Stak is operated by Black Oak Digital LLC, doing business as Stak Finance ("Stak," "we," "us"). This policy explains what we collect, why, who we share it with, and how you get rid of it.
Stak is a personal budgeting app. We make money from the app itself. We do not sell your data, we do not share it with advertisers, and we do not use your financial information to market anything to you.
When you create an account we collect your email address, and your name if your sign-in provider gives it to us. You can sign in with Apple, with Google, or with an email and password. Authentication is handled by Supabase. If you use Sign in with Apple's private relay, we only ever see the relay address.
If you connect a bank account, we use Plaid to establish that connection and retrieve your data. Depending on the accounts you link, this can include:
We never see or store your bank username or password. You enter those directly with Plaid or with your bank. Plaid's handling of your credentials is governed by the Plaid End User Privacy Policy.
Categories, budgets, goals, rules, tags, notes, and any photos you attach to a transaction.
Our website uses Google Analytics to understand traffic. This is separate from the app and does not touch your financial data.
Your budget is stored on our servers, so that it follows your account to any device you sign in on. That includes your categories and planned amounts, your transactions with their merchant names and amounts, your goals, your linked account names and balances, your rules, and any photos you attach to a transaction.
This is hosted on Supabase in the United States. It is encrypted in transit and at rest, and protected by row-level security rules that deny access by default, so one user's data is not reachable by another.
To be straightforward about what that means: because we operate the servers, your budgeting data is technically accessible to us. We access it only to operate the service, fix a problem, or when the law requires it. Never to build a profile of you, and never to sell or share for advertising.
Stak also keeps a copy on your device, so the app works without a connection. Changes sync when you reconnect.
Stak includes a chat feature that answers questions about your money. When you send a message, we send your question along with a summary of your current financial context to Anthropic, which operates the AI model. That summary can include merchant names, amounts, dates, category names, your upcoming bills, and your next expected paycheck.
It does not include your name, your email, your account numbers, or your bank credentials.
Anthropic processes this to generate a response. Your data is not used to train their models. If you would rather no financial context leave your device, do not use the chat feature. Every other part of Stak works without it.
We share information only with the service providers that make the app work:
We may also disclose information if the law requires it, or to protect against fraud or abuse. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We keep your account record, your budget, and your bank connection tokens for as long as your account is open. When you close your account we delete them.
You can also clear your budget at any time without closing your account, using Reset my data in Settings. That erases your budget from your devices and from our servers. A backup is saved to your device first, and the server side cannot be undone.
You can access, correct, or delete your information at any time.
If you are a Texas resident, the Texas Data Privacy and Security Act gives you the right to confirm whether we process your personal data, to obtain a copy of it, to correct it, to delete it, and to appeal if we decline a request. Residents of other states may have comparable rights. To exercise any of these, email us at the address below. We will not discriminate against you for asking.
Connections are encrypted in transit with TLS, and your data is encrypted at rest. Bank access tokens are encrypted and are never sent to the app. Every server request verifies your identity first, and our database denies access by default rather than allowing it by default, so a user can only ever read and write their own rows. That is enforced by the database itself rather than by application code.
No system is perfectly secure, but we have built this one so that a mistake fails closed. If a breach ever affects your personal information, we will notify you as required by law.
Stak is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.
Stak shows you your own money and helps you plan around it. It does not provide financial, investment, tax, or legal advice, and nothing in the app, including anything the AI chat feature says, is a recommendation to take or avoid any financial action. You are responsible for your own financial decisions. For advice about your specific situation, talk to a qualified professional.
If we change this policy we will update the date at the top, and we will tell you in the app if the change is significant.
Questions, requests, or complaints:
luke@stakfinance.com
Black Oak Digital LLC d/b/a Stak Finance
Texas, United States
This policy is governed by the laws of the State of Texas.