This Privacy Policy explains how Capitowl™ (“we” or “our”) collects, uses, and discloses personal information when you use our mobile application (“App”). This policy also includes information specific to residents of California, as required under the California Consumer Privacy Act (CCPA).
We collect the following types of personal information:
- Account information. When you register, we collect your email address and any name or contact details you provide.
- Financial information you connect. When you link a bank, card, brokerage, or crypto exchange account, our account aggregation providers (Plaid and Akoya) or the exchange itself (Coinbase) retrieve account and transaction details on your behalf, and we store them to provide the App. Your login credentials for those institutions are entered with the provider and are never stored by Capitowl. If you add a crypto wallet by address, we send that address to a blockchain data provider to read its balances.
- Mailbox information, if you connect one. If you connect a Gmail or Outlook mailbox, we read the messages that match receipts, statements, and subscriptions, and store those messages and attachments.
- Usage information. We collect how you use the App: screens viewed, features used, and actions taken. This is sent to our analytics provider together with your account identifier and five coarse account attributes: subscription state, a bucketed count of connected institutions, setup stage, notification permission, and platform. Amounts, balances, account names, and transaction details are never included in analytics.
- Crash and error reports. If the App crashes or hits an error, a report is sent to our crash reporting provider. These reports carry a device-scoped installation identifier, never your account, name, or email.
- Performance information. With usage analytics enabled, we collect app performance data: how long the App takes to start, how quickly each screen renders (including slow and frozen frames), and the timing of the App's network requests, including the URL path each request was made to. A URL path may contain an opaque resource identifier but never a query string. Like our crash and error reports, these records carry a device-scoped Firebase installation identifier — never your account, name, or email — and are never used to track you across other companies' apps or websites.
- Assistant conversations. If you use the in-app assistant, the messages you send and a snapshot of your accounts needed to answer (account names, last four digits, balances, budgets, and recurring payments) are sent to our AI model providers. When the assistant looks up your profile, that lookup can include your name, phone number, date of birth, and account identifiers.
- Device information. Device type, operating system, unique device identifiers, push notification tokens, and mobile network information.
- Location. With your consent, your device’s precise location.
We use personal information to:
- Provide and maintain the App and its features.
- Personalize your experience and improve our services.
- Communicate with you about updates, news, and promotional offers related to the App, subject to your consent where required by law.
- Analyze usage patterns and trends, and monitor and improve the performance and functionality of the App.
- Comply with legal obligations and enforce our Terms of Use.
Data Sharing and Service Providers
We share personal information with service providers that perform functions on our behalf. Each receives only the information necessary for its function and is bound to keep it confidential and secure. The categories are:
- Account aggregation and exchanges: retrieve account and transaction data from institutions and exchanges you connect.
- Authentication: sign-in and account security.
- Payments and subscriptions: the app stores and our subscription service. Capitowl never receives your card number.
- Analytics, crash reporting, and performance monitoring: usage measurement, stability, and app performance measurement, as described above.
- Customer support: the support chat inside the App.
- AI model providers: the in-app assistant, as described above.
- Cloud hosting and processing: the infrastructure the App runs on, including extracting text from receipts you upload or that arrive in a connected mailbox.
- Mailbox providers: Google and Microsoft, when you connect a mailbox.
- Blockchain data providers: balances for crypto wallets you add by address.
- Market and reference data: prices and identifiers for securities, crypto assets, and property values. These providers receive no personal information.
The current list of providers by name, what each receives, and whether deleting your account removes your information from it is published at capitowl.io/service-providers and kept up to date as providers change.
Referrals. If you join Capitowl through someone's referral link or referral code, that person can see your first name, the first letter of your last name, the date you joined, and whether their referral reward was earned. Members of the Capitowl Partner Program do not see this information about people who join through their link.
We may also disclose personal information if required by law or in response to valid legal requests, such as subpoenas or court orders, and, if we are involved in a merger, acquisition, or sale of assets, as part of that transaction, with appropriate measures to keep it confidential.
Data Security
We prioritize the security of your personal information and implement reasonable technical and organizational measures to protect it from unauthorized access, loss, misuse, or alteration. No data transmission over the internet or electronic storage method can guarantee absolute security.
Your Choices
- Usage analytics and crash reporting. In the App, Settings → Support → “Share Usage Analytics” turns usage analytics, crash reporting, and performance monitoring off on that device. It is on by default. Turning it off does not affect the App’s features. None of these run while you're in Demo Mode.
- Connected accounts and mailboxes. You can disconnect any linked institution or mailbox from within the App at any time.
- Notifications and location. Push notifications and location access are controlled through your device settings.
Your Rights
You may have certain rights regarding your personal information, which may include:
- The right to access, correct, or update your personal information.
- The right to request the deletion of your personal information, subject to legal limitations.
- The right to object to or restrict the processing of your personal information in certain circumstances.
- The right to withdraw your consent, where applicable.
If you are a California resident, you have additional rights under the CCPA, including the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the right to request deletion of personal information we have collected from you, and the right not to be discriminated against for exercising your privacy rights.
To exercise your rights or for any privacy-related inquiries, contact us using the information below.
Data Retention and Deletion
Your data is yours. This section explains, precisely, what happens when you delete your account.
Data Ownership
All data you input into or authorize to be downloaded by the App remains your property, including external transaction records, account records, drive and trip data, records and receipts you provide, and any other information you input that is not subject to mandatory retention.
Deleting Your Account
You can delete your account from Settings → Delete Account. When you do:
- Straight away, we sign you out on every device and disable your login, and we begin disconnecting your linked bank, card, and exchange connections, retrying until each one is revoked.
- For 30 days, your account is in a grace period. You can contact support to stop the deletion during this time. Stopping it keeps your data; restoring your login is a separate step our support team completes with you. During the grace period, connected mailboxes are still synchronized and scheduled processing of your existing data continues; we are changing this so that processing pauses as soon as you request deletion.
- When the grace period ends, we remove your name, phone number, and date of birth from your account record, delete your sign-in account (which holds your email address), revoke access to any connected Gmail mailbox and delete the stored messages and attachments, and delete your notification settings, recurring payment detections, transaction rules, learning progress, and referral data. For a connected Outlook mailbox, we delete the stored messages but cannot revoke the mailbox permission on your behalf; you can revoke it at account.live.com.
- Analytics. Your deletion request is recorded for our analytics provider and analytics warehouse. Sending that request to the provider is not yet switched on; we are completing that now, and this page will be updated when it is.
What Remains After Deletion
When the grace period ends, we permanently delete your financial data — transaction records, connected account records, investments, credit and loan records, drives and trips, vehicles, budgets, goals, and uploaded receipts — from our systems. Your account record remains, associated with no personal identifiers. We also keep a signed record of any purchase you made through an app store, which we need to answer payment disputes, and, if you took part in our partner program, the payout records it is accounted on, along with the subscription records those payouts reference, kept in anonymised form. Some service providers also retain information after deletion; the Service Providers page states which ones.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Review this page periodically for the latest information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us by email at info@capitowl.io.