Privacy Policy
Effective date: 2026-07-11
Last updated: 2026-08-14
This Privacy Policy describes how CreditRichie (“the App,” “we,” “us”) collects, uses, stores, and protects your information. CreditRichie is a personal financial management application developed and operated by Rishi Dasari, an individual developer, for individual and family use.
1. Who We Are
CreditRichie is operated by an individual developer, not a registered company. There is no organizational entity separate from the developer. Questions about this policy or your data can be directed to the contact listed in Section 10.
We collect the following categories of information:
- Account information: the email address and display name you provide when creating an account, and a securely hashed version of your password (we never store your password in plain text).
- Credit card metadata: information you provide about your credit cards, including issuer, card network, the last four digits of the card number, credit limit, statement date, and due date. We do not collect or store full credit card numbers.
- Statement and payment information: statement balances, minimum payments, due dates, and records of payments you make or acknowledge within the App.
- Linked financial account data: if you choose to link a bank or credit card account through our supported third-party aggregator, Plaid, we receive and store account balance, statement, and transaction information made available by Plaid, in order to automatically populate the information described above.
- Authentication data: if you enable multi-factor authentication, we store an encrypted secret used to verify your one-time passcodes.
We use your information solely to operate the App’s core functionality:
- Displaying your credit card balances, due dates, and payment status
- Sending you reminders as payment due dates approach
- Automatically populating account details when you link a financial account via a supported aggregator
- Authenticating your account and protecting it via multi-factor authentication
We do not sell, license, rent, or otherwise share your financial data with third parties for advertising or marketing purposes. The App may display non-targeted, finance-topical advertisements served by third-party advertising networks (such as Google AdMob) or by us directly; these advertisements are not selected, targeted, or personalized based on your financial data, account activity, or any other information collected by the App.
4. Third-Party Services
To provide account-linking functionality, we work with the following third-party financial data aggregator:
- Plaid — used to retrieve account balance, statement, and liability information (statement balance, due date, minimum payment, credit limit) from participating financial institutions.
When you choose to link an account, you authorize Plaid to share your financial account data with the App, subject to its own privacy policy and terms:
- Plaid’s Privacy Policy: https://plaid.com/legal/#end-user-privacy-policy
We do not receive or store your bank login credentials directly; authentication with your financial institution happens through the aggregator’s own secure systems.
5. Data Storage and Security
Your data is stored on infrastructure directly managed by the developer. We implement the following safeguards:
- Passwords are hashed using industry-standard algorithms (argon2id) and are never stored in plain text.
- Sensitive credentials, including third-party aggregator access tokens, are encrypted at rest.
- Access to the underlying infrastructure is restricted and is not exposed to the public internet; remote access, where it exists, requires multi-factor authentication.
- All communication between the App and its backend is encrypted in transit.
No method of electronic storage or transmission is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
6. Data Retention and Deletion
We retain your data for as long as your account remains active. If you request account deletion:
- Your linked third-party aggregator connections will be revoked, terminating our access to your financial data at the source.
- Your account information, card metadata, statements, payment records, and any stored tokens will be deleted from our production systems.
- Any backups containing your data will be purged as part of our standard backup rotation, within 30 days.
To request account deletion, contact us using the information in Section 10, or use the account deletion feature within the App if available.
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Withdraw consent for a linked financial account connection at any time by unlinking it within the App
8. Children’s Privacy
CreditRichie is not directed to, and is not intended for use by, individuals under the age of 18. We do not knowingly collect information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the App after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your data, please contact:
Email: support@creditrichieapp.com