Privacy Policy

Effective September 21, 2026

Clementine Financial (“Clementine,” “we,” “us,” or “our”) is a product operated by Arias Techne Logos. Clementine is personal financial management software at clementine.financial: it shows the bank, card and brokerage accounts you connect in one place, keeps a ledger and a budget over them, and lets one other person in your household see the same. This policy explains what information we collect, how we use it, who processes it for us, how long we keep it, and the choices you have.

Information you provide

• Name and email address, received from our sign-in provider when you create an account.
• Account and profile information, such as your household and the person you merge finances with.
• Communications with us, when you write to us for support or about your rights.
• Information you intentionally enter into Clementine: owner labels on accounts, budgets, price targets and watchlist tickers, ledger reclassifications and manual entries, and the messages you send to the assistant.

Sign-in is provided by WorkOS. We never see or store a password.

Financial information

You may connect financial institutions to Clementine through Plaid. When you do, Plaid retrieves information from your institution on your behalf and provides it to us. Depending on the institution and the accounts under your login, this includes:

• financial institution and account identifiers assigned by Plaid;
• account names, types and the last digits of account numbers;
• account balances, including for credit card and loan accounts where the institution reports them;
• transactions: date, amount, description, merchant and Plaid’s category;
• for brokerage and retirement accounts, holdings (securities, quantities, cost basis and value) and investment activity such as buys, sells, dividends, fees and transfers.

Clementine does not receive your financial-institution login credentials. You enter them with Plaid, inside Plaid Link; Plaid gives us an access token that lets us retrieve the information above, and that token is stored encrypted. Plaid’s handling of your information is described in Plaid’s End User Privacy Policy.

Payment information

Subscriptions are processed by Stripe. Your payment card is entered on a page hosted by Stripe and is stored by Stripe, not by us. We receive and keep a Stripe customer identifier and the status and dates of your subscription. We do not receive or store complete payment-card numbers.

Information collected automatically

• IP address, browser and device information, as part of ordinary web-server request logs.
• Application usage and logs: which pages and features are requested, timestamps, response statuses and error reports, used to keep the service working and secure.
• Cookies: one essential cookie for your session, and a few that remember interface preferences (theme, panel state, the chat you had open).

Error and performance reports go to Sentry with personal data, cookies and request bodies stripped. Cloudflare sits in front of the service and sees request metadata. We use no advertising trackers and no third-party analytics.

How we use information

• to provide Clementine and its features;
• to connect your financial accounts and keep them synced;
• to display and analyse your financial information: balances, transactions, holdings, statements, budgets and charts;
• to process your subscription;
• to authenticate you and keep your account secure;
• to maintain security and prevent abuse;
• to provide customer support;
• to debug and improve the application;
• to send you service-related communications, such as changes to this policy or to the service.

We do not sell your personal information. We do not sell your financial information for advertising purposes, share it with advertisers, or use it to market other products.

Your household

Everything you connect or enter is visible only to you until you merge finances with one other person on the Household page, and only after they accept. From then on the two of you see each other’s accounts, transactions, holdings, ledger and budget. Either of you can stop sharing at any time; nothing is copied, so stopping simply ends the other person’s view. Assistant conversations are never shared.

AI features

Clementine includes an assistant built on Claude, a model provided by Anthropic. When you use it, your message, the conversation so far and the information the assistant looks up to answer (which can include balances, transactions, holdings, statements and budget figures) are transmitted to Anthropic’s API to generate a response. Anthropic’s commercial terms of service state that it does not use data submitted through its API to train its models. Only the last digits of account numbers, never full account names or identifiers, are included in what the assistant looks up. Assistant output can be wrong; see the Terms of Service.

Service providers

We use the following service providers to operate Clementine. Each processes information only to provide its service to us.

We may also disclose information where the law requires it, to protect the rights, safety or property of Clementine or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

Data retention

We keep information for as long as reasonably necessary to provide the service to you, meet legal obligations, resolve disputes, maintain security and enforce our agreements. In practice:

• Information from a connected institution is kept while the institution is connected. Disconnecting it deletes its accounts, transactions, holdings and ledger and revokes our access at Plaid.
• Your account and everything you own are deleted when you delete your account (below).
• Database backups currently expire after 7 days; application logs and error reports are kept for up to 90 days.
• Stripe keeps invoices and payment records for as long as its own legal obligations require; we hold no copy of card details.

Account deletion and disconnecting financial accounts

• Disconnect a financial institution: Accounts page → Remove, on the connection. You can also revoke Plaid’s access for any app at my.plaid.com.
• Delete your account: Household page → Your data → Delete my account. This revokes every Plaid connection, deletes your sign-in and erases the information you own. If you were the only member of your household, its subscription is cancelled with it; a household partner keeps their own information.
• You can also request deletion by writing to [email protected] from the email address on your account.

Deletion from our systems is immediate. Copies may persist for a short time in backups, and our service providers delete on their own schedules; we cannot promise immediate deletion from third-party systems.

Security

We use reasonable administrative, technical and organisational safeguards appropriate to an early-stage software service. These include encrypting information in transit and in the database and its backups, encrypting Plaid access tokens a second time at the application level, restricting access to production systems, and checking every request against your household so that no one outside it can read your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, write to [email protected].

Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to access it, correct it, delete it, or restrict or object to how it is used. Much of this you can do yourself: everything we hold is shown in the application, your name and email are corrected through your sign-in profile, and connections and your account can be removed as described above. For anything else, or to exercise a right under the law that applies to you, write to [email protected]. We will respond within a reasonable time and may need to verify that the request comes from the account’s email address.

Children

Clementine is not intended for children under 13, and we do not knowingly collect information from them. Under the Terms of Service you must be at least 18 to create an account.

Changes to this policy

We may update this Privacy Policy. When we do, we will change the effective date at the top, and if the change is material we will say so in the application before it takes effect.

Contact

Privacy and deletion requests: [email protected]
Security: [email protected]
Everything else: [email protected] (see Contact)