Privacy Policy

Last updated April 14, 2026

Alenjo is a personal finance app that helps you see your money in one place. To do that, we connect to your bank accounts, pull in your transactions, and show you what matters. This policy explains exactly what data we collect, how we use it, and who else is involved.

We want to be straightforward here. No legal fog, no buried clauses. If something is unclear, reach out and we will explain it.

What We Collect

When you use Alenjo, we store the following:

• Your profile. A display name and a photo, if you add one. That is it for personal info. We do not ask for your phone number, address, or date of birth.
• Bank account metadata. Account names, types (checking, savings, credit card, investment), current balances, and the institution they belong to. This comes from Plaid, not from you typing it in.
• Transactions. Merchant names, amounts, dates, and categories for your recent transactions. We store up to several months of history so you can review your spending.
• Investment holdings. Ticker symbols, quantities, values, and cost basis for your brokerage accounts.
• Credit card details. APR, minimum payment, due dates, and statement balances, when your bank provides them through Plaid.
• Recurring bills. The bills you set up manually in the Plan tab, including name, amount, frequency, and due dates.
• Your preferences. Things like which tab you last viewed, whether you are showing ignored transactions, and any nicknames or category changes you have made to transactions. These are small UI settings, not sensitive data.

What We Do Not Collect

• We do not track your behavior. No analytics, no page views, no click tracking, no session recordings.
• We do not use cookies.
• We do not serve ads or share data with advertisers.
• We never see, handle, or store your bank login credentials. Those go directly to Plaid.

How We Get Your Financial Data

We use Plaid to connect to your bank. When you tap "Connect Account," Plaid opens a secure widget where you log in to your bank directly. Plaid handles the authentication and sends us read-only access to your account data.

Your bank username and password never touch our servers. They stay between you, your bank, and Plaid. We receive an access token from Plaid that lets us request your balances and transactions, but that token cannot be used to move money or make changes to your accounts.

Plaid is used by thousands of financial apps and is regularly audited for security. You can read Plaid's privacy policy for full details on how they handle your data.

Where Your Data Lives

Your data is stored in Supabase, an open-source database platform built on PostgreSQL. Supabase hosts your profile, accounts, transactions, and everything else Alenjo needs to work.

• All data is encrypted in transit (HTTPS/TLS) and at rest.
• Every database query is scoped to your user account through row-level security. Even if someone had access to the database connection, they could not read another user's data.
• Authentication is handled by Supabase Auth using email and password with short-lived session tokens.

Your profile photo, if you upload one, is stored in a Supabase storage bucket. The image is accessible via a URL tied to your account.

Third-Party Services

Here is every external service Alenjo talks to and why:

• Plaid. Connects to your bank and provides account data, transactions, investment holdings, and credit card details. This is the core of how Alenjo works.
• Supabase. Hosts our database, handles authentication, stores your data, and runs our server-side functions.
• Google Fonts. Delivers the Figtree typeface. Google may log basic request data (your IP address) when loading the font. No cookies are set.
• logo.dev. Provides bank and institution logos. We send the institution's domain name to get a logo image. No user data is shared.
• GitHub Pages. Hosts the Alenjo website itself. GitHub may log access requests. No user data is sent to GitHub beyond standard web traffic.

That is the complete list. We do not use any analytics services, advertising networks, or data brokers.

Data Stored on Your Device

Alenjo stores a few small preferences in your browser's local storage, like which tab you were last on and your display settings. This is not sensitive data, and none of it leaves your device. We do not use cookies at all.

How Long We Keep Your Data

Your data stays in our database for as long as your account is active. When you disconnect a bank in Settings, we delete all accounts and transaction history associated with that connection immediately.

If you want all of your data removed entirely, contact us and we will delete your account and everything associated with it.

Data We Share

We do not sell, rent, or share your data with anyone for marketing or advertising purposes. The only parties that interact with your financial data are Plaid (to fetch it from your bank) and Supabase (to store it). Both are necessary for the app to function.

Children

Alenjo is not designed for children under 18. We do not knowingly collect data from minors.

Changes to This Policy

If we make meaningful changes to this policy, we will update the date at the top. We will not reduce your privacy protections without notice.

Contact

Questions about your data or this policy? Email isaiahaaguilar1@gmail.com.