1. Overview
Fortûn ("we," "our," or "us") is a personal financial planning application designed to help individuals plan for retirement and manage their finances. This Privacy Policy explains how we collect, use, store, and protect your personal and financial information when you use our platform.
2. Information We Collect
We collect the following types of information:
- Account Information: Name, email address, and authentication credentials.
- Financial Profile: Age, income, marital status, retirement goals, and other financial details you voluntarily provide.
- Account Balances: Investment account balances, debt information, and net worth data you enter manually or connect via Plaid.
- Simulation Data: Retirement projections, Monte Carlo simulation results, and financial goals you create.
- Subscription & Billing Data: Plan type (monthly or annual), billing cycle, subscription status, and payment provider customer ID. We do not store full credit card numbers — payment details are handled securely by our payment processor.
- Usage Data: Pages visited, features used, and interaction patterns within the app.
3. How We Use Your Information
Your information is used solely to:
- Provide and personalize the Fortûn financial planning experience.
- Run retirement simulations and generate financial projections.
- Save your financial data so it persists between sessions.
- Improve the application's features and functionality.
- Communicate important updates about the service.
We do not sell your personal or financial data to third parties. We do not use your data for advertising purposes.
4. Third-Party Integrations
Fortûn may integrate with the following third-party services:
- Plaid: If you choose to connect bank or investment accounts, Plaid securely retrieves read-only account and balance data. Plaid's own Privacy Policy governs their data handling. We do not store your bank credentials.
- Payment Processor: When you subscribe to Fortûn Pro, our payment processor handles all billing transactions. The processor receives your payment method details (e.g., credit card) directly — we never see or store full card numbers. We only receive confirmation of your subscription status and a customer identifier to manage your plan.
- Base44: Our application is built on the Base44 platform, which provides infrastructure, authentication, and database services.
5. Data Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. All data is transmitted over HTTPS and stored in secured, access-controlled databases. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Specific safeguards include:
- Household-level data isolation: Every record you create is scoped to your household. Row-level security enforces this on every read, write, update, and delete — no other user can access your financial data, and you only share data by explicitly inviting a collaborator.
- Encryption in transit: All communication between your device and our servers is encrypted over HTTPS.
- Encrypted linked-account tokens: When you connect a bank or investment account through Plaid, the access tokens we store are encrypted at rest. Your bank login credentials are never stored by us — Plaid handles that connection with secure, read-only access.
- Payments handled by our processor: We never see or store your full credit or debit card numbers. Our payment processor receives payment details directly and returns only a customer identifier and subscription status.
- Verified billing webhooks: Subscription and billing events are cryptographically signature-verified before any change is applied to your account.
- Restricted administrative access: Administrative functions are limited to authorized operators and are never exposed to standard users.
6. Data Retention
We retain your data for as long as your account is active. If you request account deletion, we will delete your personal and financial data within 30 days, except where we are required to retain it for legal obligations. See our Data Deletion Policy for details on how to request deletion.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing of your data.
- Export your data in a portable format.
To exercise any of these rights, please visit our Data Deletion & Request page or contact us directly.
8. Cookies
Fortûn uses authentication tokens stored in your browser to keep you logged in. We do not use third-party tracking cookies or advertising cookies.
9. Children's Privacy
Fortûn is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact Us
Fortûn is operated by Fortun Technology LLC. If you have questions or concerns about this Privacy Policy, please reach out through the Feedback section within the app.