Privacy Policy

Buyancy connects to your bank accounts through Plaid or Wealthica, read-only, so it can answer "can I afford this" questions using your real balances and transaction history. We never see your bank login credentials, and we never have the ability to move your money. We don't sell your data. We use it only to make Buyancy work for you.

Account information. When you sign up, we collect your name, email address, and profile image (via Google sign-in or email/password, through our authentication provider, Clerk).

Financial data, via Plaid or Wealthica. When you connect an account, Plaid or Wealthica (which also covers Canadian investment platforms) gives us read-only access to: account balances, account type and institution name, and transaction history, including each transaction's description and merchant name. We use this to detect recurring bills, upcoming paychecks, and to calculate what's safe for you to spend. We don't keep your transactions or your bank balances: we read them from Plaid or Wealthica when a page or an answer needs them, use them while it works, and don't store them. We cannot initiate transfers, payments, or any movement of money — the access we request does not include that capability. You can also type in a balance yourself instead of connecting an account.

What you tell us directly. Goals you create (name, target amount, saved amount, target date), the payday you set, the questions you ask Buyancy and the answers it gives, whether you went ahead with a purchase when Buyancy asks ("did you buy it?"), any feedback you send us (with your email), your email if you join the waitlist, and — if you invite a partner — their email address.

What we don't collect. We don't access your bank login credentials (Plaid and Wealthica handle that directly and never share it with us) or the individual holdings inside an investment account — only its balance and transactions. We use account numbers only to tell which account is which inside Buyancy.

Your account and transaction data feeds a deterministic calculation (not a guess by an AI) that produces a YES / WAIT / HOLD answer to your question, along with the reasoning behind it. That reasoning — the verdict, the numbers considered, and what changes if you go ahead — is written up by an AI model (Anthropic Claude or Google Gemini) for readability. The model explains the result; it doesn't calculate it, and its wording can be incomplete or wrong.

Before anything is sent to that AI model, we replace identifying details — your bank/institution name, account names, goal names — with generic placeholders (e.g. "Account 1", "Goal 2"). The AI never sees your actual institution names, account numbers, or goal names; we restore them afterward, on our own servers, before showing you the answer. The question you type is sent as you wrote it, so leave out names and other details you wouldn't want a service provider to see.

We don't sell your data, and we don't share it for advertising. We share data only with the service providers that make Buyancy work:

• Plaid and Wealthica — connect to your bank or investment platform on our behalf
• Clerk — handles sign-in and account security
• Anthropic and/or Google — writes the plain-language explanation behind each verdict, from de-identified data only (see above)
• Supabase — hosts our database, where your data is stored
• Render — hosts our backend servers
• Resend — sends household-invite emails, only if you invite a partner

Nothing is shared with a partner until you invite them and they accept, and you both point at each other. Once you are both in a household, each of you can see the other's connected accounts, bills and paydays in the household view. Goals stay private unless you mark them as shared. Whatever your partner may see is sealed for both of you, and nobody else.

What you save in Buyancy is stored sealed: your goals, your bills and what you've told us about them, accounts you enter by hand, the pay you chose, and your questions and our answers. It is encrypted with a key that is made in your browser and that only you hold. We don't store your financial data in a form we can read; a database leak exposes nothing.

That is not the same as us never seeing your data. When you ask a question or open a page, your browser lets our server open just the items that request needs, for a few minutes, so it can do the calculation. Our server reads that data in memory while it works and does not keep it. Balances and transactions from your bank are read the same way. The access Plaid or Wealthica gives us to your bank is held on our servers, encrypted with a key we hold; that is separate from your vault.

Background alerts are optional and off by default. If you turn them on, we also let our server open your goals, bills, accounts and pay by itself overnight, so it can warn you about a cash squeeze while you're signed out. For as long as it is on, anyone with access to our server's secret settings could read those items for you. It never covers your past questions. You can turn it off at any time.

What we can still see. Some things have to stay readable for Buyancy to work: your name and email, when you were last active, how many goals, bills, accounts and questions you have and when they were made, who is in your household, which bank each account belongs to (not its name, number or balance), and whether you went ahead with a purchase.

Your passphrase and recovery key. We can't reset either. If you lose both, what you saved in Buyancy can't be recovered and you would start again; your bank data is simply fetched again. Anything a household partner has already opened on their device can't be taken back if you leave the household.

• All connections use TLS 1.2+ encryption in transit
• What you save is sealed to a key only you hold (see above); balances and transactions are not stored at all
• Plaid access tokens and the Wealthica login name are encrypted with AES-256-GCM before they are stored, and they stay on our servers — they are never sent to your browser
• Every table in our database has row-level security switched on
• Bank access via Plaid is read-only — we cannot move money
• Every "what-if" answer is saved in an append-only record, sealed to your key, so you can always look back at the reasoning behind any verdict

You can edit or delete individual goals directly in Buyancy. You can manage or delete your account entirely from your account settings (avatar menu → Account & security). You can also disconnect a bank account at any time, which stops Buyancy from reading any further data from it.

To request a copy of your data, or ask us to delete it, email us at shubhamporiya@gmail.com.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data, financial data, and goals within a reasonable period afterward. The record of past answers (the question you asked and the answer you were given) is not deleted with your account: it is kept, with the link to your account removed, so any verdict can still be traced back. It is sealed to your key, and once your account and the backup of your key are deleted nothing we hold can open it. Don't put personal details in a question you wouldn't want kept.

Buyancy is not directed at, and is not intended for use by, anyone under 18.

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you directly.

Buyancy is an early-stage product, currently in private beta. Questions about this policy or your data can be sent to shubhamporiya@gmail.com.