Privacy Policy

Last updated: June 19, 2026

Fresnaye Ledger ("we", "our", or "us") is a personal finance management application operated by Fresnaye & Company. This Privacy Policy describes how we collect, use, and protect information when you use our website, mobile app, and related services (the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for sign-in and important account notifications
• Display name — shown in the app interface
• Password hash (if you use email/password sign-in) — stored as a bcrypt hash; we never see or store your plaintext password
• Single sign-on identifier (if you sign in with Fresnaye ID) — a unique identifier from our identity provider
• Email verification timestamp — to confirm you control the email address

1.2 Financial Data You Enter

The Service is designed for you to enter and manage your personal financial information. This includes:

• Bank account names and balances (entered manually)
• Credit card balances, APRs, and statement details
• Paychecks, allocations, and budget categories
• Transactions (entered manually or imported from statement files)
• Bills, subscriptions, and recurring payments
• Chapter 13 trustee payment plans, creditor claims, and payment history

This information is stored encrypted at rest. It is only accessible to you when you're signed in to your account.

1.3 Usage and Security Logs

To operate the Service securely, we record:

• IP addresses — used for rate-limiting, abuse detection, and security audits; retained for up to 90 days
• Sign-in attempts (timestamp + outcome) — used to detect brute-force attacks
• Session activity — basic page-view logs for debugging and abuse detection
• AI feature usage — the number of tokens consumed by AI-powered features, used to enforce per-account quotas

1.4 What We Do Not Collect

• We do not access your bank or credit card accounts directly. The Service does not use Plaid, Yodlee, or any other account-linking service unless you explicitly opt in.
• We do not collect device identifiers (IDFA, AAID) for advertising purposes.
• We do not use third-party analytics or advertising trackers.
• We do not collect biometric data, location data, or contact lists.

2. How We Use Information

We use the information we collect to:

• Provide the Service — display your financial data, run calculations, generate reports
• Authenticate you and protect your account
• Send you essential account notifications (email verification, security alerts, account changes)
• Detect and prevent abuse, fraud, and unauthorized access
• Improve the Service by analyzing aggregated, de-identified usage patterns
• Comply with legal obligations

3. AI-Powered Features

The Service includes optional AI-powered features such as transaction categorization, monthly narrative generation, and statement parsing. When you use these features:

• The relevant data (e.g., a transaction description, an uploaded statement) is sent to Anthropic for processing using the Claude language model.
• Anthropic processes this data per their privacy policy and does not use it to train their models.
• You can disable any AI feature at any time from the AI Assistant settings page.
• Your account has a daily token quota; we track usage to enforce that quota.

4. How We Share Information

We do not sell your personal information. We do not share it with advertisers. We share information only in these limited cases:

• Service providers — Infrastructure providers (hosting, email delivery, AI processing) under contract to process data only for our instructions.
• Legal requirements — When required by law, court order, or to protect the rights, property, or safety of Fresnaye, our users, or the public.
• Business transfers — In connection with a merger, acquisition, or sale of assets, with notice to you.

5. Data Retention

• Account data is retained as long as your account is active.
• Security logs (IP addresses, sign-in attempts) are retained for up to 90 days.
• If you delete your account, your personal data is scrubbed within 30 days. Aggregated, de-identified data may be retained for analytics.

6. Your Rights and Choices

You have the right to:

• Access — View all data we hold about you from the Settings page.
• Export — Download a complete copy of your data as JSON from the Settings page.
• Correct — Update your account information at any time.
• Delete — Delete your account from the Settings page; this scrambles your personal information and ends your session.
• Restrict — Disable individual AI features or notification types from the relevant settings pages.

To exercise any of these rights, sign in to your account, or contact us at privacy@fresnayeledger.com.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at privacy@fresnayeledger.com and we will delete it.

8. International Users

The Service is operated from the United States. By using the Service, you consent to the transfer of your information to the United States and its processing here.

9. Security

We use industry-standard measures to protect your data, including TLS for all data in transit, encryption at rest, password hashing with bcrypt, rate limiting, and access controls. No method of transmission or storage is 100% secure; if you suspect your account has been compromised, contact us immediately at security@fresnayeledger.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. If we make material changes, we will notify you by email or through the Service.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Fresnaye & Company
Email: privacy@fresnayeledger.com
Support: support@fresnaye.com