SteadyFi, Inc. is committed to protecting your financial and personal data. This Privacy Policy explains exactly what data we collect, why we collect it, and how it is protected. We use Plaid to connect to your financial accounts — we never see or store your bank login credentials.
01Introduction
SteadyFi, Inc. ("SteadyFi," "we," "our," or "us") is an AI-powered personal finance platform that helps users protect their money from fees, interest charges, and poor financial decisions. We are committed to protecting your personal information and being transparent about how we collect, use, and share it.
This Privacy Policy applies when you use our website at steadyfi.ai, our mobile and web applications, and any related services (collectively, the "Services"). By using our Services, you agree to the terms of this Privacy Policy.
If you do not agree with these terms, please do not use our Services.
02Information We Collect
2.1 Information You Provide Directly
- •Account registration: name, email address, and password
- •Profile information including financial goals and preferences
- •Communications you send us, including support requests and feedback
- •Waitlist and early access sign-up information
2.2 Financial Information via Plaid
SteadyFi uses Plaid Technologies, Inc. ("Plaid") to securely connect to your financial institutions. When you link your accounts, Plaid shares the following with us on your behalf:
- •Account balances (checking, savings, credit, investment, and loan accounts)
- •Transaction history including merchant names, amounts, dates, and categories
- •Account details such as account type and masked account numbers
- •Liability information including credit card APRs, minimum payments, and due dates
- •Loan details including student loan and mortgage information
Important: Your bank login credentials are entered directly into Plaid's secure interface. SteadyFi never sees, receives, or stores your banking passwords. Plaid's privacy policy is available at plaid.com/legal.
2.3 Automatically Collected Information
- •Device information: IP address, browser type, operating system
- •Usage data: pages visited, features used, clicks, and session duration
- •Log data: access times, errors, and performance metrics
- •Cookies and similar tracking technologies (see Section 9)
2.4 Information from Third Parties
- •Clerk — user identity and session management
- •Analytics providers — aggregated usage patterns
- •Financial data enrichment services — transaction categorization
03How We Use Your Information
3.1 Providing and Improving Our Services
- •Authenticating your identity and maintaining your account
- •Connecting to your financial institutions via Plaid
- •Generating financial health scores, cash flow analyses, and spending insights
- •Running our Debt Optimizer, Financial Firewall, and bill tracking features
- •Personalizing your dashboard and financial recommendations
- •Improving the accuracy of AI-powered categorization and alerts
3.2 Communications
- •Account-related notifications and security alerts
- •Push notifications about upcoming bill due dates and fee warnings (with your permission)
- •Responses to support requests and inquiries
- •Product updates and announcements (opt-out available at any time)
3.3 Security and Fraud Prevention
- •Detecting, investigating, and preventing unauthorized activity
- •Protecting the security and integrity of our platform
- •Complying with legal obligations and enforcing our Terms of Service
3.4 Analytics and Research
- •Analyzing aggregated, anonymized usage patterns to improve our Services
- •Conducting research to develop new features and financial insights
- •Measuring effectiveness of alerts and recommendations
05Data Retention
- •Account information: retained for the duration of your account plus 90 days after deletion
- •Transaction data: retained for up to 24 months to provide historical financial analysis
- •Plaid access tokens: stored securely and deleted within 30 days of account termination
- •Backup copies: retained for up to 90 days in secure, encrypted storage
You may request deletion of your data at any time by contacting privacy@steadyfi.ai. Upon verified request, we will delete your personal data within 30 days, subject to legal retention obligations.
06Data Security
- •All data is encrypted in transit using TLS 1.2 or higher
- •Data at rest is encrypted using AES-256 encryption
- •Financial account credentials are never stored on SteadyFi servers — Plaid handles all authentication
- •Access to user data is restricted to authorized personnel on a need-to-know basis
- •Regular security assessments and penetration testing
- •Infrastructure hosted on SOC 2 Type II compliant providers
- •Incident response plan to address potential data breaches
While we strive to use commercially acceptable means to protect your information, no transmission over the Internet is 100% secure. We commit to notifying you promptly in the event of a breach affecting your personal data.
