Privacy Policy
Last updated: March 12, 2026
Zowda, Inc. (“Zowda,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials. If you sign in using a third-party provider (such as Google or Apple), we receive basic profile information from that provider.
Financial Data
If you choose to link external financial accounts, our third-party data aggregation provider retrieves account balances, transaction histories, and account metadata (institution name, account type, etc.) on your behalf. Zowda does not receive or store your financial institution login credentials.
User-Created Data
We store data you create within the Service, such as budgets, spending categories, chat messages with the assistant, notes, and preferences.
Payment Information
When you subscribe to a paid plan, payment details (such as credit card number and billing address) are collected and processed by our third-party payment processor. We do not store full payment card numbers on our servers. We may receive limited billing information such as the last four digits of your card, card brand, and expiration date.
Usage Data
We automatically collect information about how you interact with the Service, including pages viewed, features used, timestamps, referring URLs, and actions taken within the application.
Device and Technical Data
We collect device type, operating system and version, browser type, IP address, unique device identifiers, and general location information derived from your IP address.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including syncing financial data, generating budgets, and tracking your goals.
- Process transactions and manage your subscription.
- Send you service-related communications, such as account verification, billing confirmations, technical notices, and security alerts.
- Improve, personalize, and develop new features based on aggregated usage patterns.
- Detect, prevent, and address fraud, abuse, and technical issues.
- Comply with legal obligations and enforce our Terms of Service.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: We share data with third-party vendors who perform services on our behalf, such as payment processing, data aggregation, cloud hosting, and analytics. These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures.
- Financial Data Providers: When you link a financial account, your authorization is shared with our data aggregation partner to retrieve your financial data. Their use of your data is governed by their own privacy policy.
- Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
4. Data Security
We implement industry-standard security measures to protect your information, including encryption of data in transit (TLS) and at rest, access controls, and regular security reviews. Our infrastructure is hosted on Google Cloud Platform, which maintains SOC 2, ISO 27001, and other compliance certifications. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our agreements). Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely.
6. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete personal information.
- Delete your personal information, subject to certain exceptions.
- Export your data in a portable format.
- Opt out of certain data processing activities.
To exercise any of these rights, please contact us at privacy@zowda.com . We will respond to your request within 30 days, or as otherwise required by applicable law. We will not discriminate against you for exercising your privacy rights.
7. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale or sharing of personal information. As stated above, we do not sell your personal information. To exercise your rights, contact us at privacy@zowda.com .
8. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Service. The types of cookies we use include:
- Essential cookies: Required for the Service to function, such as authentication and session management.
- Analytics cookies: Help us understand usage patterns so we can improve the Service.
You can control cookies through your browser settings. Disabling essential cookies may prevent certain features from functioning properly.
9. Third-Party Services
The Service may contain links to or integrate with third-party websites, applications, or services. This Privacy Policy applies only to the Zowda Service. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you interact with through Zowda.
10. Children’s Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@zowda.com , and we will take steps to delete such information.
11. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries as described in this policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the “Last updated” date above. We may also notify you via email or through an in-app notice. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@zowda.com . You may also reach us through our Terms of Service contact information.