Privacy Policy

Effective date: June 22, 2026 · Last updated: June 22, 2026

1. Who we are

Prospera Budget, LLC ("Prospera," "we," "us," or "our") operates the personal budgeting application available at app.prosperabudget.com and the marketing website at prosperabudget.com. Our contact email is [email protected].

2. Information we collect

Information you provide directly

• Account information: your email address, display name, and password (stored as a cryptographic hash — we never store your plain-text password)
• Financial data: account names and balances, transactions you enter or import, budget items, savings goals, and categories you create
• Payment information: billing details collected and processed by Stripe, our payment processor. We store only the last four digits of your card and your Stripe customer ID — never your full card number
• Communications: emails or messages you send to us

Information collected automatically

• Usage data: pages visited, features used, and actions taken within the app
• Device information: browser type, operating system, and device platform
• Log data: IP address, timestamps, and error logs for security and debugging purposes
• Session tokens: encrypted identifiers stored to keep you signed in

Information from third parties

• Bank connections (Prospera Plus): if you link a bank account, we receive transaction data, account balances, and institution names via Plaid. We store an encrypted access token to maintain the connection. We do not store your bank credentials.
• Google OAuth: if you sign in with Google, we receive your name, email address, and profile photo from Google

3. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Prospera application
• Process payments and manage your subscription
• Sync your financial data across devices
• Send transactional emails (password resets, billing receipts, trial notifications)
• Send optional weekly summary emails (you can opt out in Settings)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Generate anonymized, aggregated analytics to improve the product

We do not use your financial data to train machine learning models, sell to data brokers, or share with advertisers.

4. How we share your information

We do not sell your personal information. We share data only with:

• Stripe: payment processing. Stripe Privacy Policy
• Plaid: bank account linking (Plus users only). Plaid Privacy Policy
• Resend: transactional email delivery
• Cloudflare: infrastructure, CDN, and database hosting. Cloudflare Privacy Policy
• Neon: PostgreSQL database hosting. Neon Privacy Policy
• Legal authorities: if required by law, court order, or to protect the rights and safety of Prospera or its users

5. Data retention

We retain your data for as long as your account is active. If you delete your account:

• Your profile, financial data, transactions, goals, and budget items are permanently deleted within 30 days
• Anonymized, aggregated data (not linked to you) may be retained indefinitely
• Billing records may be retained for up to 7 years as required by law

6. Security

We take reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• PBKDF2 password hashing with 100,000 iterations
• AES-256 encryption for sensitive stored values (bank tokens, etc.)
• Session tokens with expiry and remote revocation
• Rate limiting on authentication endpoints

No system is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

7. Your rights and choices

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: update inaccurate information via Settings or by contacting us
• Deletion: delete your account and all associated data from Settings → Data
• Portability: export your transaction data as CSV at any time
• Opt out of marketing emails: unsubscribe via the link in any email or in Settings → Notifications
• Withdraw consent: disconnect your bank account at any time from Settings → Banks

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's privacy

Prospera is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it promptly.

9. Cookies and tracking

Prospera uses only functional cookies and local storage necessary to operate the application (session tokens, theme preferences). We do not use advertising cookies, third-party tracking pixels, or analytics services that profile you across the web.

10. California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at [email protected].

11. International users

Prospera is operated in the United States. If you access the app from outside the United States, your information will be transferred to and processed in the United States. By using Prospera, you consent to this transfer.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page and, for material changes, notify you by email or in-app notification. Your continued use of Prospera after changes are posted constitutes your acceptance of the updated policy.

13. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Company: Prospera Budget, LLC
• Website: prosperabudget.com