For AI agents: every page here has a markdown version (add .md to the path), and the full index is at https://earnitback.com/llms.txt.

<!-- https://earnitback.com/privacy -->

# Privacy

Last updated October 8, 2026

## What we keep

-   **Your account:** your email address, and your name if you give it or sign in with Google.
-   **Your settings:** spending estimates, location, memberships and the cards you hold, so Card Finder and Lounges remember them.
-   **Your wallet:** the cards you track, when their annual fee posts, credits you mark used, and your preferences for each credit.
-   **If you link a bank:** account names, the last 4 digits of each account, and transactions (date, amount, merchant, category) for the accounts you link. We use these only to work out which card credits you have used.
-   **Sign-in records:** when and from which browser you signed in, so you can see and sign out other devices.

## Linking a bank (Plaid)

-   Bank linking runs through Plaid. You sign in to your bank inside Plaid's window; **we never see or store your bank username or password**.
-   Plaid gives us read-only access. We cannot move money.
-   The access key Plaid gives us is encrypted before it is stored, and is never sent to your browser or included in exports.
-   Plaid's own handling of your data is described in the [Plaid End User Privacy Policy](https://plaid.com/legal/#end-user-privacy-policy).

## What we don't do

-   We don't sell your data, share it with advertisers, or use it to decide which card offers you see.
-   Nobody else can see your wallet. Every request is checked against your own sign-in.

## Where it lives

-   Data is stored with Cloudflare (D1 databases), encrypted in transit and at rest: your wallet and bank data in North America, your account and settings in Europe.
-   Sign-in emails are sent through Resend.

## Your choices

-   **Download** your wallet data any time from Wallet → Account & privacy.
-   **Disconnect** a bank any time; we revoke our access at Plaid immediately and delete that bank's accounts and transactions.
-   **Delete** your wallet data or your whole account from Wallet → Account & privacy. Deletion is immediate and also revokes every bank link.
-   Questions: [ben@earnitback.com](mailto:ben@earnitback.com).