Privacy Policy

1. Introduction

Goalwave (“we,” “our,” “us”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Goalwave app and related services.

2. Information We Collect

Personal Information

• Name
• Email address
• Phone number (optional, with consent)
• Authentication credentials (secured)

Financial Information

• Bank transaction data (via Plaid)
• Uploaded documents (bank statements, bills)
• Debt and budget information you enter

Goalwave does not store bank login credentials. These are handled securely by Plaid.

Usage Data

• App activity
• Feature usage
• Device and session data

3. How We Use Your Information

We use your information to:

• Provide budgeting and habit-tracking features
• Display progress, milestones, and insights
• Send account-related notifications
• Improve app performance and features
• Communicate updates (with consent)

Goalwave accesses financial data on a read-only basis and does not initiate transactions, transfers, or payments on behalf of users.

4. Social & Sharing Controls

• Financial amounts are never shared with other users
• Social features show milestones only
• Sharing is opt-in and can be disabled at any time

5. Data Security

We protect your data using:

• AES-256 encryption at rest
• TLS encryption in transit
• Mandatory 2-factor authentication
• Role-based access controls

All access to sensitive systems requires multi-factor authentication and is logged for audit purposes.

6. Third-Party Services

We work with trusted providers:

• Plaid (bank linking)
• Cloud infrastructure providers (auth, storage)

These providers are contractually required to protect your data. Goalwave does not share consumer financial data with advertisers or data brokers.

7. Your Rights

You may:

• Access your data
• Correct your information
• Delete your account
• Withdraw consent for communications

Users may request deletion of their account and associated data by contacting dataprivacy@goalwave.app.

8. Data Retention

We retain data only as long as necessary to provide services or comply with legal obligations.

9. Children's Privacy

Goalwave is not intended for users under 18.

10. Changes

We may update this policy and will notify users of material changes.

11. Contact

support@goalwave.app