Privacy Policy - Adelante

This policy explains what Adelante collects, why, and the choices you have. The short version: Adelante keeps the budget you enter so it can show your forecast on all your devices. We don't sell your information, usage statistics stay on our own servers and, where the law asks, are only collected if you say yes, and ads are never personalized. We never see your bank password. Bank connections are optional; see "Bank connections" below.

Using Adelante without an account

In the iPhone, iPad and Android apps you can use Adelante without creating an account. Then your budget stays on your device and never reaches us: we can't see it, sync it or get it back if the device is lost or the app is removed (your phone's own backup, with Apple or Google, may include it; we can't see that either). The rest of this policy applies in the same way where it can: usage statistics under the same rules as for accounts (see "Your choices"; they're linked to a random ID made on your device, since there is no account), error reports, and, after the first days, ads (see "Ads"). If you later create an account or sign in, you choose whether the budget on the device is saved to that account, and the usage statistics from before are joined to it.

What we collect

Your account: your email address, the name you give (optional) and your password. The password is stored only in a scrambled form (a hash) that can't be turned back into it.
If you sign in with Google or Apple: they give us your email address, your name (Google each time; Apple only the first time, and only if you share it) and the ID they use for you with Adelante, which is how we recognize you the next time. With Apple you can hide your email: Apple then gives us a private relay address that forwards our emails to you. For Apple we also keep a token Apple issues for the link, so the link can be revoked when you delete your account. We don't receive your Google or Apple password or anything else from those accounts. Google or Apple learns that you signed in to Adelante, and handles that under its own privacy policy (Google, Apple).
If you buy Plus or Pro: you buy them in the phone apps, through Apple's App Store or Google Play, which take the payment; we never see your card or bank details. On the web, Stripe takes the payment instead, and tells us the same things; it receives your email address and name for the subscription. They tell us which plan you have, when it renews or ends, whether it's a free trial, and a reference for the purchase, so Adelante knows your plan on all your devices. Purchases go through RevenueCat, which checks them with Apple and Google for us; it receives your account's random ID, your IP address, your device and operating system model and the store's purchase receipt, not your email or name. RevenueCat handles that under its own privacy policy.
Your budget: what you type into Adelante: account names and balances, recurring items, transactions, notes, and your settings. We keep earlier saved versions for a while (the most recent ones, then one a day, for up to 30 days and at most 50 in all) so a mistake or a sync problem can be undone.
Receipt photos (Pro, optional): if you add a photo of a receipt to an entry, up to 3 per entry, the photo is stored on our servers with that entry. Adelante uses your camera or photo library only at the moment you add a photo, and only the photos you pick. Photos are included when you download your data, are deleted with your account, and are never used for ads or shared with anyone else. A photo that no saved entry uses any more (because you removed it or deleted the entry) is deleted within 7 days.
Connect your AI (Plus and Pro, optional): if you connect an AI assistant, we store the access key or sign-in grant that lets it in, the name you gave it, whether it may make changes, and when it was created and last used. We also record that an AI app connected and that it changed your budget, and which kind of change, not what it contained. See "Connect your AI" below.
Usage statistics (where the law asks, only if you say yes: see "Your choices"): which screens and features you use (for example "opened Insights" or "added a recurring item"), things that happen to your account (for example "signed in" or "plan started"), when, the kind of device, the app's language and your plan, and how often ads are seen and tapped. They're linked to a random ID, not your email or name, and never include amounts, names, notes or anything you type. They're kept on our own servers; no analytics company receives them.
Your privacy choices: what you chose and when, so we can show we respected it.
Technical information: your IP address, used to limit repeated sign-in attempts and kept for about a day; the kind of device and browser you sign in from, kept with each sign-in so you can tell your sessions apart; and server logs of requests (which page or action, whether it worked, how long it took, which account and which version of the app) used to keep Adelante working and secure.
Error reports: if something breaks inside the app, or the app closed unexpectedly the last time it ran, it sends us the error message and where in our code it happened (a stack trace), which screen you were on, the last few things the app did before it broke (up to 20 screens opened and kinds of action, such as "added an entry"), the kind of device, the Android or iOS version, the screen layout, whether you were online, the app's language and version, and your account's ID (not your email). Never amounts, names, notes or anything you typed. They go only to our own servers (no crash-reporting company receives them), and we use them only to find and fix bugs.

Adelante doesn't ask for or store your bank passwords, card numbers or government IDs.

Bank connections (Plus and Pro)

You can connect a US bank or card account so your real transactions appear in your forecast. It's optional and always your choice.

