Hart Money — Privacy Policy

Effective July 13, 2026 · Hart Creative, Inc.

What Hart Money is

Hart Money is a private, single-household personal finance application operated by Hart Creative, Inc. for the exclusive use of the Hart household. It is not offered to the public, has no signup, and serves no customers. This policy exists so the people whose data it holds — and the financial institutions it connects to — can see exactly how that data is handled.

What data we collect

Through Plaid Inc., with the account owner's explicit consent, the application retrieves read-only financial data from the household's own accounts: transactions, account balances, and investment holdings. The application never receives or stores bank login credentials — authentication happens directly between the account owner and their bank via Plaid. The application cannot initiate payments or move money under any circumstances.

How data is used

Solely to present the household's own finances back to the household: dashboards, spend categorization, reports, and question-answering. Portions of transaction data and household-provided context are processed by Anthropic's Claude API to power categorization suggestions, natural-language answers, and report generation. No data is used for advertising, profiling, or any commercial purpose.

What we never do

Where data lives and how it is protected

Data is stored in a private PostgreSQL database (Supabase) accessible only to authenticated household members. Access requires a password plus two-factor authentication on every session. Plaid access tokens are encrypted at the application layer (AES-256-GCM) before storage. All access — human and automated — is recorded in an audit log.

Data retention and deletion

Financial data is retained while the household actively uses the application. The application includes a deletion control ("panic button") that, when invoked by a household member, immediately revokes every bank connection at Plaid and permanently deletes all financial records — accounts, transactions, balances, and holdings — from the database. Disconnecting an individual institution stops all further data collection from it. You can also manage or revoke connections at any time via Plaid Portal.

Contact

Questions about this policy or our data practices: benjaminhartdesign@gmail.com.