Privacy Policy

Introduction

Infera ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

Information We Collect

We collect information in the following ways:

Account Information

• Email address
• Name
• Password (stored only as a bcrypt hash — never in plain text)

Financial Information (via Plaid)

When you connect your bank accounts through Plaid, we receive:

• Account names and types
• Account balances
• Transaction history (merchant names, amounts, dates, categories)

We do not have access to your bank login credentials. Plaid securely handles the connection to your financial institutions.

How We Use Your Information

We use your information to:

• Display your account balances and transactions
• Categorize your spending automatically
• Track your budgets and alert you when approaching limits
• Provide AI-powered insights about your spending habits
• Improve our services and user experience

AI-Powered Features

Infera uses Claude, an AI assistant by Anthropic, to categorize your transactions and answer questions about your finances. When you use AI features:

• Relevant financial details — such as transaction merchant names, amounts, and categories, or summaries of your spending — are sent to Anthropic's API to generate a response
• We do not send your name, email address, account numbers, or bank login credentials to Anthropic
• Under our commercial agreement with Anthropic, your data is not used to train Anthropic's models
• AI insights are generated solely from your own financial data

Data Security

We implement industry-standard security measures:

• All data is encrypted in transit using HTTPS/TLS
• Passwords are stored only as bcrypt hashes, never in plain text
• Sensitive credentials — the access tokens used to connect your bank and your two-factor authentication secret — are encrypted at rest
• You can enable optional two-factor authentication (via an authenticator app) and a biometric app lock (Face ID / Touch ID) to protect access to your account
• On your device, authentication tokens are stored in the secure system keychain, tied to that device and excluded from backups
• Accounts are temporarily locked after repeated failed sign-in attempts to deter brute-force attacks
• Bank connections are secured through Plaid; we never see or store your bank login credentials

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only with:

• Plaid — To connect and sync your bank accounts
• Anthropic — To provide AI-powered insights
• Service Providers — Who help us operate our services (hosting, etc.)

We do not use third-party advertising networks, and we do not embed analytics or tracking SDKs that share your data with outside parties.

Data Retention

We retain your data for as long as your account is active. You can permanently delete your data at any time from within the app:

• Delete All Banks & Data (Settings) erases your connected banks, accounts, and transaction history while keeping your login active
• Delete Account Permanently (Settings) erases your account and all associated data

Permanent deletion takes effect immediately and cannot be undone. After you delete a bank connection, we also revoke our access token with Plaid.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Disconnect linked bank accounts

Children's Privacy

Infera is intended only for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.