ClearMint | Privacy Policy

Last updated: July 2026

ClearMint Essentials ("we", "us") respects your privacy. This policy explains what we collect, why, and the choices you have for our web app at clearmintessentials.com / clearmintessentials.app (the "Service"). There is no separate native mobile app. Some features are in beta and may change; this policy covers what the Service does today.

We aim to collect as little as possible. See also our Data Retention and Data Deletion pages.

What we collect How we use it Bank connections Household sharing Analytics AI features Storage & security Sharing & third parties Your rights Contact

1. Information we collect

Account & profile — if you create a cloud account: your email address, display name, authentication details, subscription plan and household role. Sign-in is handled by Supabase Auth (email/password or Google OAuth).
Financial data you enter or import — accounts, cards, transactions, bills, income, expenses, budgets, categories, notes and related settings. If you use the app without signing in, this stays in your browser and is not sent to us.
Imported files — when you upload OFX, CSV or PDF statements, the file is parsed (mostly in your browser; some PDF types may be parsed on our servers when you are signed in) to extract structured transaction and balance data. We store only the structured data you keep, not the raw file, unless you export a backup yourself.
Bank connections (Plaid) — if you choose "Connect bank", Plaid Link lets you authorize read-only access to linked accounts. We receive account names, masks, balances and transactions through Plaid and store them in your account. Plaid access tokens stay on our servers and are never sent to your browser.
Household sharing — if you invite someone to your household, we store their invite email, membership role and a combined read-only view of shared finances. Personal budgets and rules stay private to each member.
Billing data — if you subscribe, payments are processed by Stripe; we receive plan status and billing metadata (not full card numbers).
Support & contact — name, email and message content when you contact us or file a data request.
Email preferences & delivery — notification toggles you set (e.g. bill reminders, weekly summaries) and delivery logs when we send transactional or product emails through Resend.
Approximate location — country (and sometimes region) inferred from your IP address to suggest a default currency. Stored briefly in browser storage after the first lookup.
Merchant logos — when showing vendor icons, we send merchant domain names (not transaction amounts) to logo.dev.
Basic technical data — limited server logs needed to operate, secure and debug the Service.
Product usage data — how the app is used (pages/features visited, clicks, device, browser, approximate region). See "Analytics" below.

2. How we use it

To provide the dashboard, sync your data across devices and run household views.
To import, categorize and reconcile your financial records.
To connect and refresh linked bank accounts when you use Plaid.
To process subscriptions, send account emails and provide support.
To improve reliability, security and product design (including privacy-masked analytics).

We do not sell or rent your personal or financial information, and we don't use it for third-party advertising.

3. Bank connections (Plaid)

Bank linking is optional and powered by Plaid. When you connect an institution, you authenticate directly with Plaid; we receive read-only transaction and account data you authorize. You can stop syncing by disconnecting in the app or deleting your account. Plaid's use of your data is also governed by Plaid's End User Privacy Policy. We support institutions in Canada and the United States.

4. Household sharing

If you invite another person to your household, they can see shared accounts, transactions, bills and budgets in a combined household view. You choose who to invite. Removing a member revokes their access to your household; they keep their own separate account. Do not invite anyone you do not want to see shared financial information.

5. Analytics

We use PostHog (product analytics, US cloud) to understand how ClearMint Essentials is used — which features are used, page views, clicks, device/browser and approximate region. This is used only to run and improve the product, never sold or used for ads.

We do not record your screen or session. There is no screen/session recording or replay — we only see aggregate event data (e.g. "clicked Import"), never a visual capture of your screen or your financial figures.

Analytics relies on cookies and browser storage — see our Cookie Policy.

6. AI features

The Service includes optional AI-powered features. All AI requests require a signed-in account and are subject to daily usage limits.

Ask ClearMint AI (assistant) — your question, optional conversation history, an optional "remember this" note from your settings, and a structured snapshot of relevant figures from your own data are sent to our AI providers to generate an answer. This is used only to respond in that moment.
Auto-categorization & vendor matching — when the local engine is unsure, we may send merchant names only (no amounts, dates or account numbers) to suggest categories or spot duplicate merchant names. Suggestions stay in your Review Inbox until you confirm them.
Feedback — if you rate an assistant answer (👍/👎), we store the rating and your typed question — never the answer or your financial figures — to improve the assistant.
Operational logs — we log metadata about AI calls (provider, model, token counts, success/failure) for cost control and reliability, not the full prompt or response text.

AI providers we may use include Anthropic (Claude), Cloudflare Workers AI, Groq, Cerebras, Google Gemini and, when configured, OpenAI and OpenRouter (which may route to additional models). These providers process data under their own terms and applicable law.

AI outputs are for convenience only and are not financial, tax, accounting or investment advice. See our Terms of Service.

7. Storage & security

When you sign in, your data is stored in our database (Supabase, with row-level security) and isolated per user (and per household where sharing applies). Traffic is encrypted in transit (HTTPS/TLS). See our Security page for more.

Local browser storage keeps an offline copy so the app works without a network connection. Cloud sync merges changes across your devices.

We share data only with service providers needed to run the Service, and only as required to deliver it:

Hosting & edge — Vercel, Cloudflare
Database & auth — Supabase (including Google OAuth when you choose it)
Payments — Stripe
Email — Resend (transactional, notification and support email)
Bank linking — Plaid
Analytics — PostHog
Merchant logos — logo.dev (domain names only)
AI — Anthropic (Claude), Cloudflare Workers AI, Groq, Cerebras, Google Gemini and, when configured, OpenAI and OpenRouter (which may route to additional models)
Address autocomplete — when you type an address (for example a property you track), the text you type is sent to our configured geocoding provider (Google Places, Mapbox or Radar) to suggest completions. We don't store the lookup beyond your saved entry.
Property estimates — when enabled, a property address may be sent to Repliers to fetch an estimated value.
Market data — quotes, FX rates, yields and headlines come from market-data services (Finnhub, Alpha Vantage, Marketstack, TwelveData, FRED, Bank of Canada). These requests carry tickers, series and currency codes — not your personal or account data.
AI web search — when the assistant needs current information, the search query (never your ledger) may be sent to Brave Search.

These providers process data under their own terms and applicable law. We do not sell your data.

9. Your rights

You can export a backup anytime from Settings → Data & Privacy → Export backup. To clear data on one device only, use Clear data on this device (your cloud copy is preserved). To request a full export or permanent account deletion, use Request full data export or Request account deletion in the same settings panel, or email support@clearmintessentials.com. See Data Deletion for details and timelines.

Depending on where you live, you may have additional rights under privacy laws such as Canada's PIPEDA, Quebec's Law 25, the EU/UK GDPR, or the California Consumer Privacy Act (CCPA/CPRA), including rights to access, correct, delete or port your information and to opt out of certain processing. We do not sell personal information. To exercise your rights, contact us using the details below.

10. Contact

Questions about privacy? Email support@clearmintessentials.com or use our contact form.

This policy may be updated from time to time; material changes will be reflected by the "last updated" date above.

Privacy Policy