Privacy Policy

This Privacy Policy describes how Polygon Digital LLC, the operator of Alto ("we", "us", or "Alto"), collects, uses, and shares information when you use altobudgeting.com and the Alto applications (the "Service").

1. Information We Collect

Account information. When you create an account, we collect your name, email address, and (if you set one) a password stored as a secure hash by our authentication provider. If you choose Google or Apple sign-in, we receive the account identifier and the name and email that provider makes available, which may include an Apple private relay email address. Google sign-in may also provide a profile image. Sign-in providers may process account details such as a phone number, device information, and IP-derived approximate location to authenticate you and prevent fraud.

Budget and financial data. Alto stores the accounts, transactions, categories, savings goals, and budget settings you create or import, including descriptions and other text you enter. If you connect a bank through Plaid, we store an access token from Plaid that lets us pull your transactions and balances on your behalf. We do not store your bank login credentials.

Apple Wallet data

With your separate permission, Alto reads the eligible Wallet accounts, balances, and transaction history you select on iPhone through FinanceKit. Alto securely syncs this information to your Alto account so you can use it for budgeting across your devices, including the web app. We do not sell this data, use it for advertising, or send its contents to analytics or session recording.

New posted transactions sync when you open Alto on the connected iPhone. A new Alto account starts at its posted Wallet balance; earlier activity is not imported again. Linking an existing Alto account preserves its balance and transaction history. Pending transactions are added after they post. Reconcile your balance if it differs from Wallet.

New or unrecognized devices must verify with a one-time authenticator code before accessing this data. In Apple account settings in Alto, you can disconnect to stop new imports and keep your budget history, or choose Delete imported data to remove Wallet records and their starting balances from the active database immediately. Manual entries stay. Any retained backup copies expire within 30 days. You can also manage Alto’s Wallet access in iPhone Settings under Privacy & Security, then Finance.

Payment information. Subscription payments are processed by Stripe on the web and Apple in the iOS app. We do not store your full payment card number. We store customer or transaction identifiers linked to your Alto account, the purchased plan, subscription status, and billing period dates.

Usage and analytics. We use analytics tools to understand how the Service is used, including page views and feature interactions. We use PostHog for product analytics and Google Analytics on the web. Product analytics can include your Alto account ID, name, email, device and app information, and feature or subscription events. Service providers may derive approximate location from your IP address. We also use Sentry to monitor errors, crashes, and performance. Diagnostic records may include account identifiers, device details, and request information. These records help us keep the app stable.

Notifications. If you enable push notifications, we store a device identifier and push token linked to your account so we can deliver account and budgeting alerts through Apple Push Notification service.

2. How We Use Information

We use the information we collect to provide and improve the Service, authenticate you, sync your bank data through Plaid, process subscription payments through Stripe or Apple, prevent fraud, respond to support requests, and communicate with you about your account.

3. How We Share Information

We do not sell your personal information. We share information with the third-party providers that power Alto:

• Plaid — for bank connections and transaction sync.
• Stripe and Apple — for subscription billing.
• Apple — for Apple sign-in when you choose it and delivery of iOS push notifications.
• Google — for Google sign-in (only if you choose to use it) and Google Analytics.
• PostHog — for product analytics across our app and website.
• Sentry — for error, crash, and performance monitoring.
• Vercel and Supabase — for hosting and database services.

We may also share information when required by law, to enforce our terms, or to protect the rights, safety, or property of Alto or others.

4. Your Choices

You can update your account information, disconnect linked banks, cancel your subscription, or delete your account at any time from the Settings page (or your device's subscription settings). Deleting your account removes your data from Alto's active database and requests disconnection of any linked banks. Deleting your Alto account does not cancel subscriptions purchased through Apple. Cancel those separately in your Apple subscription settings to stop future charges. You can delete your Alto account immediately without waiting for a subscription to expire.

5. Data Retention

We retain your information for as long as your account is active. After account deletion, residual copies may remain in backups for a limited period before being permanently removed.

6. Security

We use industry-standard practices to protect your information, including encryption in transit, hashed passwords, and access controls. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

7. Children

You must be at least 18 years old to use Alto, as stated in our Terms of Service. Alto is not intended for children, and we do not knowingly collect personal information from children under 13.

8. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date. Material changes will be communicated through the Service.

9. Contact

Questions about this policy can be sent to hello@altobudgeting.com.