Privacy Policy

1. Who we are

BuckFlare (“we,” “us,” or “our”) provides a consumer financial application that helps you track portfolios, link bank and investment accounts, and receive related notifications. This Privacy Policy explains how we collect, use, share, and protect information when you use the BuckFlare mobile app and related services (the “Service”).

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information we collect

Account information you provide (such as phone number, email, display name, and profile photo); authentication data (SMS one-time passcodes and optional authenticator codes); financial linking choices when you connect institutions through Plaid; portfolio data you enter; and support messages you send us.

We also collect device and app data needed to operate the Service, push notification tokens if you enable notifications, and operational log data (we avoid logging full phone numbers, account numbers, or Plaid tokens).

When you link a financial institution, Plaid provides account and financial data you authorize, such as institution name, account names, masked account numbers, balances, and holdings.

3. How we use your information

We use personal information to provide and secure the Service, authenticate you, display linked accounts and portfolio information, deliver notifications you expect, detect fraud and abuse, improve the product, and comply with law.

We do not sell your personal information.

4. How we share information

We share information with trusted service providers that process data on our behalf, including Plaid (account linking), Twilio (SMS authentication), Google Cloud Platform (hosting, storage, logging, secrets), CockroachDB Cloud (database), and Firebase (push notifications).

We may also disclose information when required by law, to protect rights and safety, to address fraud or security issues, or in connection with a merger or sale of assets (with notice where required).

5. Plaid and your financial data

When you choose to link an account, you interact with Plaid Link. Plaid’s own privacy policy and disclosures apply to that linking process. We receive only the account and financial data you authorize through Plaid, and we use it to display linked accounts and support features you request.

You can disconnect an institution in the app. We then remove the connection and related data from our systems. See Plaid’s End User Privacy Policy for more detail.

6. Retention, deletion, and your rights

We retain personal information only as long as needed to provide the Service. You may update profile information, disconnect institutions, disable push notifications, or request account deletion by emailing hello@buckflare.com.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. California residents have CCPA/CPRA rights; we do not sell or share personal information for cross-context behavioral advertising. We aim to complete verified requests within 30 days.

7. Security, children, and changes

We use encryption in transit, cloud encryption at rest, access controls, and authenticated APIs. No method of transmission or storage is completely secure.

The Service is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be posted at https://buckflare.com/privacy with an updated effective date.