Privacy Policy

Qualaby ("we," "our," or "us") operates the personal finance management application available at https://app.qualaby.com. This Privacy Policy explains how we collect, use, store, and protect your personal and financial information when you use Qualaby.

We collect the following categories of information: • Account information: your email address and authentication credentials when you create an account. • Financial account data: bank account names, balances, and transaction history retrieved through Plaid Technologies, Inc. ("Plaid") when you choose to link your financial accounts. • Transaction data: dates, amounts, merchant names, and categories for transactions you import or that are synced via Plaid. • Usage data: information about how you interact with the application, stored solely to provide and improve the service. We do not collect your bank account numbers, Social Security numbers, or login credentials for your financial institutions. Those are handled exclusively by Plaid and are never transmitted to or stored by Qualaby.

We use your information solely to provide the Qualaby personal finance management service, including: • Displaying your financial accounts, balances, and transaction history within the application. • Enabling you to categorize, analyze, and manage your household finances. • Syncing new transactions from your linked financial institutions via Plaid. We do not sell, rent, share, or use your data for advertising, marketing, or any purpose other than providing the service you signed up for.

Qualaby uses Plaid to connect to your financial institutions. When you link an account, you interact directly with Plaid's secure Link interface. Qualaby receives and stores only the access token and account metadata returned by Plaid — your bank credentials are never seen or stored by Qualaby. Plaid's own privacy policy is available at https://plaid.com/legal/. By linking a financial account, you also agree to Plaid's privacy policy and end user privacy notice.

All data is stored in Supabase, a cloud database platform that encrypts data at rest using AES-256 and in transit using TLS 1.2 or higher. Access to your data is enforced by row-level security policies — no other user or administrator can access your financial data. Plaid access tokens are stored encrypted in our database and are used only to retrieve your transaction data on your behalf.

We retain your data for as long as you maintain an active Qualaby account. You may request deletion of your account and all associated data at any time by contacting us at the email address below. Upon deletion, all your financial data, transaction history, linked account tokens, and personal information are permanently removed from our systems within 30 days.

You have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data at any time. • Revoke Plaid's access to your financial institution by contacting us or by visiting https://my.plaid.com. • Export your transaction data from within the application. To exercise any of these rights, contact us at support@qualaby.com.

Qualaby uses the following third-party services to operate: • Supabase (database and authentication) — supabase.com/privacy • Vercel (hosting and deployment) — vercel.com/legal/privacy-policy • Plaid (financial data connectivity) — plaid.com/legal/ • Stripe (billing and payment processing) — stripe.com/privacy • Resend (transactional email) — resend.com/legal/privacy-policy Each of these services has its own privacy policy governing their handling of data.

Qualaby is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Qualaby after changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or concerns, contact us at: support@qualaby.com