Privacy Policy
Overview
Feetsco is a read-only financial insights app that connects your bank transactions with receipts to provide personalized, evidence-backed insights. We retain detailed data to power precise answers. You can delete your entire account at any time.
This policy applies to the Feetsco mobile and web applications and, as described in “Marketing Website” below, to www.feetsco.com.
Information We Collect
Account Information
When you sign up, we collect your name, email address, and authentication credentials via Google or Apple sign-in. We may also collect your birthdate and phone number to personalize your experience.
SMS Verification
By providing your phone number during signup, you consent to receive one-time SMS verification codes from Feetsco for two-factor authentication (sign-up confirmation, sign-in, password reset, and confirming changes to your phone number). We do not send marketing messages by SMS. Message frequency is limited to authentication events you initiate. Message and data rates may apply.
You can opt out at any time by replying STOP to any message, or by removing your phone number under Settings → Account, which detaches it from your account and stops all future verification SMS. Reply HELP to any message for assistance, or contact support@feetsco.com.
We do not share or sell phone numbers or SMS content with third parties for marketing. Phone numbers are passed to AWS End User Messaging only as the SMS delivery carrier. See “Third-Party Services” below.
Financial Data via Plaid
We use Plaid to securely connect to your bank accounts. Through Plaid, we access:
- Account balances and metadata
- Transaction history (merchant names, amounts, dates, categories, locations)
We access this data in read-only mode. We cannot move money or modify your accounts.
Email Receipts
With your permission, we connect to Gmail or Yahoo Mail to search for receipt emails. We only access emails that match receipt-related criteria and do not read other emails. This connection is optional.
Uploaded Receipts
You can photograph and upload receipts. We use optical character recognition (OCR) to extract merchant, item, and price information.
Usage Data
We use Amplitude to collect app usage events, such as features used and screens viewed, to understand and improve Feetsco. These events may be associated with your user ID.
In the United States, usage analytics are enabled by default unless you turn them off. In the European Economic Area (EEA), UK, and Switzerland, we collect usage analytics only after you opt in. Elsewhere, or when we cannot determine your location, analytics stay off unless you opt in. A previously saved choice takes precedence over these defaults.
Analytics are optional and do not affect access to Feetsco. You can turn them off during signup or at any time under Settings → Privacy & Legal → Analytics. Turning analytics off stops future product analytics collection; it does not automatically delete previously collected data. See “Data Retention” and “Your Rights” below.
Behavioral Insights
With your consent, we generate personalized financial profiles based on your spending patterns to provide more relevant nudges and insights. You can opt out of this feature in your privacy settings.
Marketing Website
www.feetsco.com is a static site. It uses three small functional cookies that stay in your browser:
| Cookie | Purpose | Lifetime |
|---|---|---|
fc_id |
A random visitor id so you keep seeing the same version of a page we are testing (for example one of two headlines) | 12 months |
fc_consent |
Remembers your analytics choice described below | 12 months |
fc_exp_override |
Set only when a page is opened with an ?exp= link to preview one version |
Until you close the browser |
The site also keeps two small records in your browser’s local storage: which tested pages you have seen (so a later waitlist signup counts toward the version you saw), and whether your region turns analytics on by default (checked again after a week). Neither leaves your browser on its own.
Analytics. We use Amplitude to learn which pages and headlines work. The same regional defaults as the app apply: in the United States, website analytics run unless you turn them off with “Analytics choices” in the page footer; in the EEA, UK, Switzerland, everywhere else, and whenever we cannot determine your location, we ask first and send nothing until you agree. Your saved choice takes precedence, and you can change it at any time from “Analytics choices”. When analytics run, Amplitude receives a device ID (it sets its own cookie), the pages you view, which test version you saw, how far you scroll, clicks on buttons and links, and any utm_ campaign parameters and referrer from the link that brought you here. We do not send your email address to Amplitude.
