Privacy Policy

This Privacy Policy explains how Shrewd ("we", "us") collects, uses, shares, and protects information about you when you use our AI-powered personal finance assistant (the "Service"). Shrewd is operated by Shrewd AI.

Information we collect

We collect the following categories of information:

• Account information you provide: your name, email address, and password when you create an account.
• Financial data via Plaid: when you connect a financial institution, our data provider Plaid Inc. retrieves information on your behalf, including account details and balances, transaction history, investment holdings and transactions, and liability details such as loans and credit cards.
• Chat and usage data: the messages you exchange with the assistant and basic product analytics used to operate and improve the Service.
• Phone number and SMS consent: the mobile phone number you provide to sign in, and your consent to receive one-time verification codes by SMS.

How we use your information

We use your information to:

• provide the Service — answering your questions and surfacing insights about your money;
• send proactive notifications you enable, such as bill-due reminders;
• maintain the security, integrity, and reliability of the Service;
• comply with our legal obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

How we share your information

We share information only with service providers that help us operate the Service, under contractual confidentiality and data-protection obligations:

• Plaid — to securely connect your financial accounts. Plaid's handling of your data is governed by the Plaid End User Privacy Policy.
• Anthropic — the AI model provider that powers the assistant's responses. Your data is not used to train their models.
• Infrastructure and analytics providers — for hosting, database, and product-analytics services.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

SMS and text messaging

We use your mobile phone number to send one-time verification codes by SMS when you sign in, and any account notifications you choose to enable. Message and data rates may apply, and message frequency varies. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. You can opt out of SMS at any time by replying STOP to any message; reply HELP for help.

How we protect your information

We encrypt sensitive data — including the credentials used to access your financial institutions and the financial data we receive — at rest using industry-standard AES-256 encryption, and in transit using TLS 1.2 or higher. Access to production systems that store consumer financial data is restricted and follows the principle of least privilege.

Data retention and deletion

You are in control of your data:

• Disconnect a bank at any time from your settings. We revoke our access at Plaid and delete the data associated with that connection.
• Delete your account at any time. We revoke all Plaid connections and permanently delete your personal and financial data, except where we are required to retain limited records to comply with law.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you.

Contact us

Questions about this policy or your data? Contact us at [email protected].