Privacy Policy

Lilikoi Finances (“Lilikoi,” “we,” “us”) operates the personal finance web application at lilikoifinances.com. This policy covers that application and the marketing site. You can reach us at support@lilikoifinances.com.

The service is currently in public beta and is offered to users in the United States.

Account information. Your email address and a hashed password, so you can sign in and so your data follows you between devices.

Financial information you enter. Accounts, balances, budgets, transactions, credit cards, subscriptions, and goals that you type in yourself.

Financial information from your bank, if bank connections are available on your account and you choose to connect one. We use Plaid to make the connection. We enable Plaid’s Transactions and Investments products. We do not enable Auth, Identity, Assets, Liabilities, or Income, which means Plaid does not return your account or routing numbers, your name, address, or phone number, or any income or employment data to us. From what Plaid does return, we store a deliberately narrow subset:

• Institution name and an internal connection identifier.
• Per account: the account name and your bank's official name for it, the last two to four digits of the account number, the account type, one current balance, and the currency.
• Per transaction: date, amount, merchant or description, Plaid's spending category, whether it is still pending, and the currency.
• Per investment holding, if the account you connect holds investments: the security's name and ticker symbol, how many units you hold, the price and value your institution reports, and the currency.

We deliberately discard the rest of what Plaid sends, including all location and geolocation data attached to transactions, payment metadata and channel, merchant logos and websites, counterparty details, account-owner fields, and the cost basis and market identifiers (CUSIP, ISIN, SEDOL) attached to investment holdings. Those are used, if at all, only within the request that received them, and are never written to our database.

Your bank credentials never reach us. You enter them with Plaid, not with Lilikoi. What we hold is an access token, encrypted with AES-256-GCM at the application layer on top of the database’s own encryption at rest, in a table that your browser can never read.

Past AI copilot conversations. The copilot is switched off, so nothing new is collected. If you used it before then, the questions you asked and the answers you received stay in your account, are included in your export, and are removed when you close your account.

Optional survey answers. If you fill in the one-time welcome survey, the demographic details you choose to share. Every field is optional. These answers are used only to understand our user base in aggregate. They are never shown to other users, never used for lending or credit decisions, and never sent to the AI copilot.

• To show you your own financial picture — net worth, budgets, spending, cards, subscriptions, and goals.
• To operate, secure, and debug the service.
• To understand, in aggregate, who we are building for.

We do not sell your personal information, and we do not share it for advertising. We do not use your financial data to make lending, credit, insurance, or employment decisions about you, and we do not provide it to anyone who does.

Running this service requires a small number of vendors, called subprocessors. Each one receives only what it needs:

• Supabase — hosts our database and authentication. Stores all of your application data, including anything synced from your bank.
• Plaid — connects to your bank, where bank connections are available on your account. Receives your banking credentials directly from you (we never see them) and returns balances, transactions, and investment holdings.
• Vercel — hosts the application.
• Resend — sends account emails such as sign-up confirmation and password resets. Receives your email address.

Data you enter is kept until you delete it or close your account. Data synced from your bank is refreshed on each sync and is kept only while the connection exists.

Disconnecting a bank on the Net Worth page revokes the connection at Plaid and deletes that institution’s accounts, transactions, holdings, and stored access token from our database. If Plaid does not confirm the revocation — an outage, say — we keep that data instead of deleting it, so that you can try again; deleting it would throw away the only credential able to switch the connection off. In that case the disconnect reports a failure rather than appearing to succeed. Deleting your account removes everything associated with it, with one exception: billing records — what each metered request cost and any movement of a prepaid balance — are kept for accounting with your identity removed. Once detached from your account they contain no name, email, or account identifier, only dates, amounts, and token counts.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to be free from discrimination for exercising those rights. Regardless of where you live, we offer all of the following:

• Export. Download everything in your account as a JSON file from Settings, at any time, without asking us.
• Deletion. Delete your account and all associated data from Settings. This is immediate and cannot be undone.
• Correction and access. Every number in the app is editable in the app. For anything you cannot reach yourself, email us.

To make any request, or to ask a question about this policy, email support@lilikoifinances.com. We will respond within 45 days.

Every table holding user data is protected by row-level security, so one account cannot read another’s rows. Bank access tokens are encrypted at the application layer in a table with no read access from the browser at all. Traffic is encrypted in transit.

No system is perfectly secure. If you believe you have found a vulnerability, please email support@lilikoifinances.com rather than disclosing it publicly, and we will work with you on it.

Lilikoi Finances is not intended for anyone under 18, and we do not knowingly collect information from children.

If we change what we collect or who processes it, we will update this page and its last-updated date. Material changes will also be announced in the app.