Effective / Last updated: September 3, 2026
This Privacy Policy explains how Pandi Finance LLC, a Washington limited liability company (“Pandi Finance LLC,” “we,” “us,” or “our”), collects, uses, and protects your personal information when you use Almie (the “Service”), our iOS personal-finance tracking app. Almie is offered only to residents of the United States who are 18 or older. By using the Service, you agree to the practices described in this policy and in our Terms of Service.
Almie is operated by Pandi Finance LLC, a limited liability company organized under the laws of the State of Washington. Throughout this policy, “Almie” and “the Service” refer to the Almie iOS application and its supporting backend; “we,” “us,” and “our” refer to Pandi Finance LLC; and “you” and “your” refer to you as a user of the Service.
This policy applies to personal information we collect through the Almie app and our website at almie.money. The current version of this policy is always available at https://almie.money/privacy-policy. If you have questions, you can reach us at support@almie.money.
Here is the short version. The rest of this policy expands on these points, but if you read nothing else, read this:
Almie is a personal-finance tracker. It connects to your financial accounts on a read-only basis (through Plaid) to display and categorize your balances, transactions, liabilities (such as credit-card and loan terms), and investment holdings, and to compute in-app budgeting views such as Safe-to-Spend, Reserves, and Goals.
Almie is not a bank, broker-dealer, lender, money transmitter, custodian, payment processor, or financial, investment, tax, or legal advisor. Almie cannot move, transfer, withdraw, or hold your funds. Features such as Reserves and Goals are internal budgeting calculations that help you plan — they are not real money transfers and they do not move money between your accounts.
We collect only the information needed to operate the Service. The categories below are the complete list of personal information the Almie app collects:
In addition, our hosting provider keeps standard operational server logs (which can include your IP address) for security, reliability, and abuse-prevention purposes.
To be clear about what Almie does not gather, we do not collect: precise or coarse location; health or fitness data; your contacts; your photos or videos; browsing or search history; biometric identifiers (Face ID or Touch ID stays on your device and is handled by iOS — it is never sent to us); advertising identifiers or the IDFA; credit scores or credit reports; or any payment instrument (Apple handles all billing, so we never see your card or bank-payment details).
We obtain the information above from the following sources:
We use your personal information only for the following purposes:
We do not use your information for advertising, and we do not use your financial data to train artificial intelligence or large language models.
Almie uses Plaid Inc. as its sole data-connectivity provider. When you connect a financial institution, you enter your bank login credentials directly into Plaid’s secure interface. Almie never receives, sees, or stores your bank username, password, or other login credentials.
All of the Plaid products Almie uses are read-only: Transactions, Liabilities, and Investments (including account balances), and only for institutions in the United States. This access lets Almie display and categorize your financial information, but it does not allow Almie — or Plaid on our behalf — to move, transfer, or withdraw money.
Plaid’s handling of your information is governed by Plaid’s own privacy terms. Please review Plaid’s End User Privacy Policy to understand how Plaid collects and uses data.
You can disconnect any linked institution at any time from within the app, which revokes Almie’s continued access to that institution’s data. Deleting your account removes your connected accounts from Plaid as described in Section 12.
We share personal information with a small, fixed set of service providers who process it on our behalf, only to the extent necessary to run the Service, and each of whom is contractually bound to protect it:
| Provider | Role | Information Processed |
|---|---|---|
| Plaid | Financial-data connectivity | Your bank login credentials (entered directly into Plaid; never seen by us), and the read-only financial data Plaid returns to us (balances, transactions, liabilities, holdings, account and institution names) |
| Supabase | Cloud hosting, database, and authentication (hosted on AWS in the United States) | Your account data, financial data, notes and tags, push token, and subscription status |
| Apple | In-App Purchase billing, Sign in with Apple, and Apple Push Notification service | Subscription / purchase status; your name and optional email (if you use Sign in with Apple); push-notification delivery |
| Twilio | SMS delivery for one-time authentication codes | Your phone number and the one-time code, for delivery only |
| SendGrid | Email delivery for our website beta list (TestFlight-invite / early-access / update emails) | The email address you submit to the beta list |
| Vercel | Website hosting for almie.money | Standard server request logs, including the IP addresses of website visitors, kept for security and reliability |
This is the complete list of our sub-processors. We do not use any ad networks, analytics SDKs, or data brokers.
