Financial data
Used to calculate budgets, forecasts, insights, and account-linked product features.
Introduction
This Privacy Policy is a notice describing our data practices; it is not a request for blanket consent. Where consent is the appropriate legal basis, including for optional external AI transaction capture, Granite presents a separate in-product disclosure and records your choice. We are committed to protecting your privacy and handling personal information responsibly.
1. Information We Collect
We collect information in the following ways:
- Information You Provide Directly: This includes your name and email address when you create or update an account, an optional profile image, support messages, and financial information you manually enter, such as your monthly income, fixed expenses, transactions, categories, and savings or investment goals.
- Financial Information via Plaid: When you connect your financial accounts to our Service, we use a third-party service provider, Plaid Inc. ("Plaid"), to retrieve transaction data. This includes information about your account balance, transaction history, merchant names, amounts, and categories. We do not receive or store your bank account login credentials.
- Web Usage Information: With your consent, we use Google Analytics on the Granite website to understand how you interact with the Service. This includes pages visited, time on page, device type, and general location derived from your IP address. We load Google Analytics only after you accept our cookie notice, and you can change that preference at any time through the cookie settings button in the footer.
- Mobile Product Analytics: The Granite mobile app uses Mixpanel to collect product-interaction, onboarding, subscription, and selected budget or transaction analytics, together with app and device metadata, coarse location derived from your IP address, and limited diagnostic or performance information. These events use an app-scoped anonymous or device identifier and are associated with your Granite user ID after you authenticate. Granite does not use Mixpanel for targeted advertising or cross-app tracking.
- Subscription and Notification Data: If you subscribe or enable push notifications, we collect purchase and entitlement status, an app-scoped user identifier, push token, device identifier, platform, app metadata, and notification preferences needed to provide those features.
- Assistant Interaction Data: If you use Granite Assistant or connect Granite to an AI assistant integration, we collect the prompts you submit, the tool calls made on your behalf, limited request and response metadata, and the categories of financial data accessed to answer your request.
- AI Processing Preference: We store whether you have enabled or disabled external AI processing, the applicable feature scope, provider, consent version, and the date of that choice or withdrawal.
- AI Transaction Capture Data: If you choose to scan a price, we process the photo you select and details visible around the price. If you choose voice entry, your device's speech-recognition service converts the audio into text and Granite processes the final transcript you review. Granite may also process the transaction categories available to you, local date, reporting currency, and limited request metadata needed to return and safely retry a result. Granite's transaction-capture server and external AI provider receive the final transcript rather than the raw voice recording.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain our Service, including calculating your daily budget.
- To personalize your experience.
- To communicate with you, including sending optional notifications and responding to your inquiries.
- To monitor and analyze usage to improve and enhance the Service.
- To provide AI-assisted budgeting, forecasting, categorization, and financial-insight features.
- To turn a photo or reviewed voice transcript that you submit into suggested transaction details for your confirmation.
- To maintain security and transparency logs for fraud prevention, abuse detection, incident investigation, and user-visible audit history when automated assistant actions access your data.
- To enforce our Terms and Conditions.
We do not use customer financial data from assistant interactions to train generalized AI models unless we clearly disclose that practice to you and obtain any consent required by applicable law.
4. AI Processing
Granite may use AI models to turn deterministic budget, transaction, and savings results into plain-language insights. When external AI processing is enabled, Granite may send your prompt and the minimum financial context needed to answer it to an AI provider acting on our behalf. This may include selected transaction summaries, categories, balances, budget context, goals, and assistant tool results.
If you choose AI transaction capture, Granite may send OpenAI the price photo you selected, including surrounding details visible in it, or the final speech-to-text transcript that you reviewed. Granite also sends the categories available for the transaction and limited date or currency context so the model can suggest an item or merchant, amount, date, and category. Granite does not send raw voice audio or bank login credentials to the external AI provider.
External AI processing is used to provide requested insights, improve the clarity of Granite responses, maintain safety and abuse controls, and keep an audit trail of assistant access. Granite does not use AI-assisted outputs to make solely automated legal, credit, insurance, employment, housing, or essential-service eligibility decisions.
Granite identifies AI transaction capture before you use it and presents the result as a suggestion for review. A photo or voice description does not create a transaction by itself. You must confirm the details before Granite saves a manual transaction. AI-assisted outputs can be incomplete or incorrect, so you should review every field.
You can decline optional external AI processing and continue to use available manual entry and deterministic budget features. You may withdraw consent through an available Granite AI control or by contacting us. Withdrawal does not affect processing that was lawful before the withdrawal, and a revised disclosure requires renewed consent before the affected feature can be used.
OpenAI states that API inputs and outputs are not used to train its generalized models by default. Granite does not opt customer content into provider model training. We configure supported requests not to preserve response application state for later retrieval, but the provider may retain limited content and metadata for abuse monitoring for the period permitted by our provider agreement, configuration, and applicable law.
For European users, Granite treats AI-assisted financial insight generation as profiling only to the extent it uses personal financial data to infer spending patterns or budget opportunities. Granite does not use these features for biometric identification, emotion recognition, or solely automated decisions that produce legal or similarly significant effects.
5. Legal Bases for European Processing
Where the European Economic Area or United Kingdom data protection laws apply, Granite relies on one or more of the following legal bases:
- Contract: processing needed to create and administer your account, provide requested budgeting features, save transactions you confirm, and deliver subscription access.
- Consent: optional external AI transaction capture, optional web analytics cookies, and other processing for which Granite asks for a specific choice. You may withdraw consent without losing access to available non-AI manual entry.
