---
title: Privacy Policy
lastUpdated: 2026-02-01
description: How EB App LLC collects, uses, and protects your data.
canonical_html_url: https://eb.app/privacy-policy/
---

<!-- Introduction -->
<div class="section">
  <p><strong>Effective Date:</strong> February 1, 2026</p>
  <p>
    By creating an account or using the Service, you agree to this Privacy Policy and our
    <a href="/terms-of-service/">Terms of Service</a>. If you do not agree, do not use the Service.
  </p>
  <p>
    EB App LLC ("EB.app," "we," "us") is committed to protecting your privacy. This policy explains how
    we collect, use, and safeguard your information.
  </p>
</div>

<!-- At a Glance -->
<div class="section" style="border-left: 4px solid #007bff; padding: 20px; margin: 20px 0;">
  <h3 style="margin-top: 0;">At a Glance</h3>
  <ul>
    <li><strong>Age:</strong> 18+ only</li>
    <li><strong>Free tier:</strong> Local AI budget creation (Bring Your Own AI); Picks tab visible
      with optional AI analysis</li>
    <li><strong>Premium:</strong> Bank linking via Plaid; Picks tab hidden by default; Plaid data never
      used for Picks</li>
    <li><strong>Data sales:</strong> We do not sell or share your personal information under CPRA</li>
    <li><strong>Marketing:</strong> Google Ads conversion tracking (opt out via footer link or
      <a href="https://adssettings.google.com" target="_blank" rel="noopener">Google Ad Settings</a>)
    </li>
    <li><strong>Control:</strong> Export or delete your data anytime; withdraw consent by deleting your
      account</li>
  </ul>
</div>

<!-- Section 1: Definitions -->
<div class="section">
  <h2>1. Definitions</h2>
  <ul>
    <li><strong>"Service"</strong> – The EB.app application and related services</li>
    <li><strong>"Personal Information"</strong> – Information identifying an individual (name, email)
    </li>
    <li><strong>"Budget Data"</strong> – Financial information you enter (income, expenses, categories,
      AI-derived data)</li>
    <li><strong>"Picks"</strong> – In-app affiliate/partner recommendations in the Picks tab</li>
    <li><strong>"Authorized Financial Account Holder"</strong> – A person legally authorized to grant
      read-only access to a financial account via Plaid</li>
    <li><strong>"Community Content"</strong> – Data explicitly published to Community features (Themes,
      Icons, Public Budgets)</li>
  </ul>

  <h3>Service Tiers</h3>
  <p><strong>Free Tier</strong></p>
  <ul>
    <li>AI Budget Creation: Bring Your Own AI (local processing)</li>
    <li>Bank Linking: Not available</li>
    <li>Public Budgets: Not available</li>
    <li>Shared Budgets: Not available</li>
    <li>Picks Tab: Visible by default</li>
    <li>Picks AI Analysis: Optional (non-Plaid budgets only)</li>
  </ul>
  <p><strong>Premium ($11.99/month)</strong></p>
  <ul>
    <li>AI Budget Creation: Plaid or file upload via Google AI</li>
    <li>Bank Linking: Available via Plaid</li>
    <li>Public Budgets: Shareable via link (read-only, unlimited viewers)</li>
    <li>Shared Budgets: Invite up to 5 others with permissions</li>
    <li>Picks Tab: Hidden by default (enable in Settings)</li>
    <li>Picks AI Analysis: Optional (non-Plaid budgets only)</li>
    <li>AI theme generation and publishing</li>
    <li>First-time subscribers receive complimentary icon generation credits</li>
  </ul>
  <p><strong>Icon Generation Credits</strong> (<a href="/#pricing">see Pricing</a>)</p>
  <ul>
    <li>One-time purchase for AI-generated icons (tiered pricing available)</li>
    <li>Available to both Free and Premium users</li>
  </ul>
</div>

<!-- Section 2: Information We Collect -->
<div class="section">
  <h2>2. Information We Collect</h2>

  <h3>Account Information (via Google Sign-In)</h3>
  <ul>
    <li>Email address, name, and profile picture</li>
    <li>Timezone (detected from browser for correct date/time display; not used for tracking)</li>
  </ul>

  <h3>Budget Data</h3>
  <ul>
    <li>Income, expenses, categories, and transaction resolution status you enter</li>
    <li>AI-derived budget items (Premium: from Plaid or uploaded files)</li>
    <li>AI processing metadata (job IDs, timestamps) retained up to 30 days, then deleted</li>
  </ul>

