Privacy Policy

Last updated: October 6, 2026

CredPilot Financial ("CredPilot", "we", "us") is a sole proprietorship registered in British Columbia, Canada. This policy explains what personal information we collect through the CredPilot mobile app and credpilot.app, how we use it, and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

• Account information: your name, email address, password (stored hashed by our authentication provider), and your consent choices at sign-up.
• Card information you enter: card name, issuer, last 4 digits, balance, credit limit, minimum payment, due dates, annual fee, and rewards details. We never ask for or store full card numbers, CVV codes, or PINs.
• Card scanner images: if you use the scanner, a photo of your card is sent to our AI provider to read the card details. The image is processed and not stored by us.
• AI assistant messages: questions you ask the assistant, along with a summary of your card data needed to answer them.
• Location: only if you allow it, to find nearby stores and recommend the best card to use there.
• Bank account data: if you choose to connect a bank, we receive information through our partner Plaid Inc.: account names and the last 4 digits, balances and credit limits, credit card statement details (due date, minimum payment, statement balance, interest rate), and transactions. It is used only to show your cards, bills, cash flow, spending insights and card recommendations in the app. We never receive your bank username or password.
• Waitlist: your name and email if you join our waitlist on credpilot.app.

2. How we use your information

• To run the app: show your cards, balances, bills, rewards, and spending insights.
• To give recommendations, such as which card to use for a purchase or at a store.
• To answer your questions in the AI assistant.
• To send account emails such as sign-in, password reset, and, if you opt in, product updates.
• To keep the service secure, including rate limiting and preventing abuse.

We do not sell your personal information, and we do not share it with advertisers.

3. Service providers we use

We share information only with providers that help us run CredPilot, and only what they need:

• Supabase: database and user authentication (servers in the United States).
• Railway: hosting for our backend server.
• Anthropic: AI processing for the assistant and card scanner.
• Google Maps Platform: nearby store search.
• Plaid: connecting bank accounts, only if you choose to. See Plaid's End User Privacy Policy.
• Resend: sending account emails.
• Vercel: hosting credpilot.app.

Some of these providers store or process data outside Canada, including in the United States, where it may be subject to the laws of that country.

4. Security

All data is encrypted in transit (HTTPS/TLS) and at rest. Database access is restricted with row-level security so each user can only access their own data. You can also turn on Face ID to lock the app on your device.

5. Data retention and deletion

We keep your information while your account is active. You can delete your account and all associated data at any time in the app under Settings → Delete Account. This disconnects your banks and erases your data immediately. You can also ask us to do it by emailing hdeep05@icloud.com from the email on your account; we will delete it within 30 days, except where the law requires us to keep it. If you disconnect a bank account, we delete the Plaid access token for that connection.

6. Your rights

You can ask to access, correct, or delete your personal information, or withdraw your consent, by contacting us. You can turn off location access at any time in your device settings, and unsubscribe from marketing emails using the link in the email.

7. Children

CredPilot is not intended for anyone under 18, and we do not knowingly collect information from minors.

8. Changes to this policy

If we make material changes, we will update the date above and notify you in the app or by email.

9. Contact

CredPilot Financial
Privacy contact: Harmandeep Singh, Founder
hdeep05@icloud.com
British Columbia, Canada