Privacy Policy

Your credit report is the most sensitive thing you can hand an app. Here is exactly how it is handled.

What we collect

Account data: your email address, name, and authentication factors (password hash, authenticator enrollment, registered passkeys).
Credit report data you upload: the report file itself, plus extracted personal information (name, addresses, employer, partial SSN as printed on the report), accounts, collections, inquiries and detected findings.
Dispute activity: letters you generate, mailing method, tracking numbers, deadlines and outcomes you record.
Technical logs: an audit record of when your own report data is read or changed.

Report files live in a private storage bucket that is not publicly reachable. Access requires your authenticated session, and files are encrypted at rest and in transit.
Every database table uses row-level security keyed to your user ID, so one account's data cannot be read by another — this is enforced by the database, not just the app.
Two-factor authentication is available through an authenticator app or a device passkey (Face ID, Touch ID, Windows Hello). Biometric data never leaves your device; only a public key is stored.
Access to your personal information is written to an audit log you can review under Settings.

To extract and analyze your report, to draft dispute correspondence, to track deadlines, and to show you your own history.
Report contents are sent to an AI model for extraction and letter drafting. That processing is transient and is not used to train third-party models.

We do not sell your personal information or credit data.
We do not share your report with data brokers, lenders, or advertisers.
We never ask for your credit bureau login credentials, and no part of the app can log into a bureau on your behalf.

Reports stay until you delete them. Deleting a report removes the stored file and its extracted accounts, inquiries, personal information and findings.
You can request full account deletion at any time; we remove your profile, reports, letters and dispute history.

You can access, correct, export or delete your data. Extracted accounts and personal information are directly editable in the app when the AI misreads your report.