Privacy Policy

Effective 2026-09-03 · Updated 2026-11-10

Koda Finance is a personal net-worth application operated by Koda Digital ("we", "us"). It is currently used by its operator only and is not offered to the public; this policy describes how it handles financial data so that the practices are transparent and consistent with the requirements of our data provider, Plaid.

Information we collect

  • Financial account data via Plaid. When you connect a bank, card, or brokerage through Plaid Link, Plaid provides us with account names, types, masked account numbers (last 4 digits), balances, transactions, liabilities (e.g. credit-card due dates and minimum payments), and recurring-payment streams. Your bank login credentials are entered only in Plaid's interface and are never seen or stored by us.
  • Manually entered assets. Names and values you type in yourself.
  • Derived data. Daily net-worth totals computed from the above.
  • Technical data. Standard server logs (timestamps, request paths, error messages) retained for 30 days.
  • Crash reports. If the app crashes, it may send a crash report: the error and the code location it happened in, plus the app version, device model, and operating-system version. Crash reports never include your account names, balances, transactions, email address, screenshots or screen recordings, and your IP address is not stored with them.

We do not collect advertising identifiers, location, contacts, or analytics.

How we use it

Solely to show you your balances, transactions, upcoming bills, spending trends, and net-worth history inside the app. We do not sell, rent, or share your data with anyone, and we do not use it for advertising or profiling.

Third parties

  • Plaid Inc. provides connectivity to your financial institutions. Plaid's handling of your data is governed by the Plaid End User Privacy Policy.
  • Google Cloud / Firebase hosts our backend and database (United States, us-central1).
  • Sentry (Functional Software, Inc.) receives crash reports as described above, if crash reporting is switched on. It receives no financial data. Sentry's handling is governed by the Sentry Privacy Policy.

Storage, security, and retention

Your transactions are stored only on your phone, in a database encrypted with a key that never leaves the device. Our servers fetch them from Plaid when your app asks and pass them straight through without keeping a copy. In the web version they are held in the browser tab only and cleared when you close it. If you import a Mint export, the file is read on your phone and never sent to us.

Everything else — connection tokens, balances, bills, manual assets and daily net-worth totals — is stored in Google Cloud Firestore, accessible only to our backend service. All transport uses TLS. Credentials for Plaid are held in Google Secret Manager. Every request for your data requires you to be signed in with your password and a code from an authenticator app, and your account can reach only your own data, never another user's; the app also asks for your device's biometric authentication each time it opens. Besides your transactions, the device keeps your most recent net-worth summary (totals and per-account balances), held encrypted in the iOS Keychain or Android Keystore so the app can open without a connection; it is erased when you sign out or delete your account. You can sign out of every device at once. Cached Plaid data is refreshed within 4–12 hours and purged after 7 days; connection tokens are kept until you disconnect the institution; daily net-worth totals are kept to provide history. Your transactions stay on your phone as your own financial history — including after you disconnect the institution they came from — until you delete your account or the app. Because we keep no copy, a new phone starts with what your banks still share (usually up to 24 months); export your transactions as CSV to keep older history. Crash reports are kept by Sentry for up to 90 days. Full details are in our Data Retention and Deletion Policy.

Your choices

  • Disconnect an institution at any time from the Accounts screen; this revokes our access at Plaid and deletes the connection and cached data. Transactions already on your phone stay there as your history.
  • Export your transactions as a CSV file at any time: Accounts → Export transactions.
  • Import your Mint history from Mint's CSV export: Accounts → Import a Mint export. It stays on your phone.
  • Delete your account and all data from inside the app: Accounts → Delete account and all data. This disconnects every institution at Plaid, deletes everything we store, erases the transactions on that phone, and deletes your sign-in account. It takes effect immediately and cannot be undone. If you can't use the app, email us at the address below and we will do it within 7 days.
  • You may also manage Plaid connections at my.plaid.com.

Use of the app is also covered by our Terms of Service.

Children

The app is not directed to anyone under 18.

Changes

We will update this page and the effective date when practices change.

Contact

Koda Digital · contact-us@kodadigital.ai