Priszim
Legal

Priszim Privacy Policy

Last updated: July 24, 2026

This Privacy Policy describes how Priszim ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website at priszim.com, our mobile app, and related services (the "Services"). Questions about anything here: support@priszim.com.

The short version

  • You pay us with money, not with your data
  • Your account lives in its own isolated database, never pooled with anyone else's
  • We never sell your personal data, to anyone, ever
  • To answer your questions, our AI assistant sends your financial details to a third-party AI provider — read exactly how, below
  • Export or delete everything, any time, from inside the app

The rest of this page explains that in detail.

1. What we collect

  • Account information: your email address, a username, and a hashed password (we never store your password in plain text).
  • Financial data you add or connect: account names, balances, transactions, budgets, and investment holdings, either entered manually, imported from a statement, or connected through Plaid.
  • Tax-residency information you choose to enter: travel dates and visa or immigration status, if you use the cross-border features.
  • Messages and documents you submit to the AI assistant: the questions you ask, and any files or images you attach.
  • Device and usage information: the minimum needed to operate the Service reliably and securely — things like IP address, device and app version, request timestamps, and error/crash reports. This is operational logging, not a profile of your behavior for advertising.
  • Push notifications: if you enable them, we send notifications about your account and finances. Notification content may include financial details such as merchant names and transaction amounts. You can turn notifications off in your device settings.

We do not buy information about you from data brokers, marketing partners, advertising networks, or social media platforms. The only outside source we collect from is Plaid, and only when you choose to link a bank (see below).

2. How we use your information

We use your information to create and secure your account, provide and operate the Services, power the AI assistant, respond to your support requests, send you administrative messages, keep the Service safe (fraud and abuse prevention), improve the product, and comply with our legal obligations. We process your information only when we have a valid legal reason to do so.

3. Legal bases (Canada / PIPEDA)

If you are in Canada, we process your personal information on the basis of your consent — express or implied depending on the context — which you may withdraw at any time. In limited cases permitted by law (for example, fraud detection and prevention, or to comply with a legal requirement) we may process information without consent as allowed under PIPEDA and Quebec's Law 25.

4. What leaves our servers, and why

Priszim shares data with the following categories of outside parties, and nowhere else. Each acts under a contract that limits them to processing data on our behalf.

  • AI provider (currently Anthropic): to power the AI assistant. Exactly what is sent, and what is redacted first, is described in section 6.
  • Cloud hosting (Amazon Web Services): our Services and databases run on AWS infrastructure.
  • Network and delivery (Cloudflare): to route traffic securely and protect against abuse.
  • Bank connectivity (Plaid): only if you choose to connect a bank account. You authenticate directly with Plaid; we never see or store your bank login credentials. Plaid then transmits your account and transaction data to us at your direction. If you connect a bank, your Plaid access token is encrypted at rest with AES-256-GCM, so a compromise of our database alone would not expose usable bank credentials.
  • Payments (Apple): all subscription payments are processed by Apple through in-app purchase. We do not collect, receive, or store your payment card numbers or other card details.
  • Market-data feeds (for stock, fund, and crypto prices): these receive ticker symbols only, never anything that identifies you.

We may name our current providers here for transparency and may update this list, with notice, if we change providers. We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets. We do not sell your personal information, and we have not sold or shared it for advertising in the preceding twelve months.

5. Cookies and tracking

We use a single, strictly necessary session cookie to keep you signed in and to protect your account. We do not use cookies or similar technologies for advertising, and we do not allow third parties to place advertising or cross-site tracking technologies on our Services. Because we do not track you across sites, there is nothing for a "Do Not Track" or Global Privacy Control signal to opt you out of; we honor the spirit of those signals by not tracking in the first place.

6. How the AI assistant handles your data

This is the most important section, so we state it plainly.

Each user's data is stored in a physically isolated per-user database and is never sold. To provide AI features, chat text and financial details (merchant names, amounts, balances, account and institution names) are sent to third-party AI service providers under data processing agreements that prohibit training on user data. Structured personal identifiers (SSN/SIN, card numbers, bank routing/account numbers, email addresses, phone numbers) are automatically redacted from text before transmission; text extracted from uploaded documents, and images attached to chat, are processed by the AI without this redaction.

In plain terms: our identifier redaction is a protective layer we built in, not a certified or guaranteed filter, and it does not apply to documents or images you attach. So don't paste or upload sensitive identifiers into a chat message if you can avoid it.

7. How long we keep your information

We keep your data for as long as your account is active. When you delete your account, we revoke any connected Plaid tokens and destroy your isolated database from our active systems immediately. Encrypted backups are retained on a rolling basis and purge within approximately 90 days, after which your data is gone from backups too. Limited billing records may be retained afterward only where the law requires it.

8. How we keep your information safe

Your data lives in a database isolated to your account, separate from every other account's data. All traffic between your device and our servers is encrypted in transit, and connected-bank tokens are encrypted at rest with AES-256-GCM. No method of transmission or storage is 100% secure, so while we work hard to protect your information, we cannot guarantee absolute security.

9. Children

Priszim is not directed to, and may not be used by, anyone under 18. We don't knowingly collect information from children. If you believe a child has provided us with personal information, contact support@priszim.com and we'll remove it.

10. Your privacy rights

Wherever you live, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccuracies in your data (you can edit most of it directly in the app).
  • Export your data in a portable format at any time from within the app.
  • Delete your account and all associated data.
  • Withdraw consent to processing, where we rely on consent.

We honor these rights for every Priszim user, not just users a particular law happens to cover.

11. US state privacy rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to know whether we process your personal data, to access it, to correct inaccuracies, to delete it, to obtain a portable copy, to opt out of "sale" / "sharing" / targeted advertising and profiling, and to not be discriminated against for exercising these rights. We do not sell or share your personal information for targeted advertising, and we do not use it to profile you for decisions with legal effects.

The categories of personal information we collect are: identifiers (name, email, IP address, account name); commercial and financial information (accounts, balances, transactions); internet/network activity (operational logs); citizenship or immigration status and financial account information (which are treated as "sensitive"); and inferences we draw solely to personalize your own experience inside the app. We do not collect biometric data, precise geolocation, or education records.

If we ever decline a request, you may appeal by emailing support@priszim.com. If your appeal is denied, you may contact your state attorney general.

12. Changes to this policy

If we make a material change to this policy, we'll update the "Last updated" date above and, where appropriate, notify active subscribers by email.

13. How to exercise your rights, and contact us

The easiest way to exercise any right is to use the in-app controls (export and delete live in your account settings) or to submit a request at priszim.com/contact. You can also email us at support@priszim.com. We will verify your identity before acting on a request and respond in line with applicable law.