description, pending status, and the category Centsible assigns.

Things you create: budgets, goals, category corrections, notes and preferences.

Operational records: when a sync ran and whether it succeeded, which webhooks arrived, balance observations used to reconcile your accounts, rate-limit counters, and where you are in first-time setup.

Fault records: when something in the application failed, on which route, and the account it happened to. These hold no amount, merchant, balance or token — every number is stripped from the message before it is stored, precisely so a fault record cannot become a record of your spending.

While Centsible is in closed beta it also holds the email address of each invited tester, and whether that invitation has been used.

Centsible does NOT collect a Social Security number, a date of birth, a government identifier, or your bank login. It never sees your bank credentials.

Who processes it, and where

Plaid Inc. connects to your bank and supplies the account and transaction data. You authorise Plaid directly during connection, and Plaid's own privacy policy governs what it does. Centsible holds an encrypted access token per connection and never sees your bank credentials.

Supabase hosts the Postgres database and the authentication service. Data is stored in the United States (us-east-1).

Vercel hosts and runs the application.

Nothing is sold. Nothing is shared with advertisers. There is no third-party analytics or tracking in the application.

How it is protected

Bank access tokens are encrypted with AES-256-GCM before they are stored, and are never sent to your browser or included in an export.

Every table enforces row level security, so the database itself refuses to return another account's rows. Application queries run as an authenticated role under those rules, not as an administrator.

Transport is HTTPS only, with HSTS. Sessions are HttpOnly, Secure cookies.

Financial responses are sent no-store so they are not cached.

Logs deliberately exclude tokens, balances and transaction amounts, and every number is removed from a fault message before it is stored.

Scheduled maintenance jobs are reachable only with a secret held by the host. If that secret is missing they refuse to run at all, rather than running for anyone who finds the address.

How long it is kept

Financial records are kept while your account exists. Operational records are kept on a shorter schedule: webhook and sync history about 90 days, balance observations about 13 months, rate-limit and lock counters about 30 days, resolved fault records about 180 days, and scheduled-job history about 90 days. These periods are enforced by a job that runs daily and are set in one place in the source, so this list and the software cannot drift apart.

Deleting your account revokes every bank connection at Plaid and then deletes your rows table by table, rather than relying on a cascade to reach them. What remains is a record that a deletion occurred and how many connections were revoked, holding no personal data. Any fault record that named you stops naming you.

What you can do

Export everything Centsible holds about you, as JSON, from Settings.

Delete your account and all of its data from Settings. This is immediate and cannot be undone.

Disconnect any individual bank connection at any time.

Automated processing and AI

Centsible categorises transactions and detects recurring commitments using deterministic rules over your own data. No decision with a legal or financial effect is made automatically.

Every figure shown is computed arithmetically from stored records. Centsible does not use a language model to produce, estimate or infer any number. If a model is used in future it will explain figures already computed, never generate them, and this notice will be updated and re-accepted.

Your financial data is not used to train any model, and is not sent to any AI provider.

Contact

Write to hello@nigelbuilds.com. It is monitored, and it is the address to use for any question about this notice, about the data Centsible holds on you, or to ask for that data to be exported or deleted.

Centsible publishes no postal address.