Who connects: Plaid, our bank data provider. You sign in to your bank in Plaid's window (or your bank's own page or app, for banks that use it); Plaid handles that sign-in and the data it collects under the Plaid End User Privacy Policy, which you agree to in Plaid's window. We never see or receive your bank username or password.
Confirming it's you: before a bank is connected, we check that it's really you, with two-step sign-in or a one-time code sent to your email.
What we receive: the bank's name; the accounts you choose to share (name, type and last four digits); and their transactions: date, amount, description, the merchant's name, category, and whether pending; and each account's current and available balance (and a card's credit limit). We don't receive full account or routing numbers or identity details.
What we do with it: only show your transactions in your forecast, match them to what you planned and keep your balances right. It is never sold, never used for advertising or to build a profile of you, and never shared for anyone's marketing. What Plaid itself does with the data it collects is described in the Plaid End User Privacy Policy.
AI assistants: entries that came from your bank are part of your budget, so an AI assistant you connected can read them like any other entry.
What we store, and for how long: an access token for the connection, kept encrypted, and the bank's raw transactions for as long as you stay connected, up to 25 months. Entries made from them stay in your budget, because they're your data, until you delete them.
Disconnect and delete: disconnect any time in Settings → Bank sync (you choose whether entries already added stay in your budget). Disconnecting, or deleting your account, ends our access, tells Plaid to remove the connection and deletes the raw bank transactions and the token. Saved earlier versions of your budget that contain bank entries are replaced within 30 days.
Revoke at the bank or at Plaid: you can also remove Adelante's access from your bank, or at my.plaid.com.
Download: your data download includes your bank data.

On your device

On the web, a sign-in cookie keeps you signed in; in the phone apps, a sign-in token kept in the phone's secure storage does the same.
A copy of your budget is kept on each device so Adelante works offline. Signing out removes it from that device. Without an account, this copy on the device is the only one.
Your preferences (theme, language, whether to show past entries, your privacy choices) are remembered on the device, and, without an account, when you first used the app (so the first ad-free days can be counted).
If usage statistics are on, a short queue of usage events waits on the device until it's sent; saying no empties it.
An error report that couldn't be sent (for example while offline) waits on the device, at most five of them, until it can be.
Low-balance alerts (Plus and Pro) are worked out on your device and shown by your phone as notifications; no notification service receives your budget.
App lock: if you turn it on, your phone checks your face, fingerprint or passcode itself; Adelante only learns whether it succeeded and never receives that data.

Adelante itself doesn't use advertising or tracking cookies. In the phone apps, Google's ad software can keep information on the device to show and count ads (see "Ads").

How we use it

To run Adelante: your forecast, syncing between your devices, and your account.
To send emails you need: confirming your address, resetting your password, confirming an email change, a one-time code to connect a bank, and a reminder before a free trial you started on the web ends. We don't send marketing email.
To keep Adelante secure and working, and to fix problems.
With usage statistics on (see "Your choices"), to understand how Adelante is used (which features matter, where people get stuck, how the plans compare) and to count ad views and taps.

We don't sell or share your personal information, and we don't use your budget for anything other than showing it to you.

When you ask us for help, our support tools show your account details (email, plan, the devices you're signed in on) and how much is in your budget (how many accounts and entries, and when it was saved), not what's in it. With them we can confirm your email, change your plan, turn off two-step sign-in, set a new password, sign you out, or delete your account when you ask. Each of those actions is recorded; once an account is deleted, the record no longer has its email address.

Plus and Pro have no ads, and Adelante on the web shows none. Ads appear only in the iPhone, iPad and Android apps, on the free plan and when you use the app without an account, and not during your first days: after that, a few ads appear in the app's lists and on Insights, each clearly marked "Ad". Ads are chosen by the screen they appear on, never by your budget, and are never personalized: no amounts, names, notes or other budget data ever go to an advertiser. Ads never appear inside edit screens.

The ads come from Google AdMob. To show an ad and count it, Google receives what any ad request carries: your IP address (from which Google may work out your approximate location, such as your city or region), the kind of device and its settings (such as language), and the app the ad is in. Google's ad software may also keep or use an identifier on your device to count views and taps, limit how often an ad is shown and prevent fraud. We always ask Google for ads that aren't personalized, and Google uses this information under its own policy (how Google uses information from sites and apps that use its services).

The iPhone and iPad app never asks for permission to track you, so your device's advertising identifier isn't available to Google. The Android app doesn't ask for your device's advertising ID, and doesn't use Google's Topics or ad-attribution features.

Your choices about ads: in the European Union, the EEA, the UK and Switzerland, and wherever we can't tell the country, Google's own consent message (shown in the app before the first ad, where Google's rules call for it) asks about ad cookies and identifiers, and you can open it again any time from Settings → Help → "Ad choices (Google)". In Brazil and Colombia, Adelante asks you about "Ad measurement" instead. With Ad measurement off, the app also asks Google to limit how it processes the ad request (Google's "restricted data processing") and doesn't give Google an app-specific identifier for counting views. Saying no doesn't remove ads, and ads stay non-personalized either way. On your phone you can also reset or turn off its advertising identifier in its settings. To know which rules apply, we look at the country your connection comes from; we don't store it. To have no ads at all, choose Plus or Pro.

Connect your AI

On Plus and Pro you can let an AI assistant of your choice (Claude, ChatGPT or another) work with your budget. This is always your choice: nothing is shared with any AI app unless you connect it, and you pick which one. How to connect, choose read-only or changes, and remove a connection: Connect your AI: help.

