Privacy Notice

This notice explains how The Financial Playbook (“we”, “us”) handles personal data in the CreditTrack application. For the data you enter into CreditTrack, we act as the data controller. Paddle.com acts as the Merchant of Record for purchases and is the controller for payment data it collects at checkout.

What we collect and why

• Account data — email address, password hash, display name, and sign-in provider. Used to create and secure your account (performance of our contract with you).
• Credit tracking data you enter — card nicknames, issuer names, optional last four digits, credit limits, balances, statement/reporting/due days, minimum payments, APR, planned payments, and reminder dates. Used to calculate utilization and produce your plans and reminders (performance of our contract).
• Preferences — paycheck amount and next payday, target utilization, alert settings, lesson progress, and habit events. Used to personalize the app (performance of our contract).
• Technical and usage data — IP address, device and browser information, and error logs. Used for security, fraud prevention, and diagnosing faults (legitimate interests).
• Support messages — the content you send us. Used to answer you (legitimate interests).
• Membership status — plan, status, and billing period returned by our payment provider. Used to grant access and manage renewals (contract and legal obligation).

We never ask for and do not store full card numbers, CVV codes, or bank credentials. Card payment details are collected and processed by Paddle, not by us.

Who we share data with

• Service providers / subprocessors — cloud hosting and database providers, authentication providers, and error monitoring tooling that process data on our instructions.
• Merchant of Record — Paddle.com, for the sale of memberships, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our rights.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Retention

We keep your account and credit tracking data for as long as your account is active. If you delete your data or your account, we delete or anonymise it, except records we must retain for legal, tax, or fraud-prevention purposes. Technical logs are kept for a short period and then deleted.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, to object to processing based on legitimate interests, and to withdraw consent. If you are in the UK or EEA you also have the right to complain to your supervisory authority, and we aim to respond to requests within one month. You can delete your CreditTrack data at any time from Settings, or email support@credittrack.app.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls so each account can only reach its own records, and least-privilege access for our systems.

Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to remember your theme preference. Our payment provider sets cookies necessary to operate checkout. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

Contact

Privacy questions: support@credittrack.app. See also our Terms & Conditions and Refund Policy.