Taiga Finance LLC, a Minnesota limited liability company (“Taiga Finance”, “we”, “us”)
Version 2 · Effective September 29, 2026

This policy explains what information Taiga Finance collects when you use the Taiga Finance app and website, why, who receives it, and the choices you have. Section 1 is our notice at collection: what is gathered at each point and why.

Taiga Finance is a financial institution under the federal Gramm-Leach-Bliley Act. That law requires a separate short notice on a standard form, at taiga.finance/privacy-notice/, which states our sharing in the law’s fixed wording; this policy covers everything in plain words, and the two agree.

In short

We collect what you connect, import, or type, plus the records needed to run and secure your account.
We use it to show you your own finances. We do not sell it, use it for advertising, or give it to anyone to judge you.
Outside companies receive it only to run the service for you, under contract, or at your direction, or when the law requires.
You can export everything and delete your account yourself, at any time, from Settings.

1. What we collect, from where, why, and how long

What	From	Why	Kept
Your email address, a display name if you set one, your time zone, a passkey if you set one up, and your sign-in history: method, device and browser, time, and a scrambled form of your network address.	You; your device	To run and secure your account	While your account exists; see section 9
Bank account data: institutions, account names and types, the last four digits of account numbers, balances, transactions, investment holdings, and loan or card terms such as rates and due dates.	Your financial institutions, through the bank-connection service you authorize	To show your accounts, spending, net worth and plans	While your account exists, or until you delete the account or the connection’s data
Files you import: rows from a spreadsheet or bank export; a statement or screenshot you upload.	You	To load history without a live connection	Imported rows, while your account exists. An uploaded statement or screenshot, only until its contents are read out; the rows read from it, until you finish or abandon the import
What you type: budgets, goals, debts, property details, equity grants, notes, tags, comments, settings.	You	The views and plans you set up	While your account exists
What the app works out from the above: categories, merchant names, recurring bills, net-worth history, projections.	Derived by us, in part with AI services	The views themselves	While your account exists
Billing: email, name, subscription status, any referral code. Card details stay with the payment processor.	You; the payment processor	To bill you and credit a referral	While your account exists; the payment processor keeps its own records as tax and accounting law require
Support and security records: what you write to us, a bug report with the screenshot you chose to attach, your export history, the log of support access to your data.	You; the app	To help you, and to keep a record of support access	See section 9
How you use the app: which features and actions, whether they worked, how long they took, tied to your account; no amounts, names, or typed text. Crash reports, scrubbed of values, under a pseudonymous token. Usage records stay on our own servers. The network that serves the app also counts page views (the page, the referring site, country, browser, load time) and reports them to us only in aggregate, without cookies.	Your device; the app	To find what is slow or broken	See section 9
On the website: a waitlist email; a referral cookie if you arrive through a partner’s link; aggregate, cookieless page statistics.	You; your browser	To invite you when the service opens, credit a partner, and see which pages are read	Waitlist, until you ask us to remove it. Cookie, see section 13. Statistics, aggregate only

We do not ask for your Social Security number or your bank sign-in details, though a statement you upload may contain one; we do not request full account or routing numbers from the connection service; and we collect nothing about you from data brokers or advertising networks.

2. How we use it

We use your information for one purpose: to organize your own finances and show them back to you. That covers syncing and categorizing, the plans and projections you set up, the chat assistant, the exports you request, and the emails and notifications that run the service. We also use information in aggregate or de-identified form, which cannot identify you, to understand how the service is used and improve it; we do not try to re-identify it and do not allow anyone else to.

We do not sell your information, share it for advertising, or give it to anyone to decide your eligibility for credit, insurance, housing, employment, or anything else. The app does not make decisions about you: categories are labels you can change and projections are arithmetic on inputs you chose.

3. Who receives it

Outside companies receive your information in three cases: they do work for us under a contract that limits what they may do with it, they carry out something you asked for, or you direct it yourself. By category:

Other members of your household, if you join one: what your sharing settings allow (section 6).
The bank-connection service, which returns your account data at your request.
Hosting and database providers in the United States.
An AI service, for the pieces described in section 4.
A crash-reporting service, which receives scrubbed error reports.
An email delivery service, for sign-in links, codes, invitations, and notices.
A sign-in provider, if you choose one; it confirms your email address to us.
Your own spreadsheet provider, if you connect a spreadsheet you can edit.
Your device’s notification service, if you turn notifications on; an alert can name a figure and a merchant.
A payment processor, for your subscription and card details.
The alerting tools we run the business with, which receive internal ids and counts, not values or names; and the business mailbox, which holds what you write to us, including anything you attach.

