Privacy & data controls

Who operates the app

Freedom Fund Project is operated by Kings Consulting Group LLC. For questions about your data, contact info@freedomfundproject.com.

Information used in this app

• Your member-login email, account identifier, email-verification status and authenticator status.
• Your free membership number, account status and completed onboarding. Free access does not require Stripe records. Existing or future paid agreements have separate billing records.
• Account nicknames, Fund allocations, bank-bonus details, dates, notes and expenses you enter or ask the owner to import.
• Your customer-system recommendations, offer requirements and progress. Updates you submit from Opportunities are shared with Freedom Fund’s customer system for service and weekly reports. Your manual balances and custom bonus entries are separate and are not automatically sent to that system.
• Coaching messages you send to Freedom Fund Project and replies from your coach, together with message times and read status. These stay in your private app conversation and the owner’s coaching inbox.
• In-app reminder task identifiers and read times, so read status carries across devices and the same task does not become unread again as its deadline approaches.
• Service-email delivery events: recipient address, email identifier, event type and timestamp. Email content is not stored in this delivery-event log.
• When you explicitly connect a test bank: selected simulated account names, last four digits, balances, transaction descriptions, dates, amounts and the connection token needed to retrieve updates.
• Consent version and time, connection status and last-update information. Hosting and authentication providers also process operational information needed to run and protect the service.

Do not put bank passwords, full account numbers or other credentials in tracker notes. Bank authentication takes place in Plaid’s connection window.

What the information is used for

The app verifies member access, saves your tracker, displays your records, retrieves the test-bank data you authorize, supports customer progress reports, and helps troubleshoot failed service-email delivery. It does not move money or automatically determine that you have qualified for a bonus.

This app has no advertising, data-sale or marketing-data export feature. Submitting a progress update does not subscribe you to marketing.

Providers involved

Cloudflare runs the independent application, database and scheduled processing. Supabase manages verified login and authenticators. Resend provides service emails and delivery events. Stripe remains available for paid agreements; it is not required for free access. This independent app does not need Google Sheets, Apps Script or ChatGPT to process your profile or progress. Plaid is limited to the optional owner test with simulated data.

The app does not claim that all provider processing, logs or backups are limited to one country. Hosting locations and production data-processing arrangements still need review before real-bank launch.

Security and consent

Before account creation, you must actively agree to the app’s use of your information. After email verification, the app records your affirmative privacy choice, version and time before allowing customer tracker or membership-link use. Existing members are asked too; consent is not assumed from prior use. You can decline by signing out and still download existing data or request deletion. Before bank access, the server verifies your signed-in identity and requires a verified authenticator session. Before a test-bank connection starts, you must actively select the test-consent checkbox. Its version and time are recorded with the connection.

Plaid connection tokens and imported bank snapshots are encrypted using an app-controlled storage key. Authentication tokens are held in secure, HttpOnly session cookies. The member-login provider manages password and authenticator verification.

The existing manual tracker uses member login and membership verification. The authenticator requirement specifically protects the bank-connection feature; it is not a claim that every business system or every app route uses MFA.

How long information stays

The app retains your matching profile and before/after update receipts for recovery. Welcome/results and weekly email content is stored in a retry queue with delivery status. Your weekly email preference and pause token are retained so retries respect your choices.

Manual tracker entries are saved across sessions and retained when membership tracking is paused. Owner imports retain a previous-workspace copy for recovery. Customer-system copies, submitted updates, coaching conversations, reminder read status and email delivery events are also retained to support the service and troubleshooting. There is currently no automatic age-based purge of these records.

Test-bank records stay until you disconnect. The pilot keeps at most 2,000 recent transactions per test connection and displays 50 at a time. Updates run while the bank page is open. Unfinished, expired connection sessions are removed when you next start a connection.

Provider-managed backups and operational logs can retain older copies under their own retention arrangements. Deleting an active record does not assert immediate deletion from every backup or provider system.

Your controls

Manage weekly emails in your account, or use the pause link in an email. Pausing emails does not remove access or progress, and does not cancel any separate paid agreement.

1. Correct manual entries: use Edit or Update amount in your tracker. Removing an entry from the tracker does not remove a retained owner-import recovery copy.
2. Remove test-bank data: open Bank connections and choose Disconnect & delete for the connection. After Plaid confirms removal, the app deletes its active connection token, imported account/transaction snapshot and associated consent-session records.
3. Download your records: open Privacy & my data to download your active tracker, membership link, privacy choice, retained import recovery copies, linked service records, submitted progress, coaching messages, reminder read status and email delivery events associated with your verified email. Test-bank data requires authenticator verification. Provider logs, backups and records held only in the separate customer systems are outside this download.
4. Review account-wide requests: contact the address above to request a copy, correction or deletion of account data, including retained import copies. Contact us to withdraw app consent as well. Account-wide deletion is not yet self-service; identity verification and coordination with the relevant providers are required.

Disconnecting a test bank or deleting tracker data does not cancel a Stripe membership or close a bank account. If disconnection cannot finish, the app hides the imported test data and retains its encrypted connection token so removal can be retried.