Privacy Policy

Apollo Money ("we," "us," or "our") provides a personal finance application that helps you track accounts, transactions, budgets, and related financial data. Apollo Money (operated as part of the SafewithApollo ecosystem). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our website and application (collectively, the "Service").

We do not sell your personal information. We do not use third-party advertising or analytics trackers on your financial data.

Account information

• Name, email address, and password (or Google OAuth profile data if you sign in with Google)
• Profile preferences such as display name and avatar
• Subscription and billing status (processed by Stripe; we do not store full payment card numbers)

Financial information you provide or connect

• Account names, types, balances, and manual transactions you enter
• Bank and brokerage data synced through our aggregation partners (Plaid, MX, Akoya), including institution names, account masks (last four digits), transaction descriptions, amounts, and dates
• Budgets, categories, tags, rules, goals, and subscription labels you configure

Technical information

• Authentication session cookies required to keep you signed in
• UI preference cookies (for example, sidebar state)
• Server and application logs (IP address, browser type, timestamps, error messages) for security and reliability

• Provide, maintain, and improve the Service
• Sync and display your linked financial accounts and transactions
• Process subscriptions and send billing-related communications via Stripe
• Send transactional emails about connection errors or account issues (via Resend)
• Protect against fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

We share personal information with trusted service providers who process data on our behalf under contractual obligations:

• Supabase — authentication, database hosting, and infrastructure
• Stripe — payment processing and subscription management
• Plaid, MX, and Akoya — bank and brokerage account aggregation (only when you choose to connect an institution)
• Resend — transactional email delivery
• Google — OAuth sign-in (only if you choose Google login)
• Vercel — application hosting

We require these providers to use personal information only to perform services for us and to protect it appropriately. When you connect a financial institution, you are also subject to that institution's and the aggregator's terms and privacy notices.

We use essential cookies to maintain your authenticated session and remember UI preferences. We do not use advertising cookies or third-party analytics cookies on financial pages. You can control cookies through your browser settings; disabling session cookies will prevent you from staying signed in.

We retain your account and financial data for as long as your account is active. If you delete your account or request deletion, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, tax, billing dispute, or security purposes. Backup copies may persist for a limited time before automatic purging.

We use industry-standard measures including encryption in transit (HTTPS), row-level security on user data in our database, and AES-256-GCM encryption for bank connection credentials at rest. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Depending on your state of residence, you may have the right to:

• Know what personal information we collect and how we use it
• Access and receive a copy of your personal information
• Correct inaccurate personal information
• Delete personal information, subject to certain exceptions
• Opt out of the sale or sharing of personal information (we do not sell personal information)

To exercise these rights, email privacy@safewithapollo.com or use the export and account deletion tools in Settings. We will verify your identity before fulfilling requests and respond within the timeframe required by applicable law (typically 45 days).

We do not sell or share personal information for cross-context behavioral advertising.

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the revised policy with an updated effective date and, for material changes, provide notice through the Service or by email. Continued use after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy or our privacy practices: privacy@safewithapollo.com