← Back to home

Privacy Policy

Last updated: July 11, 2026

Zowda, Inc. (“Zowda,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in using a third-party provider (such as Google or Apple), we receive basic profile information from that provider.

Financial Data

If you choose to link external financial accounts, our third-party data aggregation provider retrieves account balances, transaction histories, and account metadata (institution name, account type, etc.) on your behalf. Zowda does not receive or store your financial institution login credentials.

User-Created Data

We store data you create within the Service, such as budgets, spending categories, chat messages with the assistant, notes, and preferences.

Payment Information

When you subscribe to a paid plan, payment details (such as credit card number and billing address) are collected and processed by our third-party payment processor. We do not store full payment card numbers on our servers. We may receive limited billing information such as the last four digits of your card, card brand, and expiration date.

Affiliate and Referral Information

If you apply to our affiliate program, Dub may collect your application, contact, identity, tax, and payout-onboarding information so Zowda can review the application and prepare an accepted account. When someone follows an affiliate link, we and our provider may collect the link and click identifier, referring page, timestamps, device and technical information, and related lead, subscription, refund, commission, and payment events. Zowda uses an opaque customer identifier when reporting a verified sale rather than using the customer’s email address as the reporting key. To enforce the Program’s no-self-referral rule, Zowda may compare a verified customer email with an affiliate email on our servers and store only a versioned keyed digest and the eligibility result. We do not send the customer email to Dub for that comparison.

Usage Data

We automatically collect information about how you interact with the Service, including pages viewed, features used, timestamps, referring URLs, and actions taken within the application.

Device and Technical Data

We collect device type, operating system and version, browser type, IP address, unique device identifiers, and general location information derived from your IP address.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including syncing financial data, generating budgets, and tracking your goals.
  • Process transactions and manage your subscription.
  • Review affiliate applications, administer identity, tax, and payout onboarding, and prevent program abuse.
  • Attribute eligible referrals, apply an affiliate discount, calculate and adjust commissions, and administer affiliate payouts.
  • Send you service-related communications, such as account verification, billing confirmations, technical notices, and security alerts.
  • Improve, personalize, and develop new features based on aggregated usage patterns.
  • Detect, prevent, and address fraud, abuse, and technical issues.
  • Comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We share data with third-party vendors who perform services on our behalf, such as payment processing, data aggregation, cloud hosting, affiliate attribution and program administration, managed payouts, analytics, AI/LLM inference, and operational tracing. These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures.
  • Affiliate Platform: We use Dub to host affiliate applications and dashboards and complete identity, tax, and payout onboarding. Dub also manages referral links and attribution, records commissions, and facilitates managed payouts. Dub may process affiliate information for those purposes under its own terms and privacy notice.
  • Financial Data Providers: When you link a financial account, your authorization is shared with our data aggregation partner to retrieve your financial data. Their use of your data is governed by their own privacy policy.
  • Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. AI Processing and Third-Party AI Providers

Zowda’s assistant and Pulse insights are powered by third-party AI providers. We use Anthropic and OpenAI for AI inference, and Langfuse for operational monitoring and tracing.

When you use AI-powered features, we may send these providers the information needed to generate assistant responses and financial insights, including chat messages, linked account names and balances, transaction details such as date, amount, merchant, and category, budget and income summaries, and recent conversation history. This information is collected from your chat input and from linked financial accounts retrieved through our data aggregation provider.

We do not send your name, email address, sign-in credentials, or bank login details to our AI providers. Financial data shared with these providers is associated with a random account identifier rather than your name.

We use this AI processing only to generate assistant responses, create Pulse insights, and monitor and troubleshoot the Service. We do not use this data for advertising. Our AI and tracing providers are contractually bound to protections at least as protective as ours, and they do not use this data for advertising or to train their models.

Zowda obtains your in-app consent before sending personal data to these AI providers. You may withdraw that consent by contacting us at privacy@zowda.com .

5. Data Security

We implement industry-standard security measures to protect your information, including encryption of data in transit (TLS) and at rest, access controls, and regular security reviews. Our infrastructure is hosted on Google Cloud Platform, which maintains SOC 2, ISO 27001, and other compliance certifications. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our agreements). Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely.

For the affiliate program, we ordinarily delete or irreversibly deidentify non-converting attribution data and terminal raw event and application logs within 90 days. We ordinarily delete unnecessary application and routine support detail within two years after closure, identifiable privacy-request logs within three years after closure, and obsolete Zowda-controlled backup copies within a rolling 90-day lifecycle. We retain minimized Affiliate Terms acceptances, eligibility, converted-attribution, commission, adjustment, payout, tax-status, sanctions, and enforcement records for as long as reasonably necessary to administer and audit the program, calculate and reconcile payments, prevent and investigate fraud, enforce agreements, resolve disputes, comply with legal obligations, and preserve financial and compliance history. Those minimized records have no fixed deletion date while a documented purpose continues. We remove unnecessary raw or directly identifying fields and honor applicable privacy rights. Law, a scoped legal hold, security risk, provider obligations, or material cost and capacity risk may require a longer or shorter period. Sanctions records remain subject to any mandatory minimum period. An opaque, hashed, or pseudonymous identifier is not anonymous while Zowda or a provider can relink it.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete personal information.
  • Delete your personal information, subject to certain exceptions.
  • Export your data in a portable format.
  • Opt out of certain data processing activities.

To exercise any of these rights, please contact us at privacy@zowda.com . We will respond to your request within 30 days, or as otherwise required by applicable law. We will not discriminate against you for exercising your privacy rights.

8. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale or sharing of personal information. As stated above, we do not sell your personal information. To exercise your rights, contact us at privacy@zowda.com .

9. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, understand how you use the Service, and attribute an eligible affiliate referral. Mobile attribution may also use an app link and the Google Play Install Referrer. The types of cookies and similar technologies we use include:

  • Essential cookies: Required for the Service to function, such as authentication and session management.
  • Analytics cookies: Help us understand usage patterns so we can improve the Service.
  • Affiliate attribution: Records an eligible referral click so a later subscription can be attributed within the program’s 30-day attribution window and an available customer discount can be applied. We use this as first-party referral functionality, not for cross-context behavioral advertising.

You can control cookies through your browser settings and any choices we make available. Disabling an affiliate attribution technology may prevent referral credit or an affiliate discount; disabling essential cookies may prevent certain features from functioning properly.

10. Third-Party Services

The Service may contain links to or integrate with third-party websites, applications, or services. This Privacy Policy applies only to the Zowda Service. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you interact with through Zowda.

11. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@zowda.com , and we will take steps to delete such information.

12. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries as described in this policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the “Last updated” date above. We may also notify you via email or through an in-app notice. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@zowda.com . You may also reach us through our Terms of Service contact information.