We may disclose your information if we believe in good faith that doing so is necessary to comply with a subpoena, court order, or other legal process; to respond to a lawful request from law enforcement or a government authority; to enforce our Terms of Service; or to protect the rights, property, or safety of Pandi Finance LLC, our users, or the public.
If Pandi Finance LLC is involved in a merger, acquisition, financing, reorganization, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will require the recipient to honor this policy, and we will provide notice before your personal information becomes subject to a materially different privacy policy.
We do not sell your personal information, and we have never sold it. We also do not “share” your personal information for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws.
As of the effective date of this policy, Almie contains no advertising SDKs and no third-party analytics SDKs. We do not work with ad networks or data brokers, we do not build advertising profiles, and we do not use your financial data for advertising of any kind. Because we do not sell or share personal information for advertising, there is nothing for you to opt out of — but we affirm this position for every user regardless of where you live.
The service providers and technical providers we rely on — such as Plaid, Supabase, Apple, Twilio, SendGrid, our website host Vercel, and Google Fonts, which serves fonts on our website — process information only to operate the Service and our website. They are not advertising networks or data brokers, and none of this constitutes selling or sharing your personal information for advertising.
We recognize that your financial information is sensitive. We treat the financial data we receive as sensitive personal information under the California Privacy Rights Act (CPRA) and as nonpublic personal information under the federal Gramm-Leach-Bliley Act (GLBA).
We use this information solely to provide the Service’s core functionality — displaying, categorizing, and computing budgeting views from your data. As of the effective date of this policy, we do not use sensitive or financial information to infer characteristics about you for advertising, and we do not use it to train artificial intelligence or large language models.
The Almie iOS app does not use cookies or third-party trackers.
Our website at almie.money sets no cookies and uses no analytics or advertising trackers. If you join our beta / early-access list, the email address you submit is processed by SendGrid to send you your TestFlight invitation and early-access and product-update emails, and every such email includes a one-click unsubscribe link (you can also email support@almie.money to be removed). The site loads fonts from Google Fonts, so Google receives your IP address in order to serve those fonts (this is governed by Google’s privacy policy). The site is hosted by Vercel, which keeps standard server logs, including IP addresses, for security and reliability.
We retain your personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or de-identify your information, except for anything we are legally required to retain.
Our retention criteria are as follows:
You can delete your account at any time using the in-app Delete Account feature, which remains reachable even if you are not a paying subscriber. When you delete your account, we delete your data from our active systems promptly, including:
/item/remove so that Plaid stops accessing them;The only exception is data we are legally required to retain. You can also disconnect an individual financial institution at any time without deleting your whole account.
Our hosting provider maintains routine encrypted infrastructure backups for reliability and disaster recovery. Residual copies of deleted data in these backups are overwritten on a rolling basis within approximately 7 days, consistent with the hosting platform’s policy.
We maintain a written information-security program designed to protect your information, consistent with the requirements of the GLBA Safeguards Rule. Our safeguards include encryption of data in transit and at rest, access controls that limit who can reach your data, and the practice of never storing your bank login credentials (those are handled by Plaid).
No method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security. We are, however, committed to protecting your information and to responding promptly to any incident or vulnerability we become aware of.
We offer the following privacy rights to all Almie users, uniformly, regardless of the U.S. state you live in:
Because we do not sell or share personal information for advertising and we do not use it for targeted advertising or profiling, opt-out rights for those activities do not apply to Almie — but we honor the underlying no-sale, no-share position for everyone.
You can exercise most rights directly in the app — for example, using the in-app Delete Account feature — or by emailing us at support@almie.money.
To protect your information, we verify requests through the authenticated account associated with your data. We may ask you to sign in or to confirm information tied to your account before we act on a request. If you use an authorized agent to submit a request on your behalf, we may require proof of the agent’s authority and verification of your identity. We will respond to verifiable requests within the timeframes required by applicable law.
