Privacy Policy

Under Quebec’s Act respecting the protection of personal information in the private sector (Law 25), we are required to name a person responsible for the protection of your personal information.

That person is Lineu Prompt Graeff, reachable at support@phare.money.

Account information. Your name, email address, and password (stored hashed — we never see it). Your preferred language.

Financial information you enter. Transactions, account balances, budgets, goals, reserve fund provisions, recurring bills, credit card statement dates, and income amounts and schedules. This is the substance of the product: Phare cannot help you without it.

Household information. Which household you belong to, your role in it (owner or member), and the names of people in your household — including people who have no login and exist only so expenses can be attributed to them.

Usage information. A record of significant actions — completing onboarding, opening your monthly review, creating a goal, viewing your timeline. We use this to understand whether Phare is actually useful, not to build a profile of you.

Technical information. Your IP address is processed briefly when you use the sign-up and plan-generation pages, to limit abuse of those pages. It is held in memory only, for a matter of minutes, and is not written to our database.

We do not connect to your bank. Phare has no access to your bank accounts, no read-only credentials, no aggregator. Everything in Phare is there because you or someone in your household entered it or uploaded it.

We do not keep your uploaded files. When you upload a spreadsheet during onboarding, it is read in memory and discarded. We record that an import happened and what it produced — we do not store the file. There is no copy of your spreadsheet sitting on our servers.

We do not sell your data, and we do not advertise. Phare has no advertisers, no data partners, and no analytics companies embedded in it.

Your data is stored with Supabase, our database and authentication provider, in the AWS Canada (Central) region — ca-central-1, located in Montreal, Quebec.

Your financial data is stored in Canada. This was a deliberate choice and we intend to keep it that way.

Phare’s monthly review and financial plan are generated by Anthropic’s Claude, an AI service operated by Anthropic PBC in the United States.

This means your household’s financial information is sent outside Canada. When a plan or review is generated, Phare sends Claude a summary of your household’s finances — income totals, expense totals, category spending, goal targets, debt payoff figures, reserve fund provisions, and similar. It is sent over an encrypted connection, used to produce your text, and Anthropic does not use it to train their models.

We want to be direct about this because it is the single most significant thing to know about how Phare works. If you are not comfortable with your financial summary being processed by an AI service in the United States, Phare is not the right product for you.

What the AI does not do: it does not calculate your numbers. Every dollar figure in your plan and review is computed by Phare’s own code from your ledger. The AI writes the words around numbers it is given — it is never asked to produce a goal, a reserve fund, or a payoff date as data, so it cannot introduce one. Its prose is additionally checked for specific known failure modes, and rejected and regenerated when one is detected.

Phare is built for households managing money together. There is no private data inside a household. Every member — owner or member — can see every transaction, every account, every goal, and every monthly review, regardless of who entered it or whose income it is.

Invite someone to your household only if you are comfortable with them seeing all of it.

We share your information only with the service providers that make Phare work:

Supabase — database, authentication, hosting of your data (Canada)

Anthropic — AI generation of plans and reviews, as described above (United States)

Vercel — application hosting (United States; your financial data is not stored there)

Brevo — sending account emails such as password resets and household invitations (European Union; receives your email address and name, not your financial data)

Stripe — payment processing, once paid subscriptions are available (receives your billing information; Phare does not store your card number)

We do not share your data with anyone else, except where we are legally required to.

We keep your data for as long as your account exists. When you delete your account, what happens depends on whether you are the last person in your household. These two cases have genuinely different outcomes and we want to be precise about them.

If one person leaves and another stays, we erase your identity but not the household’s financial records:

Your login, name, and email address are deleted.

Your entry in the household is kept but relabelled, with your name removed. This is necessary because transactions in the household are attributed to it; removing it would corrupt the remaining household’s records.

The household’s transactions, budgets, and recurring bills stay. These are equally the other members’ financial records, and they did not ask for them to be destroyed.

Monthly reviews and plans generated for the household stay, with your account no longer linked to them. Because these are written in plain language from your household’s figures, a first name may appear inside the text of an older review.

Your usage records stay, with your identity removed from them.

We retain your email address in a deletion log, recording that a deletion was requested and completed. This is an audit record, kept so that a deletion can be proven and so that a partially failed deletion can be found and finished. It is deleted if the household itself is later deleted.

So: if you leave a continuing household, the household still holds financial records that describe things you did — amounts, dates, categories — without your name, email, or login. We think this is the right balance between your right to be forgotten and the other members’ right to their own records, but you should know it before you decide.

Deleting your account deletes everything: your household, your accounts, your transactions, your goals, your reviews, your usage records, the deletion log described above, and your login. Nothing survives.

Under Quebec’s Law 25 and Canada’s PIPEDA, you have the right to:

Access the personal information we hold about you.

Correct it if it is inaccurate. Most of it you can edit directly in the app.

Delete your account, from the Household page. See above for exactly what deletion does.

Take your data with you. The Household page has an export that downloads every transaction in your household as a CSV file you can open in Excel or Google Sheets.

Withdraw your consent, which in practice means deleting your account.

Complain to the Commission d’accès à l’information du Québec if you believe we have mishandled your information: cai.gouv.qc.ca

To exercise any of these, write to support@phare.money. We will respond within 30 days.

Your password is hashed and we never see it. Data is encrypted in transit and at rest. Access to your household’s data is enforced at the database level, so one household’s data cannot be read by another even if the application had a bug.

We do not yet offer two-factor authentication. We intend to add it.

No system is perfectly secure. If a breach occurs that presents a risk of serious injury, we will notify you and the Commission d’accès à l’information as Law 25 requires.

Phare is for adults managing a household. You must be 18 or older to create an account. We do not knowingly collect information from children. Families often name their children in the app — for a child’s expenses, or an education savings goal — but a child has no account and no login.

If we change this policy in a way that matters, we will ask you to review and accept it the next time you sign in. Minor corrections — a typo, a clarified sentence — will be made without asking.

support@phare.money

Lineu Prompt Graeff, sole proprietor — Quebec, Canada