Martian Wealth (“we”, “us”, “the app”) is operated by Martian Labs LLC. This policy explains what data we collect, how we use it, who we share it with, and the choices you have. It covers the Martian Wealth mobile app and our website, martianwealth.com. If you have questions, email support@martianwealth.com.
The short version: we collect what’s needed to run a personal-finance app and nothing else. We don’t sell your data, we don’t show ads, we don’t use your data to train AI models, and your raw transactions are never sent to an LLM.
1. Information we collect
1.1 Account information
When you create an account we collect your name, email address, phone number (optional), and password (stored only as a bcrypt hash — we never see or store your plaintext password). If you sign in with Google or Apple instead, we receive the provider’s user ID, your name, and your email; we do not receive or store provider passwords.
We also keep records tied to your account: whether your email is verified, whether you’ve completed onboarding, and when you accepted our Terms of Service (we timestamp your first acceptance as a record of consent).
1.2 Financial information from linked institutions
When you connect a bank, credit card, or brokerage through Plaid, you give your institution credentials to Plaid directly — we never see your bank login credentials. Plaid then returns to us:
- Your accounts at that institution (name, type and subtype, last 4 digits of the account number, balances, currency). We never receive full account or routing numbers.
- Transactions (date, merchant, amount, category, payment channel, pending status, merchant enrichment such as logo and website, merchant location where your institution provides it, and counterparty details) — as much history as your institution makes available through Plaid, and ongoing thereafter.
- Recurring transaction patterns (e.g. subscriptions and paychecks) that Plaid detects.
- For brokerage accounts: investment holdings (security, ticker, quantity, cost basis, value) and investment transactions (buys, sells, dividends, fees) covering up to the last 24 months and ongoing thereafter.
- An access token for the connection, which we encrypt with AES‑256‑GCM before it is written to our database.
To power Plaid’s faster re-linking experience for returning users, we share your phone number with Plaid when you open the “add institution” flow. You can read Plaid’s End User Privacy Policy at plaid.com/legal. Plaid’s mailing address is Plaid Inc., 1098 Harrison Street, San Francisco, CA 94103.
1.3 Apple Card (FinanceKit)
If you grant access on an eligible iPhone (iOS 17+), we read your Apple Card accounts and transaction history through Apple’s FinanceKit API. Access is controlled by an on-device permission prompt you can revoke at any time in iOS Settings. Synced Apple Card data is stored on our servers under the same security controls as Plaid data.
1.4 Manual accounts and transactions
Accounts and transactions you enter by hand are stored like any other account data and included in your dashboards and totals.
1.5 Dashboard prompts
When you ask for a dashboard, we send your natural-language prompt to Google Gemini, which returns only a dashboard structure (widget types and query criteria). We never send your transactions, balances, or account details to the LLM. Your data is fetched from our own database, server-side, after the structure comes back. We store your prompt alongside the resulting dashboard so you can re-run or refine it later.
1.6 Preferences and goals
We store product preferences tied to your account: saved and pinned dashboards, per-category monthly spending goals, and any investment holdings you’ve chosen to hide from your totals.
1.7 Biometric unlock
If you enable Face ID / Touch ID app lock, biometric matching happens entirely on your device, run by iOS or Android. We never receive, store, or have access to your biometric data — the app only learns whether the device reported that unlock succeeded.
1.8 Technical information
We collect server-side logs (request URLs, timestamps, status codes, error stack traces, your IP address, and your account ID) for debugging, rate limiting, and abuse prevention. We do not bundle third-party analytics, advertising, or tracking SDKs in the app, and our marketing website sets no tracking cookies. Like most websites, our site loads its fonts from Google Fonts, so Google receives standard request data (such as your IP address) when a page loads.
1.9 Market data (not personal data)
To price your investments we fetch security quotes from Twelve Data. Those requests contain ticker symbols only — never your identity, holdings quantities, or account details.
2. How we use your information
We use your information to:
- Provide the core features of the app — account linking, transaction sync, dashboards, investment tracking, spending goals.
- Send transactional emails (verification, password reset, account deletion confirmation, security alerts). We use email for service messages, not marketing.
- Secure the service — detect and prevent abuse, fraud, token theft, and other security incidents.
- Comply with legal obligations.
We do not:
- Sell your data or share it with data brokers.
- Use your data for advertising, ours or anyone else’s.
- Use your data to train machine-learning or AI models.