We ask first: before every connection, Adelante shows you the risks below and you confirm "I understand these risks" before you can allow an assistant or create an access key. The approval screen names the assistant and asks for your explicit permission to share your budget with it.
What the assistant receives: when it asks, the budget you entered: your accounts, balances, forecast and entries (including entries that came from a connected bank).
The AI company sees what you share: what the assistant reads goes to the company behind it (for example Anthropic for Claude, OpenAI for ChatGPT): the parts of your budget it reads, such as balances, pay and bills, and the names and notes of the entries it looks at. That company receives it, may keep it and handles it under its own terms and privacy policy, which we don't control; this can include keeping your conversations and, depending on your settings with that company, using them to improve its models. You can usually delete your conversations in the assistant itself. Only connect assistants you trust with your budget.
AI can make mistakes: an AI's answers can be wrong and aren't financial advice. Check anything important before you rely on it.
Changes only if you allow them: by default the assistant can only read. It can add, change, skip or delete entries only if you separately choose "Also allow changes". Those changes are real, on all your devices; it can undo its last change.
What we store: the access key or sign-in grant for each connection, its name, whether it may make changes, and when it was made and last used (see "What we collect").
Revoke any time: in Settings → Connect your AI, remove a connection and it stops working at once. Deleting your account removes all connections. If your plan ends, connections stop working until you renew.

Companies that help us run Adelante

Proton sends our emails and stores our encrypted backups.
Cloudflare carries traffic between you and Adelante (its network and secure tunnel), and so sees your connections' IP addresses and the encrypted requests pass through it. It also tells us which country a connection comes from, and runs the check that a new sign-up is a person and not a bot (Turnstile), which looks at your browser or device for that one purpose under its own policy.
Google and Apple: signing in with them if you choose to, the App Store and Google Play for buying Plus and Pro, and Google AdMob for the ads in the phone apps (see "Ads").
RevenueCat checks App Store and Google Play purchases of Plus and Pro for us.
Stripe takes payments for Plus and Pro bought on the web.
Plaid connects to your bank if you turn on bank sync (see "Bank connections"; Plaid End User Privacy Policy).
Hosting: Adelante runs on servers operated by SoloJade LLC in the United States.

How long we keep it

Your account and budget: until you delete them.
Usage statistics: 13 months, then deleted (with your account, at once). Your privacy choices: until you delete your account.
Sign-in attempt records: about a day. Email links: they stop working when they expire (48 hours at most), and the record of them goes a week later.
Server logs and error reports: 30 days.
Bank data: see "Bank connections".
Receipt photos: until you delete the entry or your account (then within 7 days, or at once with the account).
Backups: encrypted, replaced over time. Something you've deleted can remain in an older backup until that backup is replaced, for up to 30 days.
Purchase records: only as long as tax and accounting laws require. Emails you send us for support: until you ask us to delete them.

Your choices

Usage statistics and ad measurement: in the European Union and the rest of the EEA, the UK, Switzerland, Brazil and Colombia, and wherever we can't tell the country, you choose when you first use Adelante, and usage statistics stay off until you say yes (in the EU, the EEA, the UK and Switzerland, and wherever we can't tell the country, Google's consent message asks about ads instead, as described in "Ads"). There you can change it any time in Settings → Help → Privacy choices, and saying no to usage statistics stops them right away on that device. Everywhere else usage statistics are on and Adelante doesn't ask. To know which applies, we look at the country your connection comes from; we don't store it.
See and download everything: Settings → Privacy → Download my data gives you a file with your account details and sign-in methods, your whole budget, your receipt photos, your AI connections, your privacy choices and any usage statistics.
Change it: edit your budget any time; change your email or password in Settings.
Delete it: Settings → Privacy → Delete account deletes your account and all its data right away, on every device. If you signed in with Apple, we also ask Apple to revoke Adelante's link to your Apple Account, so Adelante no longer appears among the apps using Sign in with Apple. It also ends a plan bought on the web and removes your customer record at Stripe. Deleting your account doesn't cancel a subscription bought through the App Store or Google Play: cancel it there too (the app reminds you). Without an account, removing the app (or erasing the budget in the app) deletes what's on the device.

Depending on where you live, you may have further rights (for example, to object or to complain to a data protection authority). Contact us and we'll help.

Security

Connections to Adelante are encrypted (HTTPS), passwords are hashed, access tokens for bank connections are encrypted, and each person's data is kept separate. You can add two-step sign-in (a code from an authenticator app on top of your password) and see, and sign out, every device your account is signed in on, both in Settings. If you turn on two-step sign-in we store the key your authenticator app uses, and your recovery codes only in scrambled form. No system is perfectly secure; if something goes wrong that affects your information, we'll tell you.

Children

Adelante is for adults: you must be 18 or older to use it. We don't knowingly collect information from anyone under 18, and if we learn that we have, we'll delete that account.

Changes

If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.

Contact

Adelante (adelantemoney.com) is made by SoloJade LLC. Questions: [email protected].