We also disclose information when the law requires it, such as under a properly served court order; to prevent fraud or protect someone’s safety; to enforce our terms or resolve a dispute with you; to our professional advisers, such as a lawyer or accountant, and to a security firm helping us respond to an incident, each bound to confidentiality; and, under a confidentiality agreement, to a party evaluating an investment in or purchase of the business. If Taiga Finance is sold or merged, your information goes with the service to whoever takes it over, under this policy. Services you connect on your own, such as a spreadsheet or a sign-in provider, follow their own policies.

We have not sold or shared personal information, and we do not, including information about anyone under 16. The categories in section 1 are disclosed to providers in the roles above, for the purposes above.

4. AI features

Some features use AI services from an outside provider. To provide them, the app sends that provider some of your information — for example, details of your transactions and accounts, what you type into the app, and statements or screenshots you upload for import, which are sent whole. What is sent depends on the feature you use.

You can turn AI features off in Settings; they are on until you do. With AI off, nothing goes to the AI service through the app and the features that depend on it are unavailable. In a household the switch applies to everyone: AI runs only when every member has it on.

The provider’s business terms don’t let it train on what we send, and set its deletion schedule; we have no zero-retention arrangement with it. What comes back is kept as labels on your transactions and in the shared lookups below.

5. Shared merchant lookups

One use is shared across customers. When the app works out what a transaction is, such as its merchant, its category, or whether it is a recurring charge or a card fee, the answer is kept in a lookup shared by all customers, so the same question is not sent to the AI service again. Another customer gets only the answer, never whose transaction it came from. Turning AI off stops new entries from your transactions; it does not remove entries already written, and they are not deleted with your account.

6. Households

You can share your account as a household; the Terms of Service set how many members it can have. Each of you has your own sign-in, and one of you is the admin. The admin manages invitations and who is in the household, and can remove a member or hand the admin role to another member. Joining a household, by inviting someone or by accepting an invitation, is how you authorize us to show your data to anyone else in the household: it is a disclosure you direct, and deleting your sign-in ends it. What another member sees is set inside the app, account by account: an account can be joint, shown as a balance only, or kept separate, and individual rows on a joint account can be marked private. Those are product settings, not a legal wall: shared totals still reconcile, a note can show that some rows are kept separate, the admin can remove a member, and software can have bugs. For anything another member must never see, the only reliable choice is a separate household of your own.

A bank connection is made by one member, who gave the express consent for it and can withdraw it, and who chooses how each account it brings in is shared. Removal deletes that member’s sign-in and the data they did not share with the household, including accounts shown only as a balance and the rows they marked private; data shared with the household, joint accounts included, stays with the account. A member leaves by deleting their own sign-in, with the same effect. Either way, the bank connections that member made are ended. The admin leaves either by handing the admin role to another member and then deleting their own sign-in, or by deleting the whole account and everything in it.

7. Bank connections

You connect a financial account through a bank-connection service. Your bank sign-in details are entered in that service’s own screens and never reach us. Before your first connection we ask for your express consent, which names the data we receive, how we use it, who receives it, and how to withdraw; it covers your later connections until its wording changes, when we ask again. We receive the account, balance, transaction, holdings and loan data you agree to share.

The connection service has its own privacy policy, shown when you connect, which governs what it keeps on its side and how to ask it to delete. We do not alter or hide its screens. Your bank is not our partner, and no institution sponsors or endorses Taiga Finance.

You can withdraw your consent at any time from Settings. Withdrawing stops syncing and ends the connection at the service, and you choose whether the accounts and history it brought in stay as your records or are deleted; what you keep you can delete later, account by account.

8. Who at Taiga Finance can see your data

Taiga Finance is run by its founder, who as the operator can reach the database. Your data is looked at for three reasons: to run and fix the service, which sometimes means looking at real records when a sync or an import fails; to help you with a problem you raised, with your recorded permission, under a time-limited grant; and when a legal order requires it. Support access to your data is logged.

