Privacy

Last updated October 8, 2026

What we keep

Your account: your email address, and your name if you give it or sign in with Google.
Your settings: spending estimates, location, memberships and the cards you hold, so Card Finder and Lounges remember them.
Your wallet: the cards you track, when their annual fee posts, credits you mark used, and your preferences for each credit.
If you link a bank: account names, the last 4 digits of each account, and transactions (date, amount, merchant, category) for the accounts you link. We use these only to work out which card credits you have used.
Sign-in records: when and from which browser you signed in, so you can see and sign out other devices.

Bank linking runs through Plaid. You sign in to your bank inside Plaid's window; we never see or store your bank username or password.
Plaid gives us read-only access. We cannot move money.
The access key Plaid gives us is encrypted before it is stored, and is never sent to your browser or included in exports.
Plaid's own handling of your data is described in the Plaid End User Privacy Policy.

We don't sell your data, share it with advertisers, or use it to decide which card offers you see.
Nobody else can see your wallet. Every request is checked against your own sign-in.

Data is stored with Cloudflare (D1 databases), encrypted in transit and at rest: your wallet and bank data in North America, your account and settings in Europe.
Sign-in emails are sent through Resend.

Download your wallet data any time from Wallet → Account & privacy.
Disconnect a bank any time; we revoke our access at Plaid immediately and delete that bank's accounts and transactions.
Delete your wallet data or your whole account from Wallet → Account & privacy. Deletion is immediate and also revokes every bank link.
Questions: ben@earnitback.com.