- Legitimate interests: securing the Service, preventing fraud and abuse, troubleshooting, maintaining limited operational records, and improving reliability where those interests are not overridden by your rights.
- Legal obligations: records or disclosures required for tax, accounting, consumer protection, lawful requests, sanctions, or other applicable obligations.
6. Data Security
We use administrative, technical, and physical security measures to help protect your personal information. We rely on the security infrastructure of our provider, which includes industry-standard security practices. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.
7. Google Sign-In Data
If you choose to sign in with your Google account, this section explains how we handle your Google data:
Data Accessed
If you choose to sign in with your Google account, we access limited profile information provided by Google, specifically your name, email address, and profile image (if available). No other Google user data (such as Gmail, Drive, Calendar, or Contacts) is accessed.
Data Usage
This information is used solely to authenticate your account, personalize your profile within the app, and facilitate secure login. We do not use your Google data for advertising purposes.
Data Sharing
We do not share Google user data with any third parties except as required to operate the Service (e.g., our backend server). These providers process data only on our behalf and under strict confidentiality obligations.
Data Storage & Protection
Google user data is securely stored on Supabase servers located in the United States. All data is encrypted both in transit (HTTPS/TLS) and at rest. Access is limited to authorized personnel who need the information to operate and maintain the Service.
Data Retention & Deletion
We retain Google user data only while your account is active. When you delete your account or request data deletion, all associated Google user data is permanently deleted from our servers within 30 days.
To request deletion, email hi@granitefinance.io with the subject line "Delete My Data."
8. Your Rights and Choices
You have the right to review, update, or delete the personal information you provide in your account settings. You can also disconnect your financial accounts at any time. If you wish to permanently delete your account and all associated data, please contact us.
Depending on where you live, you may also have rights to access, correct, export, restrict, or object to certain processing of your personal data. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar protections, you may also withdraw consent, object to processing based on legitimate interests, request processing restriction, receive certain information in a portable format, and lodge a complaint with the data protection supervisory authority where you live, work, or believe an infringement occurred. You may request human review where you believe a solely automated decision with legal or similarly significant effects has been made about you. Granite Assistant and AI transaction capture are advisory tools and are not intended to make such decisions.
To exercise a privacy right or withdraw AI-processing consent, use an available in-product control or email hi@granitefinance.io. We may need to verify your identity and will respond within the period required by applicable law. Withdrawing consent does not affect the lawfulness of processing completed before the withdrawal.
9. International Data Transfers
Granite is based in the United States, and Granite and its service providers may process personal information in the United States and other countries that may have different data protection laws from your country. This includes hosting, financial-data aggregation, analytics, subscription, support, and optional external AI processing.
Where European or UK law requires a transfer mechanism, Granite relies on an applicable adequacy decision, the European Commission's Standard Contractual Clauses, the UK transfer addendum or international data transfer agreement, or another legally recognized safeguard. You may contact us for information about the safeguard applicable to a particular transfer.
10. Data Retention and Deletion
We retain your information as long as your account is active. When you delete your account, Granite schedules the associated account and customer data for deletion within 30 days. Our service providers may require additional processing time to complete deletion or de-identification, and we may retain limited records where required by law or for the legitimate purposes described below.
Automated assistant actions and data-access events are logged for 7 days for user transparency, security, and abuse prevention. We may retain related records longer where necessary to comply with law, investigate misuse, resolve disputes, or preserve evidence in connection with a security or fraud incident.
Granite processes a submitted price photo or reviewed voice transcript for the active transaction-capture request. Granite does not place the raw photo or transcript in your customer account or its completed-result retry cache. For safe retries and duplicate-request protection, Granite may retain a cryptographic request fingerprint and the structured suggested result for up to 24 hours. If you confirm the result, the saved manual transaction remains with your account under the normal account-retention rules.
External AI providers may retain limited request content or metadata for safety and abuse monitoring. Depending on Granite's provider configuration and contractual controls, OpenAI states that these logs may be retained for up to 30 days by default, unless a shorter or zero-data-retention control applies, or longer retention is legally required. Device speech-recognition providers handle audio under their own disclosed retention and platform settings.
Apple Subscription Notice
Subscriptions purchased through Apple are managed by Apple. Deleting your Granite account does not cancel an Apple subscription. You can manage or cancel Apple subscriptions at https://apps.apple.com/account/subscriptions.
We may retain limited records when required by law or for legitimate business purposes (for example, payment processor transaction records needed for tax, accounting, chargeback, or fraud prevention obligations). These records are access-limited and retained only as long as required.
You can request data deletion at any time by emailing hi@granitefinance.io with the subject line "Delete My Data." You can also submit a request at granitefinance.io/delete-account.
11. Children's Privacy
Granite is intended only for people who are at least 18 years old. We do not knowingly collect personal information from children or permit them to create Granite accounts. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.
12. Third-Party Services
We use third-party providers like Plaid (see Plaid's Privacy Policy), Supabase for backend hosting and data storage, AI model or inference providers such as OpenAI for external AI processing where enabled, Apple or an available Android service for device speech recognition, Mixpanel for mobile product analytics, Firebase for push notifications, RevenueCat and the applicable app store for subscription management, and Google Analytics for website analytics (only after you consent to analytics cookies).
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. If a change materially expands optional processing that relies on consent, Granite will present a revised disclosure and request a new choice before that processing begins.
14. Contact Us
Granite Finance is the controller responsible for the personal information described in this policy. If you have a question, privacy request, or complaint, email hi@granitefinance.io.
If Granite appoints a data protection officer or a representative in the European Union or United Kingdom, the applicable contact details will be published in this section before they are required for the relevant offering or processing.