Privacy Policy

The short version

We do not sell your data, and we do not share your personal data with any third party for their own purposes — ever — without your explicit consent. Full stop. The sections below explain exactly what we collect, why, and the limited set of service providers involved in running HeavyPocket.ai on your behalf.

What we collect

• Account info: your email address and password (handled entirely by our authentication provider — we never see or store your password), and the optional profile fields you choose to fill in (birthday, city, state, country, phone), plus the time you were last active in the app (updated at most every ten minutes, and visible only to you and the site’s administrator).
• Financial data you enter: account names, asset and liability details, balances, cost basis, and notes — all manually entered by you. We explicitly ask you not to enter sensitive identifiers (bank/brokerage account numbers, routing numbers, Social Security numbers, or card numbers) anywhere in the app, including free-text fields.
• AI provider key (optional): if you enable AI features, the API key you supply is encrypted at rest and used only to make requests to your chosen provider on your behalf — never read, logged, or used for anything else.
• MCP activity log (optional, paid plan): if you connect an AI tool through MCP, we keep a record of each account, asset, or liability it creates or edits — the name of the token used, the time, and the before-and-after values. It is visible only to you, in Settings → MCP, and is deleted with your account.
• Billing info: if you upgrade to the paid plan, payment details are collected and processed directly by our payment processor — we never see or store your card number.

The service providers we use

Running the app requires a small number of infrastructure providers to process data strictly to deliver the service you asked for — this is not the same as “sharing your data with third parties,” which we never do without your consent:

• Database & authentication hosting — stores your account and app data securely, restricted so only you can read your own records.
• Payment processing — handles your card details directly for the paid plan; we never touch or store raw card numbers.
• Market price data — supplies daily price/dividend lookups for the symbols you track. Only the symbol and quantity needed to price your holdings is sent — never your name, balances, or account details.
• Transactional email — sends account emails you trigger yourself (email confirmation, password reset, payment receipts) — no marketing email, no mailing list.
• Your own AI provider — only if you choose to configure one; the data sent is whatever you ask the AI feature to summarize, sent directly under your own API key, never routed through or logged by us.

None of these providers may use your data for their own purposes, advertising, or resale — they process it solely to perform the specific function above.

What we never do

• We never sell your data.
• We never share your data with advertisers or data brokers.
• We never link your financial data to your identity for any external party.
• We never use your data for anything beyond operating the features you’re actively using.

Cookies

We use one functional cookie to keep you signed in. No advertising or third-party tracking cookies.

Your right to delete your data

You can permanently delete your account and every piece of data associated with it — accounts, assets, liabilities, history, AI settings, everything — at any time from Settings → Profile. Deletion is immediate and cannot be undone.

Contact

Questions about this Privacy Policy or how your data is handled can be sent to legal@magnamente.com.