If we decline to act on your privacy request, you may appeal our decision by replying to our response or by emailing support@almie.money with the subject line “Privacy Appeal.” We will review the appeal and inform you of our decision, along with our reasons, within the period required by applicable law. If your state provides a mechanism to contact its Attorney General with concerns about the outcome, we will tell you how to do so.
Depending on your state of residence — for example, California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, and Texas — you may have specific rights over your personal information, including the rights to access/know, correct, delete, obtain a portable copy, and (where applicable) appeal, as described in Sections 14 through 16. We extend these rights to all U.S. users.
The table below lists the categories of personal information we collect, mapped to the statutory categories under California law, along with confirmation that we do not sell any category and do not share any category for cross-context behavioral advertising.
| Category | Examples Almie Collects | Collected? | Sold? | Shared for Cross-Context Behavioral Advertising? |
|---|---|---|---|---|
| Identifiers | Name; email (via Sign in with Apple, possibly a private-relay address); phone number; account user ID; device push-notification token; IP address (in server logs) | Yes | None | None |
| Commercial information | Subscription / purchase status; transaction notes, tags, and custom category, goal, and reserve names you create | Yes | None | None |
| Financial information (also treated as sensitive personal information and as GLBA nonpublic personal information) | Plaid-sourced balances, transactions, liabilities (card and loan terms), investment holdings, and account and institution names | Yes | None | None |
| Sensitive personal information (CPRA) | Your financial account information, as described above | Yes | None | None |
| Categories we do not collect | Precise geolocation; biometric information; health or fitness data; racial, ethnic, religious, or union information; contacts; photos or videos; browsing or search history; advertising identifiers / IDFA; credit scores or reports; payment card numbers | No | None | None |
Across every category, the answer to “Sold?” and “Shared for cross-context behavioral advertising?” is None. California residents also have the right to know the sources of the information we collect (Section 5), the purposes for which we use it (Section 6), and the third parties with whom we share it (Section 8).
Almie is intended only for adults 18 years of age or older. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a child, we will delete it. If you believe a child has provided us with personal information, please contact us at support@almie.money.
Almie provides per-type controls in the app so you can choose which notifications you receive. Some communications are transactional or security-related — for example, one-time SMS authentication codes and essential account notices — and are part of providing the Service. You can manage push notifications through the app’s settings and through your device’s system settings.
We do not send marketing or promotional emails. The messages we send are transactional and service-related — such as one-time SMS login codes and essential account or security notices. You can manage in-app and push notifications at any time in the app’s notification settings.
If you sign in using your phone number, Almie sends you a one-time passcode by SMS text message, delivered through our processor Twilio. By entering your mobile number on the sign-in screen and requesting a code, you consent to receive these authentication text messages. This is an account-security program only: we send SMS solely to deliver login verification codes. We do not send marketing, promotional, or recurring text messages.
Message frequency. You receive an SMS only when you request a login code — typically one message per sign-in attempt. We do not send scheduled or recurring texts.
Message and data rates may apply, depending on your mobile carrier and plan. Almie does not charge you for these messages, but your carrier’s standard message and data rates may apply.
We do not share your mobile phone number or your SMS consent with any third parties or affiliates for their own marketing or promotional purposes. Your number is disclosed only to Twilio, our SMS delivery processor, solely to deliver the one-time codes you request, as described in Section 8.
Opt-out and help. You can stop receiving authentication texts at any time by replying STOP to any message; after you reply STOP we will no longer send codes to that number, which may prevent SMS-based sign-in. Reply HELP for help, or contact us at support@almie.money.
Almie is offered only in the United States and is intended solely for U.S. residents. Your information is processed and stored in the United States (our hosting provider, Supabase, runs on AWS in the U.S.). The Service is not offered in, or directed to, the European Union, the European Economic Area, or the United Kingdom, and the GDPR does not apply to it.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you through the app or by other appropriate means before the changes take effect. The “Effective / Last updated” date at the top of this policy shows when it was last revised. Your continued use of the Service after an update means you accept the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
This policy is governed by and interpreted under the laws of the State of Washington.