Draft for legal review. This text is not yet in effect.
Privacy Policy
Last updated November 2, 2026
This policy explains how Stewart Moreland (“Prosperia”, “we”, “us”) handles information when you use the Prosperia app for iPhone (the “App”), Prosperia's server, and this website. Prosperia is built so that your readable financial data lives on your iPhone, not on our servers. Where that isn't the whole story, this policy says so.
The short version
- Your accounts, transactions, balances, budgets, rules and notes are stored in an encrypted database on your iPhone.
- If you connect a bank, Plaid sends your bank data through Prosperia's server to your iPhone. The server passes it along and doesn't save it.
- AI features use Apple's models only: on your iPhone, or Apple Private Cloud Compute, which receives the text you type, monthly totals and preferences you've asked Advisor to remember. The App never sends it individual transactions or account names.
- Crash and performance reports are on by default and you can turn them off. Product improvement reports are off unless you turn them on. Neither contains amounts, merchants, names or anything you type.
- We don't sell or share your personal information, show ads, or track you across apps and websites.
Information stored only on your iPhone
The following is stored only in the App's encrypted database on your iPhone. We don't keep a copy and can't read the database. Bank data passes through Prosperia's server on its way to your iPhone (see the next section); everything else on this list isn't sent to us:
- Accounts, balances and transactions, whether connected through Plaid, imported from a file, or added by hand.
- Your categories, rules, splits, tags, notes, budgets and debts.
- Files you import.
- Your AI requests and results, and a log of which AI feature ran, where and when (the log never holds the text).
- Preferences, goals and corrections you ask Advisor to remember.
The database is encrypted with a key kept in your iPhone's Keychain, available only on that device, and it is excluded from iCloud backup. If you make an encrypted export, the file is protected by a passphrase you choose, and you decide where it goes.
If you turn on widgets, the App copies display values (such as percent of budget spent and net worth) into a protected area of your iPhone that widgets can read. They stay on your iPhone.
Information that passes through Prosperia's server
Bank connections. When you connect a bank, you sign in through Plaid's own screen; we never receive your bank username or password. Plaid gives the App an access token, which the App stores in your iPhone's Keychain, locked with a key held in Prosperia's server's hardware security module. On each sync, the App sends the locked token to Prosperia's server, which unlocks it in memory for that request only, asks Plaid for your new data, and passes the data to your iPhone without storing it.
To deliver sync notices and to disconnect your banks when you ask, Prosperia's server keeps, for each connection:
- a coded (hashed) connection ID,
- your iPhone's push notification token, and
- a separately locked copy of the access token that can be used only to revoke the connection.
These are deleted when you disconnect the bank or use Delete everything. Push notifications we send only tell the App that new data is ready; they contain no financial data.
Plaid. Plaid's handling of your information is described in the Plaid End User Privacy Policy, which you accept when you connect a bank.
Server logs. Prosperia's server records operational logs (for example, that a request succeeded and how long it took) without financial data, kept for 14 days.
AI features
All AI in Prosperia runs on Apple's models.
- On-device requests are processed by Apple's model on your iPhone and are not sent anywhere.
- Apple Private Cloud Compute requests send the text you type, monthly totals by category, and preferences you've asked Advisor to remember to Apple's servers. They never include individual transactions or account names. Apple states that Apple Private Cloud Compute does not store this data or make it accessible to Apple. See Apple's Privacy Policy.
Every AI result in the App is labeled with where it ran.
Sharing an exchange with us. If you choose to share an Advisor exchange (for example, to report a wrong answer), you see and can edit exactly what will be sent. The App removes personal and financial details before sending, and our server checks again and rejects anything that still contains them. Shared exchanges are kept in an isolated, access-logged storage location for 30 days, used to build synthetic test cases, and then deleted. Sharing is never automatic.
Reports to Prosperia (telemetry)
Reports go to Prosperia's own server first, which removes your IP address and replaces your install's identifier with a coded one before storing anything. Every field a report can contain is listed in the App under Privacy Center → What we collect, and our server rejects any field not on that list.
| Report | Default | Contents |
|---|---|---|
| Crash and performance | On; you can turn it off | Crashes, errors, slow screens, app and iOS version, device model, and AI request metadata (feature, where it ran, outcome, timing, size). |
| Product improvement | Off; you can turn it on | Which screens, controls and steps you use, as names from a fixed list. No screenshots or text. A thumbs-up or thumbs-down on an AI answer is sent when you tap it. |
| Support diagnostics | Only during a support session you start | More detailed technical information, in a separate store, kept 14 days. |
Reports never contain amounts, merchant names, account or institution names, AI prompts or answers, or anything you type.
Retention. Individual report events are deleted after 30 days. Daily statistics computed from them may be kept for up to 13 months.
Who processes reports. Reports are stored on Google Cloud. Crash and error reports are forwarded, after the steps above, to Sentry for analysis. We use Anthropic's Claude API to review daily statistics that combine at least 20 installs and contain no per-person data, to help us find and fix problems.
Subscriptions
Subscriptions are sold and billed by Apple. Apple tells Prosperia's server whether a subscription is active and when it renews, linked to a coded ID rather than your name or Apple Account. We never receive your payment details.
This website
This website sets no cookies and runs no analytics or advertising. Our hosting provider, Cloudflare, processes standard request information (such as IP address and browser type) to deliver pages and protect against abuse.
Service providers
We use these providers to run Prosperia. They process information only to provide their service to us:
| Provider | Purpose |
|---|---|
| Plaid | Connecting your bank, when you choose to |
| Apple | App distribution, subscriptions, push notifications, Apple Private Cloud Compute |
| Google Cloud | Prosperia's server, key management and report storage |
| Sentry | Crash and error analysis |
| Anthropic | Review of aggregate daily statistics |
| Cloudflare | Hosting this website and domain name service |
We do not sell or share personal information, as those terms are defined under California law, and we do not use it for targeted advertising. We may disclose information if required by law, or to protect the rights and safety of our users or others; because your financial data is on your iPhone, we do not have it to disclose.
Your choices and rights
- Turn reports on or off at any time in the Privacy Center.
- Disconnect a bank in the Privacy Center; we revoke access with Plaid and delete our records for that connection.
- Export all your data from the App as CSV and JSON, or as an encrypted export.
- Delete everything in the App erases the database and keys on your iPhone, disconnects every bank, and deletes what Prosperia's server keeps about your connections. Deleting the App also deletes its data from your iPhone.
- Requests about report data. Because reports are tied to a coded install ID rather than to you, we generally can't link them to a person. If you'd like us to try, or want to exercise a right to access, correct or delete personal information under the laws of your state, write to privacy@stewmore.dev. We will not discriminate against you for exercising your rights.
Security
The App's database is encrypted (AES-256) with a key protected by your iPhone. Connections to Prosperia's server use TLS with certificate pinning. Bank access tokens are locked with keys held in a hardware security module. No system is perfectly secure, but we design Prosperia so that our servers hold no readable financial data to lose.
Children
Prosperia is not intended for anyone under 18, and we do not knowingly collect information from children.
Where Prosperia is available
Prosperia is offered in the United States, and Prosperia's server runs in the United States.
Changes to this policy
If we change this policy, we will update the date above and, for material changes, tell you in the App before they take effect.
Contact
privacy@stewmore.dev · Stewart Moreland, [mailing address]