Privacy Policy

1. Information We Collect and Process

StewardOS is a personal finance management operating system where you voluntarily record, organize, and plan your financial rhythm. We collect and store only the data required to provide the core functionality of the platform:

• Account Profile: Name, email address, password hash, and optional profile avatar.
• Financial Records: Income entries, expense transactions, vendors, descriptions, payment accounts, and transaction dates recorded by you.
• Budget Envelopes & Allocations: Custom budget buckets (such as Tithe, Living Essentials, Emergency Buffer), target allocation percentages, and transfer completion status.
• Goals, Assets & Obligations: Target accumulation goals, manual asset valuations (purchase cost, current value, custodians), recurring bills, and subscriptions.
• Support Communications:Messages, categories, and timestamps submitted through the in-app Help & Support desk.
• Notification Subscriptions: Web Push notification device endpoints, cryptographic VAPID public keys, and in-app notification preferences.

2. How Your Financial Data is Protected

We implement comprehensive technical and operational safeguards to protect your records:

• Strict Row-Level Security (RLS): Every database query is verified cryptographically at the database engine level against your authenticated user identifier (auth.uid()). No user can access or view another user's financial records.
• Encryption in Transit and at Rest: All data transmitted between your browser and our servers is secured using modern TLS 1.3 encryption. Database storage volumes are encrypted at rest using industry-standard AES-256.
• No Plaintext Passwords: Authentication is handled via secure salted cryptographic hashes. We never store or have access to your raw password.

3. Zero Sale of Personal Data

We have a strict commitment: We do not sell, rent, monetize, or trade your personal or financial data to third-party data brokers, marketers, or advertisers. Your financial records exist solely for your own private clarity and stewardship.

4. Communications and Notifications

StewardOS sends transactional and operational messages to keep you informed of your financial status:

• Morning CEO Briefs & Reminders: Daily financial summaries and periodic check-in nudges dispatched via email and push notification.
• Support Updates: Email and in-app alerts when a support ticket status changes or when an administrator responds to your inquiry.
• System Announcements: Platform updates and maintenance notices dispatched by administrators.

You can manage push notification permissions directly in your browser or device settings at any time.

5. Your Rights: Data Export & Account Deletion

You retain full ownership of your data at all times:

• Data Export: You may export all your financial transactions, income history, and expense records in standard CSV or JSON format via the application settings.
• Account Deletion:You have the right to permanently delete your account and all associated financial records, budget buckets, allocations, goals, assets, and notifications at any time via Settings → Delete Account. Deletion is irreversible and completely purges your tenant data.