07Your Rights and Choices
7.1 Access and Portability
Request a copy of the personal information we hold about you, including transaction history and account data, in a machine-readable format within 30 days of a verified request.
7.2 Correction
Request correction of inaccurate information. You can update most account information directly within the SteadyFi dashboard.
7.3 Deletion
Request deletion of your personal information. Upon verified request, we will delete your data within 30 days, except where retention is required by law.
7.4 Withdraw Consent
Disconnect your financial accounts at any time through the SteadyFi dashboard. You may also revoke Plaid's access directly at my.plaid.com.
7.5 Opt-Out of Marketing
Opt out of marketing emails by clicking "Unsubscribe" in any email or contacting privacy@steadyfi.ai. Transactional and security notifications cannot be disabled while your account is active.
7.6 Push Notification Control
Enable or disable push notifications at any time through your device settings or within the SteadyFi application settings.
08California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the CCPA and CPRA:
- •Right to know what personal information we collect, use, disclose, and sell
- •Right to delete your personal information
- •Right to opt out of the sale or sharing of personal information (we do not sell personal information)
- •Right to non-discrimination for exercising your privacy rights
- •Right to correct inaccurate personal information
- •Right to limit use of sensitive personal information
To exercise your California privacy rights, contact us at privacy@steadyfi.ai. We will respond to verified requests within 45 days.
Categories of personal information collected in the last 12 months: identifiers, financial information, commercial information, internet activity, and inferences drawn to create a financial profile.
10Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@steadyfi.ai. We will delete such information promptly upon verification.
11International Data Transfers
SteadyFi is based in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States. By using our Services, you consent to this transfer.
For users in the European Economic Area (EEA), we rely on Standard Contractual Clauses and other appropriate transfer mechanisms to ensure adequate data protection.
12Plaid-Specific Disclosures
🏦 How Plaid Works with SteadyFi
SteadyFi uses Plaid to access your financial account data. Plaid is a registered Financial Data Access Service Provider and handles all direct communication with your financial institution.
- •We use Plaid to access account balances, transactions, and liability information
- •Your financial institution login credentials are entered directly into Plaid's secure interface and are never transmitted to or stored by SteadyFi
- •Plaid complies with applicable financial data security standards including SOC 2 Type II
- •You may revoke SteadyFi's access to your financial data through Plaid's consumer portal at my.plaid.com at any time
- •We access your financial data in read-only mode — SteadyFi cannot initiate transactions, transfers, or payments on your behalf
- •Financial data retrieved via Plaid is used solely to provide you with financial insights, alerts, and optimization tools within SteadyFi
For questions about Plaid's data practices, review Plaid's Privacy Policy at plaid.com/legal or contact privacy@plaid.com.
13AI and Automated Processing
SteadyFi uses artificial intelligence and machine learning technologies, including Anthropic's Claude AI, to analyze your financial data and generate personalized insights:
- •Automated transaction categorization and pattern recognition
- •Financial health scoring based on income, spending, and debt patterns
- •Predictive alerts for upcoming fees, bill due dates, and utilization thresholds
- •Debt payoff optimization calculations
- •Personalized spending insights and budget recommendations
These automated processes do not make legally significant decisions about you. All AI-generated insights are informational tools to support your own financial decisions. You are never required to follow our recommendations.
We do not use your personal financial data to train AI models. We access Claude through Anthropic's standard commercial API, under which your data is not used to train Anthropic's models by default.
14Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- •Sending an email notification to the address associated with your account
- •Displaying a prominent notice within the SteadyFi application
- •Updating the "Effective Date" at the top of this policy
Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated policy.
15Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
SteadyFi, Inc.
Privacy Team: privacy@steadyfi.ai
General Inquiries: hello@steadyfi.ai
Website: steadyfi.ai
We are committed to resolving complaints about our collection or use of your personal information. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
By using SteadyFi's Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.
Last updated: March 13, 2026 · Version 1.0