Privacy Policy
Castworth · Last updated: June 29, 2026
Castworth ("we," "us," or "the app") is a personal-finance application that helps you
forecast your cash flow, budget, and plan savings. This Privacy Policy explains what information we
collect, how we use it, how we protect it, and the choices you have. We built this app to show you
your own financial picture — we do not sell your data, and we do not use it for advertising, lending,
or credit decisions.
Information we collect
- Account information. The email address and password you use to create and sign
in to your account. Passwords are handled by our authentication provider and stored only as secure
hashes — we never see or store your plain-text password.
- Financial data via Plaid. When you choose to connect a financial account, we use
Plaid Inc. to securely link it.
Through Plaid we receive: your account names, types, and balances; transaction history (dates,
amounts, merchant names, and categories); and, for credit cards, liability details such as
statement dates, due dates, and minimum payments. We use this to build your forecast.
- Banking credentials. We never receive or store your bank username or password.
You enter those directly with your bank inside Plaid's secure connection flow.
How we use your information
- To display your balances, cash on hand, and a forward-looking cash-flow forecast.
- To detect recurring bills and income and estimate your regular monthly spending.
- To let you categorize, plan, and reconcile transactions against your forecast.
- To create and secure your account and respond to support requests.
We use your information only to provide the app's features to you. We do not use it for marketing,
advertising, lending, credit decisions, or to build profiles for third parties.
How we share information
We do not sell, rent, or trade your personal or financial information. We share data
only with the service providers that operate the app on our behalf, and only as needed to run it:
- Plaid — to connect your financial accounts and retrieve account data. Your use of
Plaid is also governed by Plaid's
End User Privacy Policy.
- Infrastructure providers — Supabase (database and authentication), Render
(application hosting), and Vercel (web hosting), which store and process data securely on our behalf.
- AI service providers — limited transaction details (such as a merchant name and
amount) may be sent to a third-party AI service to help categorize spending and generate guidance.
This data is used only to return a result to you and is not used to train the provider's models.
- Legal requirements — we may disclose information if required by law or to protect
the rights, safety, or security of our users or the app.
How we protect your information
- All data is encrypted in transit using TLS 1.2 or higher.
- All stored data is encrypted at rest (AES-256) in our managed database.
- Each user's data is isolated at the database level, so you can only access your own information.
- Administrative access to our systems is protected with multi-factor authentication.
- We never store your banking credentials, and secrets are kept out of our source code.
Data retention and deletion
We keep your information for as long as your account is active so the app can provide your forecast and
history. You can disconnect a financial account at any time, which stops us from retrieving new data
from it. You may request deletion of your account and all associated financial data at any time by
contacting us at the email below; we will delete it within 30 days, except where we are required to
retain certain records by law. We review our retention practices periodically.
Your choices and rights
- You can connect or disconnect financial accounts at any time within the app.
- You can request a copy of your data, or request that we correct or delete it, by emailing us.
- You can close your account at any time, which removes your access and triggers deletion of your data
as described above.
Children's privacy
The app is intended for adults and is not directed to children under 13. We do not knowingly collect
information from children.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date
above and, where appropriate, notify you within the app.
Contact us
If you have questions about this policy or your data, or want to exercise any of your rights, contact: