Privacy Policy

01What we collect

Margin is built to need as little as possible. Here's the complete list:

Everything marked on your device never reaches our servers unless you enable cross-device sync.

02What we never collect

03How we use it

• To make recommendations. Your wallet and strategy profile drive card rankings, credit alerts, and routing advice. This computation happens on your device.
• To sync across devices, if you create an account — your encrypted wallet state follows you to a new phone.
• To categorize spending, if you connect an account via Plaid, so Margin can tell you which card should have earned that purchase.
• To fix crashes and improve the app, using anonymized diagnostics that are never joined to your identity.

04Account sync via Plaid

Connecting your accounts is optional — every core feature works without it. If you opt in:

• You authenticate directly with Plaid; your banking credentials never pass through Margin.
• We receive read-only transaction data: merchant name, amount, date, and category. Never account numbers or balances beyond what you authorize.
• You can disconnect anytime in You → Connections, which immediately revokes access and deletes synced transactions from our servers within 30 days.

Plaid's handling of your data is governed by the Plaid End User Privacy Policy.

05Ask Margin & AI features

When you use Ask Margin, your question plus a summary of your wallet (card names, credit balances, your strategy profile — never card numbers, because we don't have them) is sent to our AI provider to generate the answer.

• Conversations are processed transiently and not used to train the underlying models.
• Clarifying questions (like which portal you're booking through) are answered on-device; only the final context summary leaves your phone.
• You can use the entire app without ever opening Ask Margin.

06When we share

Only in these cases, and no others:

• Service providers under strict data-processing agreements: cloud hosting, Plaid (if connected), our AI provider (if you use Ask Margin), and crash reporting.
• Legal requirements — if compelled by valid legal process, and we'll notify you unless prohibited.
• Business transfer — if Margin is acquired, this policy continues to apply and you'll be notified before any material change.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we honor Global Privacy Control signals.

07Security

• All data in transit is encrypted with TLS 1.3; anything stored on our servers is encrypted at rest with AES-256.
• On-device data is protected by your device's secure storage and honors your device lock.
• Access to production systems requires hardware security keys and is logged and audited.
• We run a coordinated vulnerability disclosure program at security@marginapp.cc.

08Retention & deletion

Delete your account in You → Account → Delete account, or email us — deletion completes within 30 days and is confirmed to you.

09Your rights

Wherever you live, we extend the same rights to everyone:

• Access & portability — export everything we hold about you in a machine-readable format.
• Correction — fix anything inaccurate.
• Deletion — erase your account and data.
• Objection & restriction — limit how we process your data.
• No discrimination — exercising these rights never degrades your experience.

EU/UK residents may also lodge a complaint with their supervisory authority. California residents may exercise CCPA rights via the contact below — we respond within 45 days.

10Children

Margin is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we'll delete it.

11Changes to this policy

We'll post any changes here and update the effective date. For material changes, we'll notify you in the app at least 30 days before they take effect. Prior versions are available on request.

12Contact