Privacy Policy
Effective date: June 15, 2026
This Privacy Policy explains how AfterPenny (“AfterPenny,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the AfterPenny personal finance application and related services (the “Service”).
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
Plain-language summary: AfterPenny is a personal budgeting and forecasting tool. We collect the financial information you give us — either by importing it yourself or, if you choose, by linking a bank account through Stripe — and we use it only to power the app’s features for you. We do not sell your personal information, and we do not use it for advertising.
1. Who we are
AfterPenny is operated as an independent product. For any privacy questions, requests, or concerns, contact us at:
bucketlister.app+afterpenny@gmail.com
2. Information we collect
a. Account and sign-in information
- A username you choose, and a securely hashed password; or
- A sign-in identity from a third-party provider (e.g., Microsoft) if you choose to sign in that way. In that case we receive the identity information that provider shares to authenticate you.
- An email address only if you provide one (for example, for account-related communication). An email address is not required to use the core Service.
b. Financial information you enter or import
You can add accounts, balances, budgets, goals, and transactions manually, or import transaction files (CSV, OFX/QFX, Excel). This may include account names, institution names, account numbers you choose to enter, balances, transaction dates, amounts, descriptions/merchants, and notes.
c. Financial information from linked accounts (Stripe Financial Connections)
If you choose to connect a bank or financial account, AfterPenny uses Stripe Financial Connections to establish that connection. You enter your bank login credentials directly with Stripe — AfterPenny never sees, receives, or stores your bank username or password.
Through this connection, we receive financial data such as:
- Account and institution names and account type;
- Account balances; and
- Transaction history (date, amount, and description/merchant).
This data is stored in your AfterPenny records and used the same way as data you import manually. Stripe’s handling of your information is governed by Stripe’s own privacy policy at https://stripe.com/privacy.
d. Subscription and billing information
If you subscribe to a paid tier, payments are processed by Stripe. We do not store your full card number. We retain a Stripe customer identifier and subscription status information (tier, status, renewal dates) to manage your subscription.
e. Technical information
We may collect basic technical information needed to operate and secure the Service, such as session/authentication tokens and server logs.
3. How we use your information
We use your information to:
- Provide the Service’s core features: transaction syncing, balance tracking, budgeting, goals, and forecasting;
- Authenticate you and keep your account secure;
- Process and manage subscriptions; and
- Respond to your requests and support inquiries.
We do not sell your personal information, and we do not use it for advertising or ad targeting.
4. How we share your information
We share information only with service providers that help us operate the Service, and only as needed for them to perform their function:
- Stripe — for subscription billing and, if you use it, for Financial Connections bank linking (see https://stripe.com/privacy);
- Identity providers (e.g., Microsoft) — only if you choose to sign in with them.
We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a business transfer. We do not otherwise share your financial data with third parties.
5. Disconnecting accounts and deleting data
- Disconnect a linked account: You can revoke a bank connection at any time from your account settings; afterward we stop receiving new data from that connection.
- Delete your data: You may request deletion of your account and associated data by contacting bucketlister.app+afterpenny@gmail.com. We will delete or de-identify your data except where we are required to retain certain records (for example, billing records) to comply with legal obligations.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with our legal obligations, resolve disputes, and enforce our agreements.
7. Security
We take reasonable measures to protect your information, including encrypted connections (HTTPS), hashed passwords, encrypted storage of sensitive credentials, and per-user data isolation. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your privacy rights (including California residents)
Depending on where you live, you may have the right to:
- Know what personal information we have collected about you;
- Access a copy of that information;
- Delete your personal information; and
- Not be discriminated against for exercising your privacy rights.
To exercise any of these rights, contact bucketlister.app+afterpenny@gmail.com. We do not sell your personal information.
9. Children’s privacy
The Service is not directed to, and we do not knowingly collect personal information from, children under 16. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Effective date” above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Contact us
Questions or requests regarding this policy or your data: