Privacy Policy
Last updated November 4, 2026
This policy explains how Buddy Labs handles personal data in Buddy: what we collect, why, who processes it, how long we keep it and your choices. Buddy is in private testing ahead of launch.
What we never do
- We never sell or rent personal data, or share it for marketing or advertising.
- We never use your data to train AI models or to make credit decisions.
- We never collect your bank login, and Buddy can't move money or make payments.
Data we collect
| Category | Source |
|---|---|
| Financial account data: account names and types, balances, transactions, and card details such as due dates, minimum payments and limits | Plaid, from the accounts you choose to share (read-only) |
| Accounts you connect, such as email and calendar | The services you connect, with your permission |
| Device data, such as notifications, approximate location and microphone input | Your phone, only with permissions you grant |
| Content you share, such as documents and photos | You |
| Preferences, goals and information you give us | You |
Waitlist and this website
If you join the waitlist, we keep your email address, your first name and anything you write in the form if you give them, the date, and your country (from our hosting provider). We use them only to email you about early access and launch, and to understand what people want help with. We don't store your IP address. You can unsubscribe or ask us to delete your signup at any time by emailing privacy@buddylabs.io. This website uses no cookies, analytics or trackers.
Consent
You consent before any data is collected: in Plaid Link for each bank, through your phone's permission screens, and when you connect other accounts. You can withdraw consent at any time by disconnecting the account or turning off the permission.
How we use data
Only to provide Buddy's features to you: insights into your own spending, bills and card due dates, reminders, and answers to your questions. We don't use it for any other purpose.
How we protect it
Data is encrypted at rest and in transit, stored on systems that aren't exposed to the public internet, and protected by multi-factor authentication and role-based access. See Security.
Service providers
We use a small number of service providers, each bound by its own privacy and security terms and given only the data its job needs:
- Plaid, to connect your bank accounts. See Plaid's End User Privacy Policy.
- AI service providers, to understand requests and write answers. Personal data goes only to providers whose terms don't allow training on it.
- Cloud hosting and secure networking providers, including the provider that hosts this website and stores waitlist signups.
- Search and pricing providers, which receive general queries only, never your personal or financial data.
None receives data for its own marketing or advertising.
How long we keep data
| Data | Kept for |
|---|---|
| Bank transactions and balances | 24 months |
| Bank connection (Plaid access) | Until you disconnect the bank. Access is then revoked and that bank's data deleted within 30 days. |
| Connected email and calendar data | 30 days or less |
| Device data | 7 days or less; location only the latest |
| Voice audio | Not stored |
| Content, preferences and information you give us | Until you delete it |
| Encrypted backups | 14 days |
| Waitlist signups | Until launch plus 12 months, or until you unsubscribe or ask us to delete them |
Your rights and choices
- Disconnect a bank in Buddy or at my.plaid.com.
- Turn off any phone permission in your device settings.
- Ask us to access, correct, export or delete your data: email privacy@buddylabs.io. We act within 30 days.
Children
Buddy isn't for anyone under 18.
Changes and contact
We review this policy at least every 12 months, and whenever we start collecting a new kind of data. Changes are posted here with a new date. For questions, email privacy@buddylabs.io.