Privacy Policy

Tedd (“we”, “us”) is software for organizing and understanding your personal finances: budgets, transactions, net worth, debts and money you have lent. It is operated by the Tedd team. It is currently offered to a small invitation-only pilot group of households in the United States.

For privacy questions or requests, use the Contact page and choose “A privacy request”.

• Account details: your name, email address, country and city, and a hashed password. We also record when you accepted the Terms and this Policy, which versions you accepted, and the network address you accepted them from.
• Invitation requests and messages: if you ask for an invitation or write to us on our website, the email address, optional name, optional note, optional answer to “what do you use today?”, and the message you give us.
• Financial data from your bank, through Plaid: with your consent, account names, balances, the last four digits of account numbers and transaction history from the institutions you connect, retrieved through Plaid Technologies, Inc. We never receive or store your bank username or password.
• Information you enter or import: accounts, assets, debts, budgets and transactions, including files you import, and the address and value estimate of any property you add. If you record money you have lent, this includes the names of the people who borrowed it and the amounts. Only record information about other people that you are entitled to keep for your own personal records.
• Information you give the AI feature: your questions, documents you upload in chat, and short notes the chat remembers about you so answers have context.
• Profile picture (optional): if you choose one of our built-in avatars, we store which one you chose. If you upload a photo, we keep a small, resized copy that we make from it (a square of 256 by 256 pixels). We do not keep the original file or the camera and location details it may carry. We use the picture only to show it to you in the app. We do not show it to other users, it is not visible to administrators in the app, and we do not send it to any other service provider.
• Technical and security information: network address, browser type, request times, and records of sign-in attempts, kept to secure the service and fix problems.
• Product usage: which onboarding steps you complete and whether you connected an account or imported data, so we can improve the pilot. We use our own records for this, not a third-party advertising tool. Our website also uses Vercel Web Analytics to count page views and measure performance. In addition, our public pages keep daily totals of page views and button clicks, with no address, cookie or visitor identifier, so we can see which pages help people.

• To provide Tedd: show your accounts, budgets, net worth, money lent and transactions.
• To answer your questions with the AI feature (see section 5).
• To refresh bank data from Plaid when you ask, or when a connected account updates.
• To send service messages such as invitations, password resets and important notices. We send no marketing email unless you agree to it. We use an invitation-request email only to reply to your request and, if you are invited, to send the invitation.
• To secure the service, prevent abuse, and meet legal obligations.
• To understand and improve the pilot, using aggregated or limited usage records.

We do not sell your personal information and we do not share it for advertising. The services below receive information from Tedd, or from your browser while you use it. This list covers the outside services Tedd calls in this version; if that changes we update it. For each one we say what is sent and when, which is different from what we store.

• Plaid Technologies, Inc. retrieves your bank data when you connect an account, and loads its connection screen from its own servers. Plaid’s own use is governed by its End User Privacy Policy. We store the accounts, balances and transactions it returns, and a connection key that keeps the link working.
• Anthropic, PBC processes your AI requests (section 5).
• RentCast, a US property-data service, receives a property address to return a value estimate and some property details. This happens when you press Get value on a property, or when you press Refresh on a saved property. Nothing is sent without one of those button presses, and nothing for properties you mark as outside the United States. Only the address is sent, not your name or other records. We store the estimate, its range and the date, beside the property. Estimates are not appraisals and may be missing or wrong.
• Railway Corp. hosts the Tedd application and its database, so it stores everything described in section 2.
• Vercel Inc. provides website analytics, as described above.
• Google: for some well-known banks, the app shows the bank’s icon, which your browser requests from Google’s icon service using the bank’s website name. Google receives that website name along with your browser’s network address and details. No account data or amounts are sent.
• An email delivery service sends invitations, confirmations and account emails on our behalf, so it sees the recipient address and the message. We have not yet named this service on this page.
• Frankfurter, a public exchange-rate service, is asked for currency rates. We send currencies and dates only, never personal or account information.
• Professional advisers, and authorities when the law requires it or to protect rights, safety and the service.
• A successor, if Tedd is sold or merged, with notice to you.

Property addresses you type are not searched or auto-completed through any outside service while you type.

