Privacy policy

Assemble Money is a private, invite-only web app that helps a household see and manage its finances together. It is operated by [Operator legal name: to be provided] (“we”, “us”). This policy explains what information the app collects, how it is used and protected, and the choices you have.

• Account information from Google. If you sign in with Google, Google shares your name, email address, and profile picture with us, along with an identifier for your Google account. We request only these basic profile details (the “openid”, “email”, and “profile” permissions).
• Passkeys. If you add a passkey (Face ID, Touch ID, or a security key), we store its public key and a name for it. Your fingerprint or face never leaves your device, and we never receive it.
• Household information you enter. Household names, time zones, members and their roles, display names, and the email addresses of people you invite.
• Security information. When you sign in, we record the time, your IP address, and your browser and device type, so you can review active sessions and security activity. We also keep a log of important account and household events (such as sign-ins, new members, and passkey changes) that contains identifiers and counts, never financial details.
• Blocked attempts. Sign-in requests are counted per IP address to limit repeated attempts. If someone tries to create an account without an invitation, we record the attempt with its IP address and browser type, but no name or email address. These counters are deleted within 2 days, and records of blocked attempts within 90 days.

We never ask for or store bank usernames, passwords, PINs, or full card numbers, and Assemble Money has no passwords of its own.

We use the name, email address, and profile picture Google shares only to sign you in, to keep your account secure, and to show the members of your households who you are. We do not request access to Gmail, Google Drive, Contacts, Calendar, or any other Google service. We don't keep Google access or refresh tokens, so Assemble Money cannot act in your Google account.

Assemble Money's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train artificial intelligence models.

• To sign you in and keep your account and household secure.
• To show your household's information to the members of that household.
• To prevent abuse, for example by limiting repeated sign-in attempts.
• To keep the service running, fix problems, and meet legal obligations.

We don't sell your information, use it for advertising, or build marketing profiles. Assemble Money has no advertising or analytics trackers.

• Your household. Members of a household can see that household's information, and each other's names, email addresses, and roles. Households are completely separate: members of one household can't see another household's information.
• Service providers. Cloudflare runs the app on its global network, and Neon hosts its database in the United States (Oregon). They process information only on our behalf. Google provides the sign-in service.
• The people who run Assemble Money access stored information only when needed to operate, secure, or troubleshoot the service, or when the law requires it.
• Legal requirements. We may disclose information if required by law, or to protect the safety and security of our users or the service.

We don't share your information with anyone else.

Bank connections and AI features are not available yet. When they are, bank connections will be read-only and made through Plaid, which handles your bank sign-in so we never see your bank credentials, and AI features will be optional. We will update this policy before either feature is turned on, describing exactly what is shared and why.

We use only the cookies needed to keep you signed in and to protect sign-in. They are tied to this app's address, are not readable by scripts, and are never used for tracking or advertising. Our hosting provider may set a strictly necessary security cookie to protect the service from abuse.

• All connections are encrypted (HTTPS), and stored data is encrypted at rest.
• Sign-in uses Google or passkeys, so there are no passwords to steal or reuse.
• Sensitive changes, such as adding members or deleting your account, require you to have signed in recently.
• Every request is checked against your household membership, and the app connects to its database with limited permissions.

No system is perfectly secure, but we work to protect your information.

We keep your information while your account exists. Sign-in sessions expire after seven days without use and are then deleted, with their IP address and device details, within a day. Records of blocked sign-up attempts are deleted automatically within 90 days, and sign-in attempt counters within 2 days. Operational logs, which never contain financial information, are kept for no more than 30 days. Deleted information can remain in database backups for up to 30 days before it is permanently removed.

• Update your name in Settings → Profile. Your email address comes from the account you sign in with.
• Remove passkeys and sign out other devices in Settings → Security.
• Delete your account in Settings → Profile. This removes your profile, sign-in methods, sessions, and memberships, along with any household where you are the only member and all of its data. Households you share with others keep their shared information, and the IP address and device details are removed from your security records.
• Disconnect Google at any time from your Google Account.

Depending on where you live, you may have additional rights, such as to request a copy of your information or ask us to correct or delete it. Contact us to make a request.

Assemble Money is intended for adults. It is not directed to children under 13, and we don't knowingly collect their information.

When this policy changes, we update the date at the top. If a change significantly affects how we use your information, we will tell you before it takes effect, in the app or by email. See also our terms of service.

Email support@assemblemoney.com. We aim to reply within 30 days.