  <h3>Community & Public Content</h3>
  <p>Information you explicitly choose to publish is visible to other users. This includes:</p>
  <ul>
    <li><strong>Profiles:</strong> Public Username and Avatar. (Note: We do not support user uploads for
      avatars; they must be generated via AI or selected from defaults)</li>
    <li><strong>Public Budgets:</strong> Budget data you explicitly publish (accessible via link or your
      profile)</li>
    <li><strong>Themes & Icons:</strong> Names, color palettes (JSON), and vector data (SVG) of assets
      you publish to the Community. Theme publishing requires Premium. <em>Publishing is permanent.</em></li>
    <li><strong>Moderation Data:</strong> We process text (names/titles) and images (icons) using Google
      Cloud AI to detect safety violations. This data is processed ephemerally</li>
  </ul>

  <h3>Marketing Data</h3>
  <ul>
    <li>Google Ads conversion tracking and UTM parameters (aggregated, not linked to your identity)</li>
    <li>Email marketing data (if subscribed): email, first name, engagement metrics via MailerLite</li>
  </ul>

  <h3>What We Do Not Collect</h3>
  <ul>
    <li>Bank account numbers, routing numbers, or login credentials</li>
    <li>Credit card numbers (payments handled by Paddle)</li>
    <li>Phone number or government IDs</li>
  </ul>
</div>

<!-- Section 3: Bank Linking (Premium) -->
<div class="section">
  <h2>3. Bank Linking (Premium Feature)</h2>
  <p>
    Bank linking via Plaid is optional and available only to premium subscribers. Default configuration
    is maximum privacy with no bank connections.
  </p>

  <h3>How It Works</h3>
  <ul>
    <li>Plaid handles authentication; we never receive your bank credentials</li>
    <li>We receive only transaction data you authorize</li>
    <li>Transaction data is sent to Google AI (Gemini API) for budget creation and reconciliation</li>
    <li>You can disconnect anytime, immediately stopping all data access</li>
  </ul>

  <h3>Plaid Data Usage</h3>
  <ul>
    <li><strong>AI Budget Creation:</strong> Generate budget items from transactions</li>
    <li><strong>Reconciliation:</strong> Match transactions to scheduled budget events</li>
    <li><strong>Historical Reporting:</strong> Balance history and trends</li>
  </ul>

  <h3>Plaid Data Restrictions</h3>
  <ul>
    <li>We do not sell, rent, or share Plaid data for advertising or profiling</li>
    <li>Plaid data is <strong>never</strong> used for Picks or affiliate recommendations</li>
    <li>Used solely for budgeting functionality</li>
  </ul>

  <h3 id="downgrade-protection">Downgrade Protection</h3>
  <p>
    If you cancel premium, budgets containing Plaid data are permanently flagged. These budgets are
    never eligible for Picks AI Analysis, even as a free-tier user. This protection persists even if
    you disconnect Plaid or edit items.
  </p>
  <p>
    You may link only accounts for which you are an Authorized Financial Account Holder. See
    <a href="/terms-of-service/#authorized-accounts">Terms of Service</a>.
  </p>
</div>

<!-- Section 4: How We Use Your Information -->
<div class="section">
  <h2>4. How We Use Your Information</h2>

  <h3>Email</h3>
  <ul>
    <li>Account management and security notifications</li>
    <li>Policy update notifications</li>
    <li>Service-related updates and important announcements (you may opt out)</li>
    <li>Feature updates and educational announcements (you may opt out)</li>
    <li>Marketing emails, including tips, promotions, and special offers (off by default; opt-in required)</li>
  </ul>

  <h3>Budget Data</h3>
  <ul>
    <li>Display budgets, generate reports and forecasts</li>
    <li>Enable data export</li>
    <li>Customer support (only when you request it)</li>
    <li><strong>Public Budgets:</strong> If you choose to publish a budget, we use that data to display
      it to other users in Community features</li>
  </ul>

  <h3>Marketing Data</h3>
  <ul>
    <li>Measure advertising campaign effectiveness</li>
    <li>Optimize marketing strategy</li>
    <li><strong>Not used</strong> to serve you personalized ads within our app</li>
  </ul>
  <p>Marketing analytics are enabled by default to help us improve our service. You can disable tracking anytime via 'Your Privacy Choices' in the footer.</p>

  <h3>What We Never Do</h3>
  <ul>
    <li>Sell or share your personal information (as defined under CPRA)</li>
    <li>Use Budget Data for third-party advertising</li>
    <li>Allow staff access to Budget Data except for support, legal compliance, or fraud prevention</li>
  </ul>
</div>

<!-- Section 5: Picks & Affiliate Program -->
<div class="section">
  <h2 id="affiliate-tracking">5. Picks & Affiliate Program</h2>
  <p>
    <strong>As an Amazon Associate, we earn from qualifying purchases.</strong>
  </p>

