Privacy policy

Effective November 1, 2026 · private beta

The short version: we keep what's needed to run your alerts and your Budget, we encrypt the sensitive parts, we never sell your data or show you ads, and you can download or delete everything from Profile → Privacy & security.

What we keep

• Your account: your email address, when you joined and last signed in, and your alert choices.
• What you follow: your watchlist, and any share counts and costs you enter.
• Budget and portfolio: holdings, balances, goals and properties you enter, and transactions from statements you upload (date, description, amount, category and account name only). Account numbers are never stored.
• Uploaded files: statements and screenshots are read once to pull out the figures above and are not kept.
• Sim: your practice pots and trades (virtual money only).
• Ask Sentinel IQ: your recent questions and answers, so follow-ups make sense. A conversation is cleared after 2 hours of quiet or when you close it.
• Devices: for each sign-in, the browser and device type (like "Chrome on Windows"), when it was last used, and a one-way fingerprint of the network it came from. We don't keep your IP address in our database.
• Activity log: a record of sign-ins and of changes to, downloads of and partner views of your money data, so you can see who did what.

How it's protected

• Everything travels over HTTPS.
• Your settings, Budget, portfolio, Sim, transactions, net-worth history and Ask conversations are encrypted on our server (AES-256-GCM).
• Sign-in is by single-use email link. Sessions end after 30 days, or after 14 days without use on that device. You get an email when a new device signs in, and you can sign out any or every device at any time.
• Nightly backups are encrypted, too.

Who else touches it

We don't sell or rent your data, and there are no ads or ad trackers. A few services help run Sentinel IQ:

• Anthropic (Claude) reads uploaded statements and answers Ask questions. What you upload or ask is sent to it for that purpose only. Under Anthropic's commercial terms, it isn't used to train their models.
• Resend delivers our emails (your email address and the message).
• DigitalOcean hosts the server and its encrypted data.
• OpenStreetMap serves the base map on the Intel map. Your browser loads those map images directly, so it sees your IP address, like any website.
• Market prices and news come from public sources. We fetch them from our server, and none of your information goes with them.

If you share your Budget with a partner, they can see your net worth, balances and goals (read-only). Each of their views is written to your activity log, and you can stop sharing at any time.

How long we keep it

• Uploaded transactions older than 24 months are deleted automatically (you can turn this rule off).
• Activity log entries are kept for about 13 months.
• When you delete data, it's removed at once. Encrypted backups made before that roll off within 14 days.

Your choices

• Download my data gives you everything above in one file.
• Delete my money data erases your Budget, transactions, portfolio, Sim and Ask history. Delete my account erases those plus your account.
• Every alert email has a one-click unsubscribe link. Phone notifications can be turned off per device.

Changes

If this policy changes in a way that matters, we'll tell you by email before it takes effect.