Privacy Policy
Isaac Pehrson operates Trailfront Finance ("we," "us," or "our"), a personal finance app for tracking spending and income, budgeting, and planning cash needs. This policy applies specifically to Trailfront Finance and explains how we handle your information.
Information we collect
- Account information: information used to create and manage your account, such as your username, email address when provided, and passkey public credentials. Your passkey's private key remains with your device or passkey provider.
- Information you provide: financial accounts, transactions, imported files and records, categories, budgets, recurring bills and income, notes, and saved financial plans or reviews.
- Connected bank information: when bank connections are enabled and you choose to connect through Plaid, we receive account identifiers, account names, account types, masked account numbers, currency, current and available balances and their timestamps, and transaction information such as dates, amounts, descriptions, merchants, and other details supplied with transaction records. We also store connection identifiers and an encrypted access token used to retrieve data.
- Technical information: session cookies and preferences needed to operate the app. Hosting services may process IP addresses, request details, and error logs for operation and troubleshooting. App pages using Google Analytics may send usage and device information to Google.
How we use information
We use your information to authenticate you, maintain your financial records, import and reconcile transactions, organize spending and income, calculate budgets and cash forecasts, provide exports and backups, respond to support requests, and maintain the app's security and reliability. Bank connections are optional; you can also enter or import financial records yourself.
Plaid and bank connections
Trailfront Finance uses Plaid to connect to financial institutions when this feature is available. By choosing to connect an account, you authorize the connection and the data access described in the connection flow. Bank login credentials entered in Plaid Link or your bank's authorization page are handled by Plaid or your bank, rather than stored by Trailfront Finance.
Plaid's collection, use, and retention of information are described in the Plaid End User Privacy Policy. You can manage supported connections through Plaid Portal. Test or sandbox connections use test data rather than a connection to your real bank account.
Disconnecting a bank through the app revokes the connection and clears its stored access token after successful revocation. Disconnecting does not automatically delete previously imported transactions, bank staging records, or financial history stored in the app. Contact us to request deletion of retained information.
When information is shared
We do not sell your personal or financial information or share it for targeted advertising. Information is processed by services needed to operate the app, including hosting providers and Plaid for bank connections. Google processes information from app pages that use Google Analytics under its privacy policy.
If you enable an integration, such as access through an MCP access token, the authorized service can access the finance information available through that integration. Only share access tokens with services you trust; you can revoke tokens in the app. We may also disclose information when required by law or when necessary to investigate abuse or protect the app and its users.
Storage, protection, and retention
Financial records are stored in the app's server-side database, rather than only on your device. Access to account features requires authentication, and application access is restricted to the authenticated user's records. Plaid access tokens are encrypted before storage and are excluded from account exports. These safeguards do not mean that all stored financial records are encrypted.
We retain account and financial history while your Finance account exists. Disconnected bank staging and mappings are removed after 30 days; imported ledger history remains until account deletion. MCP action logs are kept for 90 days, and revoked token records for 90 days after revocation. Consent records remain while associated with retained bank connections; unassociated consent records expire one year after acceptance. A completed deletion receipt without financial details is kept for one year. A restricted journal of local account identifiers and deletion dates is retained until older database backups containing that account have permanently expired, to prevent restoration of deleted data.
Requests are processed by the operator, with a target of 30 days. Before confirming deletion, the operator must verify a backup retention limit of at most 30 days. Hosting-log retention and backup expiration depend on the configured hosting services and require separate verification. Database row deletion does not guarantee forensic erasure of storage media. Copies you downloaded or shared and information separately held by third-party services are outside this deletion process.
Your choices and privacy requests
Before starting or reconnecting a bank connection, we ask you to explicitly consent to the bank data collection, processing, and storage described in the notice. We store your account identifier, acceptance time, notice text and version, and privacy-policy version as a consent record. A successful bank disconnection records when that consent was withdrawn. Consent records may remain with your account history after disconnection.
You can review and edit financial information in the app, export supported account data from the Account page, disconnect bank connections, and revoke integration access tokens. Account exports do not include bank access tokens or all bank staging records.
To request deletion of your Finance account and its data, use the signed-in deletion request page. Shared Trailfront accounts and other apps are separate. For access, correction, other deletion requests, or follow-up, email pehisaac@gmail.com. We may verify account ownership before acting on a request. Please do not email bank passwords, access tokens, or full account numbers. Additional privacy rights may apply depending on where you live. Requests concerning information held separately by Plaid or Google should also be directed to those providers.
Cookies and analytics
The app uses cookies for sign-in sessions, request protection, and preferences such as timezone, and browser storage for your theme preference. App pages may load Google Analytics to understand usage. You can control cookies and tracking through your browser settings, although blocking necessary cookies may prevent sign-in or other features from working. This privacy page does not load Google Analytics.
Children's privacy
Trailfront Finance is not intended for children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.
Changes and contact
We will update the effective date when this policy changes and provide additional notice in the app when material changes affect how personal information is handled.
For questions or privacy requests, contact Isaac Pehrson at pehisaac@gmail.com.