- Track you across other companies’ apps or websites.
3. Who we share information with
We share data only with the service providers needed to run the app:
| Provider | Purpose | Data shared |
|---|---|---|
| Plaid | Bank, card, and brokerage linking; transaction and investment sync | Your institution credentials (given by you directly to Plaid — we never see them), your phone number (for faster re-linking), and our queries for your account data |
| Apple | Sign in with Apple; Apple Card sync via FinanceKit (only if you use them) | Your Apple user ID; FinanceKit data is read with your on-device permission |
| Google sign-in (only if you use it); Gemini dashboard generation | Your Google user ID and the email/name Google returns; your dashboard prompt text — no transaction records | |
| Twelve Data | Live and historical security prices | Ticker symbols only — no personal data |
| Amazon Web Services | Hosting, database, and email delivery (SES) | All app data, encrypted in transit and at rest |
These providers process data on our behalf and are not permitted to use it for their own advertising. We may also disclose information if required by law, subpoena, or to protect the rights, property, or safety of our users or the public.
4. How we protect your information
- Institution access tokens are encrypted with AES‑256‑GCM before being written to the database. Encryption keys live in AWS Secrets Manager — never in the database or codebase.
- Passwords are hashed with bcrypt (cost factor 12), and we enforce a minimum password strength on all new passwords.
- All traffic between the app and our servers uses HTTPS/TLS; our database is encrypted at rest and reachable only from inside our private network.
- Sign-in sessions use short-lived access tokens plus rotating refresh tokens that are stored hashed; reusing an old refresh token triggers revocation of all sessions for that account.
- Account deletion requires a one-time confirmation code sent to your email. We store only a keyed hash of that code, it expires after 15 minutes, and it is invalidated after too many wrong attempts — so a stolen phone session alone can’t delete your account.
- Access to production infrastructure is restricted to authorized personnel and protected by multi-factor authentication.
No system is perfectly secure. If you believe your account has been compromised, email support@martianwealth.com and we’ll help you lock it down. You can read more about our approach on the Security page.
5. How long we keep your information
- Account and financial data: until you delete your account, after which we delete or anonymize it within 30 days.
- Connected-institution data: deleted immediately when you disconnect an institution — its accounts and transactions are removed from our database right away.
- Server logs: 90 days.
- Refresh tokens: rotated continually; revoked tokens are kept for 30 days for security forensics.
- Deletion confirmation codes: expire after 15 minutes; only a keyed hash is ever stored.
6. Your rights and choices
You can:
- Access or export your data — email support@martianwealth.com and we’ll send you a machine-readable export within 30 days.
- Correct your information — email support@martianwealth.com and we’ll fix your name, email, or phone number.
- Delete your account from the in-app settings panel (Settings → Delete account). We’ll email you a one-time confirmation code; entering it permanently deletes your account, bank connections, accounts, transactions, dashboards, goals, and sessions, and we send a final confirmation email once it’s done. You can also request deletion by emailing us.
- Disconnect an institution at any time from the Accounts screen, which revokes the Plaid access token and immediately deletes that institution’s accounts and transactions from our database.
- Revoke Apple Card access at any time from your iPhone’s privacy settings or by disconnecting Apple Card in the app.
- Object to processing or request restriction — email us and we’ll comply where legally required.
Where the GDPR applies, our legal bases for processing are performance of our contract with you (providing the app), our legitimate interests in securing and operating the service, your consent where required, and compliance with legal obligations.
If you’re in the EU/UK (GDPR), California (CCPA/CPRA), or a similar jurisdiction, you additionally have the right to know the categories of personal information we collect (listed in section 1), the right to data portability, the right to non-discrimination for exercising your rights, and the right to lodge a complaint with your local supervisory authority. We honor these requests for all users regardless of location. We do not “sell” or “share” personal information as those terms are defined in the CCPA/CPRA.
7. International users
We operate from the United States and store data on AWS infrastructure in the United States. If you use Martian Wealth from outside the U.S., your information is transferred to and processed in the U.S. under the safeguards described in this policy.
8. Children
Martian Wealth is not intended for children under 13, and we do not knowingly collect data from children under 13. If you believe a child has provided us information, email support@martianwealth.com and we will delete it.
9. Changes to this policy
We may update this policy as the app evolves. Material changes will be announced in-app or by email at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the latest version.
10. Contact
Martian Labs LLC
Email: support@martianwealth.com