  <h3>How Picks Work</h3>
  <ul>
    <li>Picks are matched to your Budget Data using in-app analysis</li>
    <li>Your financial data is not shared with Amazon or any third party</li>
    <li>No tracking occurs until you click a link and leave our app</li>
  </ul>

  <h3>Optional AI Analysis</h3>
  <p>
    Users may click "Try AI Analysis" to send a budget summary (item names, amounts, categories,
    balances, <strong>not</strong> transaction history) to Google AI for personalized recommendations.
  </p>
  <ul>
    <li>A confirmation modal explains exactly what data will be sent</li>
    <li>No data is sent until you explicitly confirm</li>
    <li>This feature is <strong>permanently disabled</strong> for any budget containing Plaid data (see
      <a href="#downgrade-protection">Downgrade Protection</a>)</li>
  </ul>

  <h3>When You Click an Affiliate Link</h3>
  <p>
    You leave our app and are directed to Amazon.com. Amazon may collect browser/device information,
    IP address, cookies, and purchase activity under their
    <a href="https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ"
      target="_blank" rel="noopener">Privacy Notice</a>. We do not receive your Amazon browsing or
    purchase history.
  </p>

  <h3>Your Controls</h3>
  <ul>
    <li>You are never required to click affiliate links</li>
    <li>Premium users can hide the Picks tab in Settings</li>
    <li>Manage Amazon privacy at
      <a href="https://www.amazon.com/privacyprefs" target="_blank"
        rel="noopener">amazon.com/privacyprefs</a>
    </li>
  </ul>
</div>

<!-- Section 6: Third-Party Services -->
<div class="section">
  <h2>6. Third-Party Services</h2>
  <p>
    We use third-party services to operate our application. Each processes data according to their
    privacy policies under agreements requiring them to protect your data.
  </p>

  <h3>Google Cloud & Firebase</h3>
  <ul>
    <li><strong>Purpose:</strong> Hosting, authentication, database, security</li>
    <li><strong>Data:</strong> All user data necessary to provide service</li>
    <li><strong>Policy:</strong>
      <a href="https://cloud.google.com/terms/cloud-privacy-notice" target="_blank" rel="noopener">
        Google Cloud Privacy Notice</a>
    </li>
  </ul>

  <h3 id="ai-processing">Google AI (Gemini API)</h3>
  <ul>
    <li><strong>Purpose:</strong> AI Budget Creation (Premium) and Picks AI Analysis (optional)</li>
    <li><strong>Data:</strong> Transaction data (Premium) or budget summary (Picks AI)</li>
    <li><strong>Your Control:</strong> Processing occurs only when you explicitly submit/confirm</li>
    <li><strong>Retention:</strong> We do not retain AI inputs/outputs; only technical metadata (job
      IDs) for up to 30 days</li>
    <li><strong>Policy:</strong> Per the
      <a href="https://ai.google.dev/gemini-api/terms" target="_blank" rel="noopener">Gemini API Terms
        of Service</a>, Google does not sell your data or use it to train AI models</li>
  </ul>

  <h3>Google Cloud Natural Language API</h3>
  <ul>
    <li><strong>Purpose:</strong> Automated text moderation for Public Budgets, Themes, and Icon Sets
    </li>
    <li><strong>Data:</strong> Text content you explicitly publish to the Community</li>
    <li><strong>Policy:</strong>
      <a href="https://cloud.google.com/terms/cloud-privacy-notice" target="_blank" rel="noopener">
        Google Cloud Privacy Notice</a>
    </li>
  </ul>

  <h3>Google Cloud Vision API</h3>
  <ul>
    <li><strong>Purpose:</strong> Automated safety checks for generated Icon Sets</li>
    <li><strong>Data:</strong> Image data associated with your Icon Sets</li>
    <li><strong>Policy:</strong>
      <a href="https://cloud.google.com/terms/cloud-privacy-notice" target="_blank" rel="noopener">
        Google Cloud Privacy Notice</a>
    </li>
  </ul>

  <h3>Plaid</h3>
  <ul>
    <li><strong>Purpose:</strong> Bank account linking (Premium only)</li>
    <li><strong>Data:</strong> Transaction data you authorize</li>
    <li><strong>Policy:</strong>
      <a href="https://plaid.com/legal/#end-user-privacy-policy" target="_blank" rel="noopener">Plaid
        Privacy Policy</a>
    </li>
  </ul>

