1. Who we are
CleanSlate (“CleanSlate,” “we,” “us,” or “our”) provides tools that help you track credit cards, balances, payment dates, transactions, utilization, and related reminders.
This policy is written for the CleanSlate app and website. It is not a substitute for the privacy policies of your financial institution, Plaid, RevenueCat, Apple, Firebase, Meta, or any other third-party service you choose to use with CleanSlate.
2. What this policy covers
This policy applies when you use CleanSlate’s iOS app, API-backed features, website pages, account features, card tracking features, subscription features, and notification features.
Important: CleanSlate is a personal finance tracking app. We do not initiate payments, move money, make lending decisions, provide credit decisions, or provide legal, tax, investment, or financial advice.
3. Information we collect
The information we collect depends on which CleanSlate features you use.
Account and identity data
- Internal user ID
- Firebase user identifier
- RevenueCat app user identifier
- Account creation and update timestamps
Card data
- Whether a card is manually tracked or connected through Plaid
- Card name
- Last four digits, when available or provided
- Current balance, credit limit, available credit, APR, minimum payment, and due-date information
- Card color for manually tracked cards
Plaid connection data
- Plaid item and account identifiers
- Plaid access token
- Institution ID, institution name, color, and logo when available
- Transaction sync cursor and sync completion status
Transaction data
- Transaction amount, date, authorized date, name, and merchant name
- Payment channel, pending status, payment classification, and merchant logo URL
- Raw transaction data received from Plaid for syncing, troubleshooting, and display
Notification data
- Device token and platform for push notifications
- Payment reminder and large transaction alert preferences
- Notification logs, including reminder type, due date, days-before setting, related card or transaction, and sent timestamp
Subscription data
- Subscription tier, active status, product identifier, purchase date, expiration date, renewal status, and last sync timestamp
- Raw subscription response data used to verify access and troubleshoot billing status
Device and app activity data (Facebook SDK)
- App events such as installs, app opens, sign-ups, trial starts, and subscription purchases (including product and price)
- Device information such as model, operating system and version, app version, language, time zone, and IP address
- App-scoped identifiers generated by the SDK, and Apple’s Advertising Identifier (IDFA) only if you allow tracking
4. Financial data via Plaid
When you choose to link a financial account, CleanSlate uses Plaid to connect to your financial institution. We do not receive or store your banking credentials.
Plaid may provide us with read-only data such as account identifiers, card information, balances, liabilities details, institution metadata, and transaction details. CleanSlate stores and uses this information to show your cards, balances, payment details, utilization, recent transactions, reminders, and related insights.
You can unlink a connected institution in CleanSlate. When you unlink a connection, the related connected cards and associated CleanSlate data may be deleted or deactivated according to our app behavior and retention practices.
5. Manually tracked cards
If you create a manual card, CleanSlate stores the information you enter, such as card name, selected card color, last four digits, balance, credit limit, minimum payment, payment due day, and APR.
Manual cards are not connected to Plaid or your financial institution. They are based on the information you choose to enter and update.
6. Subscriptions and purchases
CleanSlate may offer paid tiers. Subscription purchases are processed by Apple and subscription status may be verified through RevenueCat. We store subscription status information so we can determine which features are available to your account, enforce card limits, restore purchases, and provide support.
We do not receive or store your full payment card number from Apple or RevenueCat.
7. Notifications
If you enable notifications, CleanSlate may store your device token, platform, notification preferences, and notification logs. We use this information to send payment due reminders, large transaction alerts, and related app notifications.
You can change notification preferences in the app or through your device settings. Disabling operating system notifications may prevent CleanSlate from sending push notifications even if in-app preferences are enabled.
8. Advertising measurement (Facebook SDK)
The CleanSlate iOS app uses the Facebook SDK provided by Meta Platforms, Inc. (“Meta”). We use it to understand how people find CleanSlate and to measure, optimize, and improve the advertising we run on Meta’s services, such as Facebook and Instagram.
When you use the app, the Facebook SDK may automatically collect and send to Meta the device and app activity data described in Section 3, including app events (such as installs, app opens, sign-ups, trial starts, and subscription purchases), device information, IP address, and app-scoped identifiers.
Your financial data is never shared with Meta. We do not send your card details, balances, credit limits, transactions, payment due dates, Plaid data, or bank credentials to Meta or any other advertising partner, and we do not send your name, email address, or phone number to Meta.