Tedd uses an AI provider, Anthropic, in three places, described below. The property-valuation feature sends addresses to RentCast, rather than Anthropic (section 4). An address you include in a chat question, a chat document or a statement can still be processed by Anthropic, like any other content in them. Chat sends nothing until you ask a question; statement import and the net worth chart send the data described next to them when you use those features.

• Chat: when you ask a question, we send your question, the parts of your financial records and memory notes that are relevant to it, and any documents you uploaded in chat that are relevant. Anthropic returns the answer.
• Statement import: when you import a statement in a layout we have not seen before, we send the file name and the first 30 rows of the file (its header and first transactions, which may include an account number) so it can work out the columns. We keep the resulting import settings and only the last four digits of any account number found in the statement, not the original file.
• Net worth chart: when you view the net worth history, we send a monthly summary (the month, the change, and the main drivers with their names and rounded amounts) so it can write a one-line label for each month. Results are kept so a month is sent again only when something behind it changes.

Answers may be wrong and are not financial, tax or legal advice (see the Terms). Do not put information in chat that you do not want processed this way.

Our retention and the provider’s are different. We delete chat messages after 90 days and the log of AI requests after 90 days. How long Anthropic keeps what it receives is set by its own terms, which we do not control. We use its API under commercial terms which, at the time of writing, state that data sent through the API is not used to train Anthropic’s models, and that it may keep API data for a limited period.

• Account and financial data: while your account is active, until you delete it.
• Bank connections: you can disconnect an account at any time. That removes the Plaid connection, and you choose whether to keep or remove the accounts and transactions it brought in.
• Profile picture: until you remove it in Account settings or delete your account.
• Property estimates: kept beside the property until you remove the property or delete your account.
• Chat messages: deleted automatically after 90 days. You can also clear your chat history and memory notes yourself in the chat window.
• Invitation requests: kept until you ask us to delete them.
• Security records (sign-in attempts and the log of AI requests): deleted after 90 days. Server logs are kept as long as needed for security and troubleshooting, then deleted.
• Memory notes and chat documents: memory notes until you clear them; text from documents you upload to the chat until your account is deleted.
• Backups: deleted information may remain in backups until they are overwritten in the normal course.
• Records of your acceptance of our Terms: kept for as long as needed to show you agreed.

You can delete your account yourself in Settings, using your password. You can also send a privacy request through the Contact page, using the email address on your account. Deleting your account removes your financial records, profile picture and remaining chat history from our live systems and asks Plaid to remove your bank connections, except what we must keep by law or in backups as described above. We have not verified how long backups are kept, so we make no promise about when they are overwritten.

Depending on where you live, including under California and other US state privacy laws, you may have the right to: know what personal information we hold about you; access and receive a copy; correct it; delete it; and not be treated unfairly for using these rights. You may also have the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define it.

To use a right, send a privacy request through the Contact page. We may need to verify it is you. We respond within the time the law allows, and tell you if we need more time. If we decline a request you may appeal by replying to our message, and you may also contact your state attorney general.

In the last 12 months we have collected the categories described in section 2 (identifiers, financial information, internet and usage data) for the purposes in section 3, and disclosed them to the providers in section 4 for business purposes.

We use HTTPS between your browser and Tedd, hashed passwords, and access controls, and our hosting provider stores the database. Tedd itself encrypts the tokens that link your bank connections and the secrets behind two-step sign-in, using a key kept outside the database; other records rely on our hosting provider’s storage protections. The Information Security Policy lists what we have and have not done. No system is completely secure. If a breach affects your information, we will notify you and the authorities as the law requires. See our Information Security Policy.

When you sign in, we keep a sign-in token and your display preferences (such as theme) in your browser’s local storage so you stay signed in. We do not use advertising cookies. Vercel Web Analytics measures traffic without advertising cookies. Clearing your browser data signs you out.

Tedd is for people in the United States. Our providers may process information in the United States and in other countries where they operate.

Tedd is for adults aged 18 or older. We do not knowingly collect information from anyone under 18, and will delete it if we learn we have.

We may update this Policy. We change the version and date above, and for material changes we will tell you by email or in the app before they take effect. Continuing to use Tedd after that means you accept the update; if you do not, you can delete your account.

Questions or requests: use the Contact page.