  <h3>Paddle (Payment Processor)</h3>
  <ul>
    <li><strong>Purpose:</strong> Payment processing, invoicing, tax remittance</li>
    <li><strong>Data:</strong> Payment and billing information (we do not receive full card details)
    </li>
    <li><strong>Policy:</strong>
      <a href="https://www.paddle.com/legal/privacy" target="_blank" rel="noopener">Paddle Privacy
        Policy</a>
    </li>
  </ul>

  <h3>MailerLite (Email Marketing)</h3>
  <ul>
    <li><strong>Purpose:</strong> Newsletter and lead magnet delivery</li>
    <li><strong>Data:</strong> Email, first name (if provided), engagement metrics</li>
    <li><strong>Your Control:</strong> Unsubscribe link in every email; request deletion at
      <a href="mailto:legal@eb.app">legal@eb.app</a>
    </li>
    <li><strong>Policy:</strong>
      <a href="https://www.mailerlite.com/legal/privacy-policy" target="_blank" rel="noopener">
        MailerLite Privacy Policy</a>
    </li>
  </ul>

  <h3>Amazon Associates</h3>
  <ul>
    <li><strong>Purpose:</strong> Affiliate commission attribution</li>
    <li><strong>Data:</strong> Collected by Amazon only after you click an affiliate link</li>
    <li><strong>Policy:</strong>
      <a href="https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ"
        target="_blank" rel="noopener">Amazon Privacy Notice</a>
    </li>
  </ul>

  <h3>Google Ads</h3>
  <ul>
    <li><strong>Purpose:</strong> Conversion tracking and marketing attribution</li>
    <li><strong>Data:</strong> Aggregated, anonymous conversion data</li>
    <li><strong>Your Control:</strong> Use "Your Privacy Choices" in footer or
      <a href="https://adssettings.google.com" target="_blank" rel="noopener">Google Ad Settings</a>
    </li>
    <li><strong>Policy:</strong>
      <a href="https://policies.google.com/privacy" target="_blank" rel="noopener">Google Privacy
        Policy</a>
    </li>
  </ul>
</div>

<!-- Section 7: How We Share Information -->
<div class="section">
  <h2>7. How We Share Information</h2>
  <p>
    We do not sell or share your personal information as defined under CPRA. We share data only with
    service providers listed in Section 6 for the purposes described, and:
  </p>
  <ul>
    <li>To comply with legal obligations or court orders</li>
    <li>To protect our rights, property, and safety</li>
    <li>In connection with a business transfer (merger, acquisition)</li>
  </ul>
  <p>
    If we ever introduce an optional feature qualifying as a "sale" or "sharing" under CPRA, it will be
    strictly opt-in with clear disclosures and a "Do Not Sell or Share" control.
  </p>
</div>

<!-- Section 8: Data Storage & Security -->
<div class="section">
  <h2>8. Data Storage & Security</h2>

  <h3>Storage Location</h3>
  <p>All data is stored in the United States using Google Cloud infrastructure.</p>

  <h3>Security Measures</h3>
  <ul>
    <li>SSL/TLS encryption for all data transmission</li>
    <li>Encryption at rest for all stored data</li>
    <li>Google Sign-In with OAuth 2.0 (supports 2-Step Verification)</li>
    <li>No passwords stored by our application</li>
  </ul>

  <h3>Data Retention</h3>
  <ul>
    <li><strong>Active accounts:</strong> Data retained while account is active</li>
    <li><strong>Inactive accounts:</strong> Deleted after 12 months of no login (no active subscription);
      email reminder sent before deletion</li>
    <li><strong>Deleted accounts:</strong> Personal information and all Budget Data (including Public
      Budgets) removed within 72 hours; may persist in encrypted backups up to 90 days. Shared budgets
      with other owners remain accessible to those owners. Active subscriptions are automatically
      cancelled. Audit logs (e.g., consent records) retained for legal compliance.</li>
    <li><strong>Published Themes & Icons:</strong> Retained indefinitely as public domain content;
      anonymized (dissociated from your identity) upon account deletion</li>
    <li><strong>AI metadata:</strong> Technical logs (job IDs, timestamps) deleted after 30 days</li>
    <li><strong>Service discontinuation:</strong> All data deleted after 30 days notice to allow export
    </li>
  </ul>

  <h3>Breach Notification</h3>
  <p>
    In the event of a data breach, we will notify you and applicable authorities in accordance with
    law, without undue delay and within 72 hours where required.
  </p>
</div>

<!-- Section 9: Your Rights & Controls -->
<div class="section">
  <h2>9. Your Rights & Controls</h2>

  <h3>Access & Export</h3>
  <ul>
    <li>View all your data in the app</li>
    <li>Export as JSON or CSV anytime</li>
  </ul>

