Privacy Policy

Last updated: July 27, 2026

CENTRIS Finance ("CENTRIS," "we," "our," or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

We collect the following categories of information:

• Account information: Your name, email address, and password credentials when you create an account.
• Financial data you enter: Expenses, invoices, mileage trips, subscriptions, revenue, bills, and budgets that you manually add or import into CENTRIS.
• Bank account data (optional): If you link a savings account via Stripe Financial Connections in the Tax Vault feature, we receive read-only access to your account balance. We cannot move or transfer funds. Your banking credentials are never shared with or stored by CENTRIS.
• Payment information: On iOS, subscriptions are purchased through Apple In-App Purchases — Apple processes all payments and CENTRIS never receives your card details. On the web, payments are processed by Stripe.
• Usage data: Information about features accessed and actions taken, used to improve the product. Usage counters (receipt scans, invoices, AI messages) are tracked per day and reset at midnight.
• Device information: Device type, operating system version, and app version for diagnostic and support purposes.

2. How We Use Your Information

• To provide and improve the CENTRIS service
• To generate financial insights, forecasts, and reports based on your data
• To process subscription payments and manage your account
• To send important account and service notifications
• To respond to support requests
• To enforce daily usage limits and subscription tier access
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your financial data for advertising.

3. AI Features — Anthropic Claude

Several features in CENTRIS are powered by Anthropic Claude, a third-party AI service. These features include:

• Quantra AI — your AI financial assistant
• Business Idea Engine — AI-generated business ideas based on market trends
• Side Hustle Finder — AI-generated income recommendations based on your skills
• Marketing Hub — AI-generated marketing content (paid plans)

Before any AI feature activates, CENTRIS displays a consent screen explaining exactly what data is sent. You must explicitly tap "I understand, continue" before proceeding. You may decline at any time.

When AI features are used, a summary of relevant data (totals, categories, and goals — never raw transactions or personal identifiers beyond what you have entered) is sent to Anthropic's API. This data is not used by Anthropic to train their models. Anthropic's privacy policy governs how they handle API data.

4. Bank Account Linking via Stripe Financial Connections

The CENTRIS Tax Vault feature offers optional bank account linking through Stripe Financial Connections. When you link a savings account, you authenticate directly with your bank through Stripe's secure interface. CENTRIS receives read-only access to your account balance to display your savings progress toward your estimated tax liability. We do not initiate transfers, move funds, or store your banking credentials.

By linking a bank account, you agree to Stripe's End User Privacy Policy. Balance data is only displayed back to you and is not shared with any third party.

5. Payment Processing

iOS: All subscriptions on iOS are purchased through Apple's In-App Purchase system. Apple processes all payments. CENTRIS verifies your purchase server-side using Apple's receipt validation API. CENTRIS never receives or stores your payment card information.

Web: Web payments are processed by Stripe. CENTRIS does not store full payment card details.

6. Data Sharing

We share your information only with the following third parties, and only as necessary to operate the service:

• Firebase (Google) — authentication, database storage, and cloud infrastructure
• Anthropic — to power AI features (Quantra, Business Ideas, Side Hustle Finder, Marketing Hub). Data is sent only after explicit user consent. Not used for model training.
• Apple — to process iOS in-app purchases and validate receipts
• Stripe — to process web subscription payments and, if you choose to link a savings account, to provide read-only bank balance data via Stripe Financial Connections

We do not share your data with advertisers, data brokers, or any other third parties.

7. Data Retention

We retain your account data for as long as your account is active. Daily usage counters are stored per day and are not retained beyond 90 days. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Decline AI features at any time — no AI data is sent without your explicit consent
• Disconnect your bank accounts at any time from within the web app
• Manage or cancel your iOS subscription through your Apple ID settings

To exercise any of these rights, contact us at privacy@centrisfinance.com.

9. Security

We use industry-standard security measures including encryption in transit (TLS), Firebase Security Rules to enforce data access controls, and Firebase Authentication for identity management. iOS purchases are verified server-side using Apple's encrypted receipt validation. Bank balance data accessed via Stripe Financial Connections is transmitted securely and not stored beyond what is needed to display your savings progress.

10. Children's Privacy

CENTRIS is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

If you have questions about this privacy policy or your data, contact us at:
privacy@centrisfinance.com

GLBA Privacy Notice

Effective Date: July 27, 2026

This notice is provided in accordance with the Gramm-Leach-Bliley Act (GLBA) and applies to the nonpublic personal financial information ("NPI") we collect from individuals who use CENTRIS Finance.

What Financial Information We Collect

We collect the following nonpublic personal financial information:

• Bank account balances (read-only, via Stripe Financial Connections — only if you choose to link an account)
• Account identifiers provided by Stripe to reference your linked account (no full account numbers stored)
• Financial data you manually enter: income, expenses, invoices, mileage, subscriptions, and budgets

How We Use This Information

We use your financial information solely to provide and improve the CENTRIS service — specifically to display your savings progress toward estimated tax liability, generate financial reports, and power AI-driven financial insights. We do not use your financial information for marketing or advertising purposes.

How We Share This Information

We do not sell, rent, or share your nonpublic personal financial information with unaffiliated third parties for their own marketing purposes. We share NPI only as necessary to deliver the service:

• Stripe — to facilitate bank account linking via Stripe Financial Connections and process payments. Stripe's handling of data is governed by Stripe's Privacy Policy.
• Firebase (Google) — to store your data securely in the United States on Google Cloud infrastructure.

All financial data collected through Stripe Financial Connections is stored only in the United States and is not shared with any other third party.

How We Protect This Information

We maintain physical, electronic, and procedural safeguards that comply with applicable law to protect your NPI, including:

• TLS encryption for all data in transit
• Firebase Security Rules restricting data access to authenticated account owners only
• Read-only bank access — CENTRIS cannot move or transfer funds
• No storage of full bank account numbers or login credentials

Your Rights Under GLBA

You have the right to:

• Opt out of any sharing of your NPI with unaffiliated third parties (note: we do not engage in such sharing)
• Request access to or deletion of your financial data by contacting us at privacy@centrisfinance.com
• Disconnect your linked bank account at any time from within the CENTRIS app

To exercise any of these rights or ask questions about this notice, contact us at privacy@centrisfinance.com.