Effective date: August 30, 2026
Pivlyn, LLC ("Pivlyn," "we," "us," or "our") provides financial-planning software through the Pivlyn mobile application, websites, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Services.
1. Scope
This Policy applies to personal information processed by Pivlyn through the Services. It does not govern a third party's independent practices, including a financial institution, Apple, or a site or service linked from Pivlyn. The Services are intended for individuals in the United States who are at least 18 years old.
2. Information we collect
We collect the following categories of information as needed to provide the Services:
- Account and contact information: name, email address, account identifier, authentication records, household membership, and support communications.
- Financial information: accounts, balances, transactions, holdings, income, expenses, assets, liabilities, cash flow, benefits, insurance, tax-related information, planning assumptions, goals, and other financial details you enter, upload, import, or authorize us to retrieve.
- Connected-account information: information made available through Plaid or another connection you authorize. Pivlyn does not receive or store the username and password you use to sign in to your financial institution through Plaid Link.
- Planning and user content: scenarios, preferences, notes, prompts, uploaded documents, answers, outputs, and information you choose to share with household members or other people.
- Technical, usage, and security information: IP address, device and browser type, operating system, app version, session and authentication events, feature interactions, audit records, timestamps, error information, and security signals.
- TestFlight and support information: beta enrollment and feedback information that Apple or you make available to us, including screenshots, comments, and diagnostic details included with feedback.
We do not intentionally collect precise geolocation, contacts from your device address book, health or fitness data from Apple Health, or advertising identifiers for cross-app tracking.
3. Sources of information
We obtain information:
- directly from you;
- from a household member or other person acting at your direction;
- from financial institutions and data providers you authorize, including through Plaid;
- automatically from your device and use of the Services; and
- from Apple when you participate in TestFlight or use Apple distribution services.
4. How we use information
We use personal information to:
- create, authenticate, secure, and administer your account;
- connect authorized financial accounts and display financial information;
- calculate and present budgets, cash-flow views, planning scenarios, projections, tax estimates, and other requested outputs;
- personalize the Services based on your information and choices;
- enable household collaboration and user-directed sharing;
- provide support and process feedback;
- monitor reliability, prevent fraud and abuse, investigate incidents, and maintain audit records;
- improve and develop the Services using aggregated, de-identified, or appropriately protected information;
- comply with law and enforce our agreements; and
- communicate about the Services, security, policy changes, and account administration.
Pivlyn does not use financial information for targeted advertising. We do not use personal financial information to train a general-purpose artificial-intelligence model. If a future feature would use identifiable financial information for model training beyond providing that feature, we will first provide a separate explanation and obtain affirmative consent.
5. Automated features
Some features may use rules, statistical methods, or automated systems to organize information or generate planning outputs. These features process the information and instructions supplied to them. Outputs may be incomplete or inaccurate and are not used by Pivlyn to make decisions about your eligibility for credit, insurance, employment, housing, or another legally significant benefit.
6. How we disclose information
We may disclose personal information in the following circumstances:
- Service providers: to vendors that host, secure, support, or enable the Services, including Amazon Web Services, Plaid, and Apple. They may process information only for contracted services and must protect it consistent with this Policy and applicable law.
- At your direction: to household members, financial professionals, or other people and services you authorize. You control whom you invite and what connections you enable.
- Legal and safety purposes: when reasonably necessary to comply with law or legal process; protect the rights, safety, and security of Pivlyn, our users, or others; or detect and address fraud, security issues, or violations.
- Business transactions: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and notice where required.
- De-identified information: in a form that is not reasonably capable of identifying you. We do not attempt to reidentify information we maintain as de-identified.
Pivlyn does not sell personal information for money, share personal information for cross-context behavioral advertising, or permit advertising networks to use financial information for targeted advertising.
7. Financial-account connections
When you connect an account, Plaid collects your institution credentials and provides Pivlyn with an access token and the financial data you authorize. Connected access is designed to be read-only: Pivlyn cannot initiate transfers, trades, withdrawals, or payments from your financial institution through the Services. You can disconnect a connection in the Services. Disconnecting stops new retrieval but does not automatically remove information already imported; use the deletion process described below to request removal.
8. Retention
We retain personal information for as long as reasonably necessary to provide the Services, maintain account and security records, satisfy legal obligations, resolve disputes, and enforce agreements. Retention depends on the information and purpose. When information is no longer needed, we delete, de-identify, or securely isolate it. Backup copies may remain until overwritten through the ordinary backup cycle. We may retain limited records where required for security, fraud prevention, legal compliance, or establishment or defense of legal claims.
9. Your choices and rights
You may update account and planning information in the Services, disconnect financial accounts, change household access, export available account data, and submit an account-closure request from Settings. The current beta workflow records a request for review and does not automatically delete household data, immutable evidence, or provider records. Read the current process at pivlyn.com/account-deletion or email admin@pivlyn.com. Pivlyn must implement and verify a complete in-app deletion workflow before relying on it for App Store submission.
Depending on your state of residence, you may have rights to confirm processing; access, correct, delete, or obtain a portable copy of personal information; opt out of a sale, targeted advertising, or certain profiling; and appeal a denied request. Pivlyn does not currently sell personal information, use it for targeted advertising, or use it to make decisions producing legal or similarly significant effects.
We verify requests using information associated with your account and may request additional information when reasonably necessary. You may use an authorized agent where applicable; we may verify the agent's authority and your identity. We will not discriminate against you for exercising a privacy right. To appeal a decision, reply to our response with "Privacy Appeal" in the subject line.
10. Security
Pivlyn uses administrative, technical, and organizational measures designed to protect personal information, including encrypted network transport, encrypted production storage and secrets management, access controls, server-enforced household permissions, secure mobile credential storage, logging of sensitive actions, and monitoring. No system is completely secure, so protect your credentials and notify us promptly of suspected unauthorized access.
11. Children's privacy
The Services are not directed to children under 18, and Pivlyn does not knowingly collect personal information from children. If you believe a child provided personal information, contact us so we can delete it.
12. Changes to this Policy
We may update this Policy to reflect changes to the Services, law, or our practices. We will post the updated Policy with a new effective date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.
13. Contact us
Pivlyn, LLC
2520 Blue Sky Meadows Dr
Monroe, NC 28110
admin@pivlyn.com