Privacy Policy

Last updated September 16, 2026

This notice describes what Not Your Daddy's Common Cents collects, why, and what you can do about it.

Not Your Daddy's Common Cents is operated by Eden Financial LLC ("we", "us"), based in Maricopa County, Arizona. Questions about this notice or your data go to notyourdaddyscommoncents@gmail.com.

Summary of key points

What we collect. Your name and email, the bank transactions you upload, and the things you make here — categories, budgets, goals, lesson answers. More about what we collect.

We never see your bank password. Uploading a file you downloaded yourself is the default and needs no bank login at all. If you choose to connect a bank, that runs through Plaid: you sign in to your bank inside Plaid's window, and we receive your transactions and balances, never your login. More about Plaid.

We never see your card number. Payments are handled entirely by Stripe, on Stripe's own pages.

We do not sell your information, and we do not share it with advertisers or data brokers. There are no ad networks here, no analytics service, and no tracking script sent to your browser. More about who touches your data.

We do not buy information about you. Everything we hold came from you, or from Google if you chose to sign in that way.

You can take it all with you, or delete it. Export everything as a spreadsheet whenever you like, and close your account at any time. More about your rights.

What information do we collect?
What we don't collect
How do we use your information?
Who else touches your data?
How do we handle signing in with Google?
Cookies and tracking
How long do we keep it?
How do we keep it safe?
Do we collect information from minors?
What are your privacy rights?
Do US residents have specific rights?
Do we update this notice?
How can you contact us?

1. What information do we collect?

In short: what you give us, what you make here, and counts of how the public pages are used.

Account information. Your first and last name, your email address, and a password. Passwords are stored only as a one-way hash — we cannot read your password, and neither can anyone who obtains the database. If you sign in with Google, there is no password at all.

Financial information you give us. The transactions you upload: dates, descriptions, amounts, account labels, and any transaction identifiers your bank includes. If you use the net worth tracker, the account labels and balances you type in.

Things you create. Your categories, budget amounts, categorization rules, goals, and lesson progress.

Answers you give inside a lesson. A few lessons ask what you want money to do for you. You can pick from a list, write your own words, or skip it entirely. Where a lesson saves an answer, we store it so we can show it back to you — on your dashboard and on your goals page — and nothing else. It is never used to rank, filter, or recommend anything, it is never shown to anyone but you, and you can change or clear it at any time by returning to the lesson and unticking your answers. Most questions in a lesson are not saved at all.

Anything you choose to tell us about yourself. Your age, the age you'd like to stop working, and the monthly spending you're aiming for. All three are optional, exist only so the calculator doesn't make you retype them, and can be cleared at any time by emptying the fields on your Account page.

Usage information. The date you last used the site, how many files you've imported, how long imports took, and whether they succeeded. We use this to keep the service running and to understand our costs — not to build a profile of you.

A count of visits to our public pages. We keep a running tally of how many times each public page was opened, how many separate browsing sessions that came from, and which kind of site sent them — a category like "Instagram" or "search", never the address they came from. It is a total, not a record: there is no entry for you, no IP address, no device information, and nothing that could be traced back to a person.

2. What we don't collect

In short: quite a lot, deliberately.

We never collect your bank login. Uploading your own files needs none. If you choose to connect a bank through Plaid, your username and password go to Plaid, not to us.
We never see your card number. Payments are handled entirely by Stripe on their own pages. We store only Stripe's customer and subscription identifiers.
We don't collect Social Security numbers, government IDs, or account numbers beyond whatever appears in the transaction files you choose to upload.
We don't collect your location, precise or otherwise.
We don't collect your phone number and we don't send text messages.
We don't buy information about you from data brokers, marketing partners, public databases, or anyone else.
We don't build a profile of you or draw inferences about you for advertising.

3. How do we use your information?

In short: to run the service you asked for, and to keep it working.

To create your account and sign you in.
To show you your own money — sorting transactions, building budgets, tracking goals, and running the lessons.
To send you service messages you need: confirming your email, resetting your password, and telling you about billing.
To take payment, if you subscribe.
To send the weekly newsletter, if you asked for it.
To keep the service running and understand what it costs us.
To comply with the law, and to respond to fraud or abuse.

We do not use your information for advertising, and we do not use it to make automated decisions about you.

In short: a few companies, each doing one job, and none of them for their own purposes.

