Last updated: May 24, 2026
Privacy Policy
Your privacy matters. This policy explains exactly what we collect, why, and how it's protected.
1. What We Collect
We collect only what is necessary to provide the Service:
Account information
- Email address — used to identify your account and send account-related emails (e.g. password reset)
- Password — stored as a secure hash by Supabase Auth. We never see your plaintext password.
Financial data you enter
- Account names and types (e.g. "Main Checking", savings)
- Transaction details: payee name, amount, date, category, notes, status
- Recurring schedule details: name, frequency, amount, next date
This is data you type in manually. LookAhead does not connect to your bank and never receives actual bank credentials.
Activity log
We record an audit trail of actions taken within your account (e.g. "Created transaction · Netflix"). This log is visible only to you and is stored per-account.
Usage data
Standard server logs (IP address, browser type, pages visited) may be retained briefly by our hosting provider (Vercel) for operational purposes. We do not use these for tracking or advertising.
2. What We Do NOT Collect
We never collect or store:
- Bank account numbers or routing numbers
- Credit or debit card numbers
- Social Security numbers or national ID numbers
- Bank login credentials
- Real-time bank data (no Plaid or bank API connections)
- Government-issued ID
- Biometric data
3. How We Use Your Data
Your data is used solely to:
- Display your financial forecast and transaction history to you
- Generate projections and reconciliation features
- Authenticate you and secure your account
- Send account-related emails (password reset, email confirmation)
We do not use your data for advertising, profiling, or any purpose other than providing the Service to you.
4. Data Storage and Security
Your data is stored in Supabase, a managed database platform. Data is encrypted at rest and in transit (TLS). Row-Level Security (RLS) policies ensure that each user can only access their own data — even if someone obtained the application's API key, they could not read your records.
The application is hosted on Vercel and served exclusively over HTTPS.
Despite these measures, no system is perfectly secure. We encourage you to use a strong, unique password and enable any available account protection features.
5. Cookies and Sessions
We use a single httpOnly session cookie to keep you logged in. This cookie cannot be accessed by JavaScript and is not used for tracking. We do not use advertising cookies, analytics cookies, or third-party tracking pixels.
6. Data Sharing
We do not sell, rent, trade, or share your personal data with any third party, except where required by law or to operate the Service (Supabase for database hosting, Vercel for application hosting). These providers are bound by their own privacy policies and do not have permission to use your data for their own purposes.
7. Your Rights
You have the right to:
- Access — view all data associated with your account within the app
- Delete — permanently delete your account and all associated data from Settings. Deletion is immediate and irreversible.
- Correct — edit any transaction, schedule, or account name directly in the app
- Export — contact us to request a copy of your data in a portable format
8. Data Retention
Your data is retained as long as your account is active. When you delete your account, all associated data — transactions, schedules, audit logs, and account records — is permanently deleted from our database.
9. Children
LookAhead is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes are posted means you accept the updated policy.
11. Contact
If you have questions about this Privacy Policy or want to exercise your data rights (access, deletion, or export), email us at privacy@lookahead.life.