Your information is stored in the United States, and your financial data is stored encrypted. Your information is encrypted in transit and kept apart from other customers’ data. Keep the email account you sign in with secure. No system is perfectly secure. If a breach affects you, we tell you as the law requires.

9. How long we keep it

We keep your information for as long as your account exists. When you delete your account, your information is deleted at once and your bank connections are ended at the connection service; information you shared with a household member who stays remains with them. Copies in our backups expire within 14 days; a snapshot taken while investigating a security incident is deleted when the incident closes, unless we must keep it for a legal matter.

If your subscription ends, your account becomes read-only, and you can still export or delete it. Its information is deleted 90 days later, after notice to you. Your sign-in is kept so you can come back, and is erased after 24 months without use, also after notice.

Records of how you use the app, your export history and the assistant’s usage counts are kept no longer than 90 days, a bug-report screenshot no longer than 90 days after the report closes, and crash reports no longer than 30 days. A few records outlast your account: the logs of who accessed your account and when, the record of which terms, notices and bank-connection consents you accepted, and the record of any disputed payment or referral payment tied to your account, all of which stop naming you once you are erased; records of requests we handled, for up to two years and a month after the matter closes; our record of any security incident, which we keep; support threads, up to two years after the matter closes; and the shared merchant lookups (section 5).

10. Your rights and choices

See and take your data. Export everything from Settings at any time.

Delete. Delete your account from Settings; export a copy first if you want one. Deletion is permanent, and what survives it is listed in section 9. In a household, what deleting your sign-in removes, and what the admin does first, is set out in section 6.

Correct. Anything you entered you can edit in the app. Amounts, dates and balances that came from your bank are corrected with the bank and flow through on the next sync.

Ask us. For anything you cannot do yourself, or to ask what we hold about you, email privacy@taiga.finance from the address on your account. That address is how we verify it is you; we do not ask for a code, a screenshot, or an identity document, and a request from someone acting for you is honored once you confirm it from your own address. We answer within 45 days and never treat you differently for asking. If we decline a request, we say why, and you can ask us to reconsider.

State privacy laws give some residents rights to know, delete and correct, and not to be retaliated against; we meet every one for everyone, wherever you live. Rights to opt out of sale or sharing, to limit the use of sensitive information, and about automated decisions do not arise here: we do neither of the first two and make no such decision.

Other choices. AI features (section 4); notifications, off until you turn them on; the referral cookie, which you can delete in your browser. Sign-in and notice emails cannot be turned off while you have an account, because the service runs on them. We send no marketing email; the waitlist gets only an invitation when the service opens.

11. Tracking signals

Nothing on the site or in the app tracks you across other websites, and no other company collects information about your activity across websites through us; a Do Not Track signal asks for what already holds. A Global Privacy Control signal asks a site not to sell or share your information; we do neither, for anyone, so every visitor is treated as opted out.

12. Who the service is for

The service is for adults in the United States. You must be at least 18 to have an account, and we do not knowingly collect information from anyone younger; if you believe a minor has an account, email us and we will delete it. We do not market to or knowingly collect information from people outside the United States.

13. The website

The website and help center collect little. If you join the waitlist, we keep the email you typed and when you joined, until you ask us to remove it. If you arrive through a partner’s link, a cookie named ref holds that partner’s code so the partner can be credited if you subscribe; it contains nothing about you, expires on its own within 60 days, and can be deleted in your browser. Following the link also adds one to that partner’s daily click count and records nothing about you or your device. Page statistics are counted by the network that serves the site, in aggregate, without cookies. Partners learn counts, nothing that identifies you.

14. Changes to this policy

We may change this policy. We tell you about a material change by email or in the app before it takes effect, and the current version, with its effective date, is always at taiga.finance/privacy/. If a change would mean sharing your information in a new way that the law lets you object to, you hear about it, and how to object, before it starts.

15. Contact

Privacy questions and requests: privacy@taiga.finance. Security vulnerabilities: security@taiga.finance. Anything else: hello@taiga.finance.

Taiga Finance LLC · taiga.finance · hello@taiga.finance · Last updated September 29, 2026