Render — hosting and database.
Plaid — only if you choose to connect a bank. Plaid connects to your bank, and sends us your transactions, balances and account names, plus a key that lets us ask for updates. Plaid handles your information under its own End User Privacy Policy. Disconnecting a bank deletes that key. If you only upload files, Plaid is not involved at all.
Stripe — payment processing. Stripe receives your email and billing details directly; we never handle card data.
Google — only if you choose to sign in with Google. Google tells us your name, your email address, and whether Google has confirmed that address, and nothing else. We ask for no access to your Gmail, contacts, calendar, or files. If you sign in with an email and password instead, Google is not involved at all.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

We may disclose information if legally required to — for example, a valid subpoena — or to protect against fraud or abuse. If the business is ever sold or merged, your information may transfer with it, and this notice goes with it.

5. How do we handle signing in with Google?

In short: we ask Google for your name and email, and nothing else.

If you choose "Continue with Google", Google asks your permission and then tells us three things: your name, your email address, and whether Google has confirmed that the address is yours. We use them to make or open your account.

We do not ask for, and cannot see, your Gmail, your contacts, your calendar, your files, or anything else in your Google account. Google's own use of your information is governed by Google's privacy policy, not this one.

Signing in with Google is optional. An email and password works exactly the same, and you can add a password to a Google account at any time from your Account page.

6. Cookies and tracking

In short: one cookie, for keeping you signed in. No trackers, no analytics service, no ads.

We set a cookie so that the site remembers you are signed in between pages. Without it you would have to log in on every screen. It carries no advertising identifier and is not shared with anyone.

We run no analytics service and send no tracking script to your browser. No Google Analytics, no advertising pixels, no beacons, no social media trackers. The visit counts described above are tallies kept on our own server, and they contain nothing about individual visitors.

Because we do not track you across other websites, there is nothing for a Do Not Track signal to switch off.

7. How long do we keep it?

In short: your files for a day, your transactions for as long as your plan covers, and everything until you close your account.

The original files you upload are deleted within 24 hours of being processed. We keep the parsed transaction records, not your bank's export.

Detailed transactions are kept for a rolling window based on your plan — 3 months on the free plan, longer on Plus. Older transactions are summarized into monthly totals, and the detailed rows are removed.

If you cancel, nothing shrinks immediately. You keep full access through the period you paid for, then a further 30 days during which we tell you what will change and let you export everything. After that, detailed history is reduced to the free plan's window.

If you delete your account, we stop billing immediately and keep your data recoverable for 30 days in case it was a mistake. After that we delete your personal financial data, along with anything you told a lesson about yourself. We retain only what we're legally required to keep for billing, tax, fraud, and dispute purposes.

8. How do we keep it safe?

In short: encrypted in transit, passwords hashed, access limited — and we won't promise more than that.

Traffic is encrypted in transit. Passwords are hashed. Access to production data is limited to those who need it to operate the service.

We'd rather be honest than reassuring: no service can promise perfect security. If a breach ever affects your information, we will tell you.

9. Do we collect information from minors?

In short: no, and not knowingly.

This service isn't intended for anyone under 13, and we don't knowingly collect their information. If you believe a child has given us information, write to notyourdaddyscommoncents@gmail.com and we will delete it.

10. What are your privacy rights?

In short: see it, correct it, take it, delete it, and stop the newsletter.

Export. Download everything as a spreadsheet whenever you like, from the Transactions page. You don't have to be leaving to do it.
Correct. Edit or recategorize any transaction, and edit your name and details on your Account page.
Delete. Close your account from the app, or ask us at notyourdaddyscommoncents@gmail.com. We keep it recoverable for 30 days in case you change your mind, then it's gone.
Unsubscribe. The weekly newsletter is optional, and you can opt out at any time.

11. Do US residents have specific rights?

In short: several states give you rights over your information. We honor them for everyone, wherever you live.

A number of US states — California and Colorado among them — give residents rights to know what a company holds about them, to get a copy, to correct it, to delete it, and not to be treated differently for asking.

Rather than work out which law covers you, we extend all of those rights to everyone. Use the tools above, or write to us and we'll handle it. We'll respond as quickly as we can, and we may need to confirm it's really you before acting on a request about an account.

Two of those rights are worth saying plainly, because they're the ones people ask about most: we have not sold or shared your personal information for advertising, and we have no plans to. There is nothing here to opt out of.

12. Do we update this notice?

In short: yes, and we date it when we do.

If we change this policy in a way that meaningfully affects you, we'll say so on this page and update the date at the top. Continuing to use the service after a change means you accept it.

13. How can you contact us?

In short: one address, and a real person reads it.

Email notyourdaddyscommoncents@gmail.com, or write to Eden Financial LLC, Maricopa County, Arizona.

To review, update, or delete what we hold about you, use the Account and Transactions pages inside the app, or ask us and we'll do it.