Privacy Policy

Effective 2026-09-09 · Stewardly, a Coats Labs creation

Stewardly is a household budgeting application built and operated by Coats Labs. This policy explains what information the application collects, why, and how it's protected. If anything here is unclear, contact coatsdr@icloud.com.

What we collect

• Account information — username, name, and (optionally) a phone number, used to identify you within your household and to enable notifications.
• Financial data — account balances and transaction history, retrieved through a linked bank-data provider (SimpleFIN) once your household connects a bank account.
• Budgeting data you enter directly — budgets, categories, savings goals, and related settings.
• Device/notification data — a push-notification subscription token, if you opt in to alerts, used only to deliver those alerts to your own device.
• Basic access logs — sign-in timestamps, outcome (success/failure), source IP, and browser user agent, kept to detect and respond to unauthorized access attempts.

We do not use advertising or analytics trackers of any kind.

How we use it

Solely to provide the application's own functionality: showing your household's balances and spending, computing budgets and net worth, sending the notifications you've opted into, and securing your account. We do not use your data for advertising, and we do not sell or rent it to anyone.

Who we share it with

• Bank-data providers (SimpleFIN Bridge) — to retrieve your linked accounts' balances and transactions on your behalf. We only receive data through these providers; we don't share your data back to them beyond what's needed to maintain the connection.
• Stripe — to process subscription billing, if your household has a paid subscription. Stripe receives payment details directly; we never see or store your card number.
• Anthropic — powers the optional AI advisor feature, if your household turns it on in Admin. Each message you send it, along with whichever of your own account, transaction, budget, or debt data it looks up to answer it, is sent to Anthropic's API to generate the reply. Per Anthropic's commercial terms, this data is not used to train their models.
• Microsoft Azure — our infrastructure provider, hosting the application and its database. Azure does not use your data for its own purposes.

We never share your data with anyone else, and never for marketing purposes.

How it's protected

Bank-connection credentials and other secrets are encrypted at rest; all traffic to and from the application is encrypted in transit; access to your household's data is restricted to your household's own members and enforced on every request, not just hidden in the interface; connecting a new bank account requires an admin's account to have two-factor authentication or a passkey configured first. Full technical detail is documented in our security policy.

Data retention and deletion

Your data is retained for as long as your household's account is active. Disconnecting a bank account removes its associated transaction history. Removing a user from a household removes that person's login credentials. You can export your own transaction history at any time from within the app (CSV export). To request deletion of your account or your household's data entirely, contact coatsdr@icloud.com and it will be handled directly.

Children's privacy

Stewardly is not directed at, and is not knowingly used by, children under 13.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we'll update the effective date above and, for material changes, notify household admins directly.

← Back to Stewardly