App Tracking Transparency
On iOS, Apple requires apps to ask your permission before tracking you across apps and websites owned by other companies. If you allow tracking, the Facebook SDK may collect your device’s Advertising Identifier (IDFA) and Meta may use it, together with the data above, to attribute installs and purchases to our ads and to show you and others more relevant ads. If you choose “Ask App Not to Track,” we do not access your IDFA, and measurement is limited to Apple’s privacy-preserving attribution tools and aggregated reporting. You can change this at any time in iOS Settings > Privacy & Security > Tracking.
How Meta uses this data
Meta receives and processes this data under its own Privacy Policy and may combine it with other information it has about you, for example if you have a Facebook or Instagram account. Meta may use it to provide measurement and analytics services to us, to improve its products, and to deliver and personalize ads. CleanSlate does not control how Meta uses data it receives.
Your advertising choices
- Tracking permission: allow or deny tracking for CleanSlate in iOS Settings > Privacy & Security > Tracking.
- Apple personalized ads: turn off Personalized Ads in iOS Settings > Privacy & Security > Apple Advertising.
- Meta ad preferences: manage how Meta uses your activity for ads in your Meta Accounts Center ad preferences.
- Opt out of sharing: email support@cleanslatetech.app with the subject “Do Not Share” and we will stop sending your app activity to Meta for advertising, in addition to your device settings.
Under some U.S. state privacy laws, such as California’s, providing device identifiers and app activity to an advertising platform may be considered “sharing” for cross-context behavioral advertising or “targeted advertising,” even though no money is exchanged. CleanSlate does not sell personal information for money, and you can opt out of this sharing using the choices above.
9. How we use information
- Provide the app: display cards, balances, utilization, payment due dates, recent transactions, subscription tier, and account status.
- Sync connected data: maintain Plaid connections, update balances and transactions, and process Plaid webhooks.
- Send reminders and alerts: deliver payment due reminders and large transaction notifications when enabled.
- Measure and improve our advertising: understand which ads lead to app installs, sign-ups, and subscriptions, and improve our marketing using the Facebook SDK as described in Section 8.
- Manage subscriptions: verify purchases, restore purchases, enforce tier limits, and unlock paid features.
- Protect CleanSlate: authenticate users, prevent abuse, debug issues, monitor reliability, and maintain security.
- Support users: respond to support requests and investigate reported problems.
- Comply with obligations: satisfy legal, regulatory, tax, accounting, dispute, and enforcement requirements.
10. What we do not do
- We do not sell your personal information.
- We do not receive or store your bank login credentials.
- We do not share your financial data, such as card details, balances, transactions, or Plaid data, with Meta or any other advertising partner.
- We do not use your financial data to make credit decisions.
- We do not move money or initiate payments from your accounts.
- We do not knowingly collect personal information from children.
12. Retention and deletion
We keep information for as long as needed to provide CleanSlate, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, protect security, and support business operations.
When you delete cards, unlink institutions, or request account deletion, we delete or de-identify related information unless we need to retain it for legitimate business, security, legal, accounting, fraud-prevention, or compliance reasons.
Some information may remain in backups or logs for a limited period before being deleted according to our normal retention cycles.
13. Your choices and rights
- Access and update: you can view and update certain card, notification, and account settings in the app.
- Unlink accounts: you can unlink connected financial institutions in the app.
- Delete manual cards: you can delete manually tracked cards in the app.
- Notifications: you can manage notification preferences in CleanSlate or through your device settings.
- Subscription management: you can manage or cancel subscriptions through your Apple account settings.
- Tracking and ads: control tracking and ad personalization in your iOS settings and Meta ad preferences, or ask us to stop sharing your app activity with Meta, as described in Section 8.
- Data requests: you may contact us to request access, correction, deletion, or a copy of your information.
Depending on where you live, you may have additional privacy rights, such as rights to access, correct, delete, port, restrict, or object to certain processing. We honor applicable privacy rights requests where required by law.
14. Security
We use administrative, technical, and organizational safeguards designed to protect information, including authentication controls, transport encryption, least-privilege access practices, vendor review, and security-focused development practices.
No method of transmission or storage is completely secure. You can help protect your account by keeping your device secure, using a strong device passcode, enabling biometrics where available, and keeping your app and operating system updated.
15. Children
CleanSlate is not directed to children under 13 or the minimum age required in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information to CleanSlate, contact us so we can take appropriate action.
16. International processing
CleanSlate and its service providers may process information in the United States and other locations. Where required, we rely on appropriate safeguards for international transfers.
17. Changes to this policy
We may update this Privacy Policy from time to time. When we make changes, we will update the effective date above. If changes are material, we will provide notice where required by law.
18. Contact us
Questions, privacy requests, or deletion requests can be sent to: