Last updated: October 6, 2026
Stewardfi LLC (“Stewardfi,” “we,” “us”) provides CPA-delivered personal financial statements. This policy explains what information we collect, how we use it, who else handles it, and how long we keep it. It covers the Stewardfi website and web app and the Stewardfi mobile app.
Account Information: Your name, email address, phone number, and mailing address, and your sign-in. Your password is handled by our sign-in provider (Supabase) and stored only in hashed form.
Financial Data from Your Banks: When you connect an account through Plaid, we receive its name, type, last four digits, and balance, and its transactions (date, description, merchant, and amount), with the other details the bank sends about each one — such as the bank's original description, the merchant's website and logo, where and how it was paid, the other party, and check numbers. We never keep the other party's account numbers. For credit cards and loans we may also receive the balance owed. For investment and retirement accounts we receive balances only — not holdings, trades, or cost basis.
Information You Give Us: Accounts and balances you enter by hand, transaction files you upload, names and notes you add, messages you send your CPA, the businesses you tell us about and which accounts and transactions belong to them, and household members you invite.
Your Engagement Letter Signature: When you sign the engagement letter we record your legal name, the time, your IP address, your device and browser, and the exact text you signed.
Payment Information: Processed by Stripe. We keep only Stripe's references to your customer record and subscription — never your card number.
Waitlist: If you ask to join the waitlist, your name and email address, so we can invite you. When you sign up, your waitlist entry is linked to your account. You can ask us to remove it at any time.
Cookies: We use cookies only to keep you signed in (and, on the demo, to show demo data). We use no advertising or analytics trackers.
We use your information to deliver your monthly financial statements; to show your dashboard, spending, accounts, and net worth; to categorize your transactions and spot recurring charges; to send you service emails; to bill your subscription; and to keep the service secure and fix problems. We do not sell your information or use it for advertising.
AI (Claude, by Anthropic): We use Claude for two things: suggesting categories for transactions, and drafting the notes on your statements. Anthropic does not use data sent through its API to train its models.
Categorizing transactions: When our rules can't place a transaction in a category, we ask Claude to suggest one. For that transaction we send Anthropic a redacted copy of its text — the description and merchant name, with the names of people removed where we can recognize them (for example, in Zelle, Venmo, and payroll entries) — plus its amount and Plaid's category for it. For categorizing, nothing else about you or your accounts is sent — not your name, email address, or balances. (Bank text sometimes includes other details, such as the last digits of an account.) A licensed CPA goes through every categorization before a statement is delivered. When your CPA adds a new category while going through a transaction, we ask Claude to suggest its details (such as where it goes on your statement) from the category's proposed name, that transaction's redacted merchant name, and Plaid's category for it — nothing else.
Drafting statement notes: Each page of your monthly statement ends with notes on what stood out that month. To draft them, we send Anthropic that page's figures — the names of its categories or groups (such as “Food & Dining” or “Investments”) with this month's and last month's amounts and the change — and the transactions behind each line: the merchants that make it up, with their cleaned names, totals, and how many transactions; the largest single transactions, with their dates and amounts; one-time purchases; and, once there are earlier months, how the line and its merchants compare with them. For the What You Own and Owe page, that means your balances by group (such as Cash, Investments, and Mortgage), your net worth, and the largest amounts moving in and out of those accounts. A business is identified only by a placeholder, never by its name. We never send your name, your account names or numbers, or a transaction's own description. A payment to or from a person is sent only as the service used (for example, “Venmo”), never the person's name, and other merchant names have people's names removed where we can recognize them. AI drafts, your CPA edits and finalizes every note. No note reaches you until your CPA has approved it.
You; your CPA at Stewardfi, who sees all of your data; members of your household; and the service providers listed below, each only as its job requires.
Households: If you invite someone to your household, they can see the household's accounts, transactions, and statements. Account-by-account visibility controls are not available yet. To keep an account separate or to leave a household, contact us at support@stewardfi.ai.
Bank connections go through Plaid. Your bank login is entered with Plaid and never stored by Stewardfi. Our access is read-only — we cannot move money.
Data is encrypted in transit and at rest. Plaid access tokens are kept encrypted in Supabase Vault. Database access rules (row-level security) let each client reach only their own data.
Deleting your account: You can delete your account at any time in the Stewardfi app (Settings, then Delete Account), or ask us at support@stewardfi.ai and we will delete it. Deleting your account removes your sign-in, your waitlist entry, and your financial data — accounts, balances, transactions, categorizations, bank connections, and messages — from our live systems, ends our access to your banks through Plaid, and cancels your subscription.
Backups: Deleted data may persist in routine database backups for a limited period before it is purged.
What we keep for seven years: As our engagement letter provides, we keep our professional records for seven (7) years after our engagement ends: the statements we delivered to you (including their PDFs), the record of each month's close, the log of activity on your statements, and your signed engagement letter — with your name and contact details, so the records remain identifiable. We keep these even if you delete your account. Backup copies of your statement PDFs are kept for the same seven years.
If you cancel: Canceling your subscription does not delete your data. It stays until you delete your account or ask us to delete it.
A copy of your data: You can download your data at any time from Settings in the web app (Export All Data), or ask us for a copy.
Stripe and Plaid keep their own records under their own privacy policies.
These companies handle client data for us, and only these:
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information (subject to the records we keep, described above), and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@stewardfi.ai.
As a provider of financial services, Stewardfi maintains a Written Information Security Plan (WISP) in compliance with the Gramm-Leach-Bliley Act. We implement administrative, technical, and physical safeguards to protect your nonpublic personal information.
Questions about this policy? Email privacy@stewardfi.ai or support@stewardfi.ai.
© 2026 Stewardfi LLC. All rights reserved.