Waitlist. When you join the waitlist we store your email address, where on the site you signed up, which test version you saw, the campaign parameters above, your browser language, a hashed form of your IP address and your browser type. We email you once to confirm (double opt-in); until you confirm, the address is used only to send that confirmation. We keep waitlist addresses until Feetsco launches plus 12 months, or until you unsubscribe from the link in any waitlist email, whichever is sooner. Questions: privacy@feetsco.com.
How We Use Your Data
- Matching: Link receipts to bank transactions for item-level detail
- Insights: Generate personalized nudges and answer your financial questions
- Evidence: Cite specific transactions and receipts to support every answer
- Notifications: Send reminders for goals you’ve accepted
- Improvement: Analyze usage patterns according to the regional defaults and privacy choices described above
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), UK, and Switzerland:
We process your data based on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account management, authentication | Contract performance |
| Bank data sync, receipt matching | Contract performance |
| Nudges and insights generation | Contract performance |
| Behavioral profiling | Your consent |
| Analytics | Your consent |
| Error tracking and service quality | Legitimate interest |
| Marketing communications | Your consent |
Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Plaid | Secure bank account connections | Bank credentials (via OAuth) |
| OpenAI | AI processing for insights | Transactions, receipts (anonymized where possible) |
| Amazon Web Services | Cloud infrastructure | All data (encrypted at rest) |
| Google/Apple | Authentication | Email, name |
| Amplitude | Optional product analytics, subject to regional defaults and your privacy choices | User ID and app usage events (app); device ID and page events (marketing website) |
| Sentry | Error tracking | Error context, user ID |
| Stripe | Payment processing | Email, payment info |
| Firebase | Push notifications | Device tokens |
| AWS End User Messaging | SMS verification code delivery | Phone number, code |
Each service has its own privacy policy. We share only the minimum data necessary for each service to function.
Data Retention
We retain your data as follows:
- Account and financial data: For the duration of your account
- Service infrastructure data (API costs, model usage metrics): For the duration of your account
- Product usage data (view history, interaction context): For the duration of your account
- Error logs: 30 days
- Notification delivery logs: 30 days
When you delete your account, all your data is permanently removed from our systems, including transactions, receipts, insights, and connected account information.
Data Security
We protect your data with:
- Encryption in transit (TLS) and at rest (AES-256)
- Row-level database security isolating each account
- Envelope encryption for sensitive credentials (bank tokens, API keys)
- No storage of bank credentials (handled by Plaid)
- Regular security reviews and penetration testing
Your Rights
All users have the following rights:
- Access: View all data we have about you within the app
- Export: Download your data in a portable format
- Delete: Permanently delete your account and all associated data
- Disconnect: Revoke access to connected accounts (Plaid, email) at any time
- Opt-out: Disable analytics and behavioral profiling in settings
Additional rights for EEA, UK, and Swiss users (GDPR):
- Rectification: Correct inaccurate personal data
- Restriction: Request we limit processing of your data
- Objection: Object to processing based on legitimate interest
- Withdraw consent: Withdraw consent for processing at any time
- Portability: Receive your data in a structured, machine-readable format
- Complaint: Lodge a complaint with your local data protection authority
Additional rights for California residents (CCPA/CPRA):
- Right to Know: Request disclosure of data collected about you
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: Opt out of the sale or sharing of personal information
- Right to Limit: Limit use of sensitive personal information
- Non-discrimination: You will not be discriminated against for exercising these rights
We do not sell your personal information. To exercise your CCPA rights, use the privacy settings in the app or email privacy@feetsco.com.
International Data Transfers
Your data is processed in the United States. For users outside the US, we transfer data based on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements with our service providers
Children’s Privacy
Feetsco is not intended for users under 18. We do not knowingly collect data from children. If we learn we have collected data from someone under 18, we will delete it promptly.
Changes to This Policy
We may update this policy and will notify you of material changes via the app or email. Your continued use after changes constitutes acceptance of the updated policy.
We maintain versioned copies of this policy. The version number and last updated date are displayed at the top of this page.
Contact
Questions or requests? Contact us at:
- Privacy: privacy@feetsco.com
- General: support@feetsco.com
For GDPR inquiries, you may also contact our Data Protection contact at privacy@feetsco.com.