Privacy Policy

1. Introduction

Jointly ("we," "us," or "our") is operated by Joshua Knopman, a sole proprietor based in Brooklyn, New York. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Jointly mobile application (the "App").

By using the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and profile photo (if provided). You may sign in using email/password, Google Sign-In, or continue as a guest.

Financial Data via Plaid: If you choose to connect a bank account, we use Plaid Inc. to securely access your transaction data. Plaid retrieves transaction details (merchant name, amount, date, category) and basic account information (institution name, account mask) on your behalf. Jointly never receives, stores, or has access to your bank login credentials. Your credentials are handled entirely by Plaid under their own End User Privacy Policy.

Expense and Split Data: We store records of transactions, manual expenses, splits, settlement history, and related notes that you create within the App.

Partnership Data: If you pair with a partner, we store information about that relationship, including invite codes and shared split preferences.

Payment Preferences: If you choose to link a payment app (Venmo, PayPal, or Cash App) for settlement, we store your username for that service. We do not process payments directly.

Device and Usage Information: We may collect basic device information and usage analytics to improve the App's performance and user experience.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App's expense-splitting functionality
• Sync and display transactions from your connected bank accounts
• Calculate and display balances between you and your partner
• Facilitate settlement via third-party payment apps
• Send push notifications about new splits, review requests, and settlement reminders (with your permission)
• Improve and optimize the App

4. We Do Not Sell Your Data

We do not sell, rent, trade, or otherwise share your personal information or financial data with third parties for their marketing or advertising purposes. Period.

5. How We Share Your Information

We share your information only in the following limited circumstances:

• With Your Partner: If you pair with a partner in the App, they can see shared transaction and split data, balances, and settlement history. They cannot see your bank login credentials or full account numbers.
• Plaid Inc.: To connect bank accounts and retrieve transaction data. Plaid's use of your data is governed by their own privacy policy.
• Firebase / Google Cloud Platform: We use Google's Firebase services for authentication, database hosting, cloud functions, and push notifications. Google's data handling is governed by Firebase's privacy documentation.
• Legal Requirements: We may disclose your information if required to do so by law or in response to a valid legal request (e.g., subpoena or court order).

6. Data Security

We take reasonable measures to protect your information, including:

• All data is transmitted using industry-standard encryption (TLS/SSL)
• Bank access tokens are stored server-side with restricted Firestore security rules and are never accessible to client applications
• Plaid uses bank-level encryption and security practices
• Firebase Authentication manages user sessions securely

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at info@getjointly.co. Upon receiving a deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

When you disconnect a bank account, the associated access token is deleted from our servers. Historical transaction data that has already been imported will remain unless you request its deletion.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Opt-Out: Opt out of push notifications via your device settings

To exercise any of these rights, contact us at info@getjointly.co.

9. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. As stated above, we do not sell your personal information. To make a request, contact us at info@getjointly.co.

10. New York Residents

In compliance with the New York SHIELD Act, we implement reasonable safeguards to protect the security, confidentiality, and integrity of private information of New York residents, including administrative, technical, and physical safeguards.

11. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@getjointly.co.

12. Disclaimer of Liability

The App is provided on an "as is" and "as available" basis, without warranties of any kind, either express or implied. Jointly is not a financial advisor, accountant, or bank. The App is a tool for tracking and splitting shared expenses and does not provide financial, tax, or legal advice.

To the fullest extent permitted by applicable law, Jointly and its operator shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or use, arising out of or related to your use of the App, including but not limited to:

• Inaccuracies in transaction data provided by your financial institution or Plaid
• Errors in expense calculations or split amounts
• Unauthorized access to your account due to compromised credentials
• Service interruptions or data loss
• Actions taken based on information displayed in the App

You use the App at your own risk and are solely responsible for verifying the accuracy of any financial information.

13. Third-Party Links and Services

The App may contain links to third-party services (such as Plaid, Venmo, PayPal, and Cash App). We are not responsible for the privacy practices or content of these third-party services. We encourage you to review their privacy policies before using them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the App after changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Jointly
Operated by Joshua Knopman
Brooklyn, New York
info@getjointly.co