Privacy Policy

Back in Black exists to show you the truth about your money. That only works if you can trust us with it, so here's exactly what we hold, what we do with it, and the controls you have. Transparent as the Phoenix demands. No fine print doing heavy lifting.

What we keep

The essentials, and nothing exotic: your name and email; the accounts you create or connect (names, types, balances, and the last four digits, but never full account or routing numbers); and your transactions (dates, merchants, amounts, categories), whether they arrive by CSV or from a bank you connect. It's your ledger. We store it so you can face it.

Your bank credentials: not ours, ever

Bank connections run through Plaid. When you link a bank, your username and password go to Plaid, not to us. They never touch our servers, and we never see them. What Plaid hands us is an access token for the connection, which we store encrypted (AES-256-GCM) and use for exactly one thing: pulling your balances and transactions so your dashboard tells the truth. How Plaid handles your data is their promise to keep, not ours. Read the Plaid End User Privacy Policy.

The AI that tells you the hard truth

The spending analysis and automatic categorization are powered by an AI model run by a subprocessor, currently Anthropic's Claude. The living list of who does what is always on the Data Processing page. To do their job they're shown transaction details: merchant names, amounts, dates, category labels. Who you are never rides along: your name, your email, and your account identifiers are never sent to the AI provider. The AI sees transaction lines, not the person behind them. That data is sent for processing only. It is not used to train models, and it is not the AI's to keep. And the Phoenix isn't guessing from theory: the principles guiding its analysis come from years of real-world debt management, done the hard way, personally and for family, before a line of this code existed.

What we will never do

We don't sell your data. We don't share it with advertisers. We don't use it for anything other than showing you your own finances. Our product telemetry records that a feature was used, never what was in your transactions. Your debt is your business; helping you burn it down is ours.

You hold the matches

Everything is reversible from Settings, no support ticket required: disconnect any bank (we revoke our own access at Plaid and delete that bank's accounts and transactions), download everything we hold about you as one JSON file, or delete your account entirely. Deletion is immediate, complete, and irreversible. When you walk away, nothing of yours stays behind.

Questions

Ask. Reply to any email from us, or use the contact details on the About page. Straight questions get straight answers.