  <h3>Update & Delete</h3>
  <ul>
    <li>Modify budget data anytime</li>
    <li>Update email in account settings</li>
    <li>Delete specific entries or your entire account (Settings or email
      <a href="mailto:legal@eb.app">legal@eb.app</a>)</li>
  </ul>

  <h3>Communication Preferences</h3>
  <ul>
    <li>Manage email preferences via unsubscribe links in emails</li>
    <li>Security emails (verification, password reset) cannot be disabled</li>
  </ul>

  <h3>Marketing Opt-Out</h3>
  <ul>
    <li>Opt out of advertising and analytics tracking using the "Your Privacy Choices" link in the footer</li>
    <li>Unsubscribe from marketing emails via the link in each email</li>
  </ul>
</div>

<!-- Section 10: State Privacy Laws -->
<div class="section">
  <h2>10. State Privacy Laws</h2>

  <h3>CCPA/CPRA (California)</h3>
  <p>California residents have the right to:</p>
  <ul>
    <li>Know what personal information we collect</li>
    <li>Access and receive a copy of your data</li>
    <li>Request deletion</li>
    <li>Non-discrimination for exercising rights</li>
    <li>Opt-out of data sales (we do not sell; any future opt-in feature will include a "Do Not Sell or
      Share" control)</li>
  </ul>
  <p>
    We do not engage in cross-context behavioral advertising. Affiliate link clicks transfer you to
    Amazon where their CPRA obligations apply separately.
  </p>
  <p>
    <strong>Response Time:</strong> 45 days (extendable by 45 days with notice). Contact
    <a href="mailto:legal@eb.app">legal@eb.app</a> or use account settings.
  </p>

  <h3>Other States (CO, CT, UT, VA)</h3>
  <p>
    Residents may access, correct, delete, and obtain copies of personal information, and opt out of
    certain processing. Appeal denied requests by contacting
    <a href="mailto:legal@eb.app">legal@eb.app</a>.
  </p>
</div>

<!-- Section 11: Children's Privacy -->
<div class="section">
  <h2>11. Children's Privacy</h2>
  <p>
    Our Service is for individuals 18 years or older. We do not knowingly collect information from
    anyone under 18. By using the Service, you represent you are 18+. If we learn an account belongs to
    someone under 18, we will promptly delete it.
  </p>
  <p>
    Report suspected underage use to <a href="mailto:legal@eb.app">legal@eb.app</a>.
  </p>
</div>

<!-- Section 12: International Users -->
<div class="section">
  <h2>12. International Users</h2>
  <p>
    Our Service is hosted in the United States and intended for U.S. residents. By accessing the
    Service from other locations, you consent to data transfer, storage, and processing in the United
    States.
  </p>
</div>

<!-- Section 13: Support Communications -->
<div class="section">
  <h2>13. Support Communications</h2>
  <p>
    When contacting support (<a href="mailto:support@eb.app">support@eb.app</a>), do not include
    sensitive information (account numbers, passwords, government IDs, tax documents). We cannot
    securely receive such data and may delete messages containing it. Support communications are used
    only to respond to your request.
  </p>
</div>

<!-- Section 14: Contact -->
<div class="section">
  <h2>14. Contact Information</h2>
  <ul>
    <li><strong>General:</strong> <a href="mailto:team@eb.app">team@eb.app</a></li>
    <li><strong>Legal/Privacy:</strong> <a href="mailto:legal@eb.app">legal@eb.app</a></li>
    <li><strong>Mail:</strong> 30 N Gould St #52260, Sheridan, WY 82801</li>
  </ul>
</div>

<!-- Policy Updates -->
<div class="section">
  <h2>Policy Updates</h2>
  <ul>
    <li><strong>December 31, 2025</strong> – Icon Generation Credits, theme publishing, budget limits</li>
    <li><strong>January 17, 2026</strong> – Renamed "Offers" to "Picks"</li>
    <li><strong>January 19, 2026</strong> – Policy refined</li>
    <li><strong>January 28, 2026</strong> – Icon Generation Credits tiered pricing</li>
    <li><strong>February 1, 2026</strong> – Email preferences and marketing disclosures clarified</li>
  </ul>
</div>

<!-- Final Note -->
<div class="section">
  <p>
    This policy complies with applicable U.S. state and federal privacy regulations. For questions,
    contact us at <a href="mailto:legal@eb.app">legal@eb.app</a>.
  </p>
</div>

---

## About this document

This is a markdown mirror of [https://eb.app/privacy-policy/](https://eb.app/privacy-policy/).
The HTML version is the canonical form. This file exists so AI/LLM
tools can ingest the content without HTML parsing.