Privacy Policy

1. Who We Are

Apogee is a personal finance planning and tracking tool for individuals working toward Financial Independence and Retire Early ("FIRE") goals. The App helps you connect your financial accounts, visualize your net worth, track savings rate, and project your progress toward financial independence.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: email address (required), name (optional), country
• Profile information: age, current savings, FIRE target, projected retirement age, lifestyle preferences (all optional, used to personalize calculations)
• Communications: messages you send to our support team

2.2 Financial Information via Plaid

When you connect a bank, brokerage, or investment account, we use Plaid Inc. ("Plaid") to securely retrieve financial data on your behalf. Plaid collects and shares with us:

• Account names, account types, and account numbers (last 4 digits only)
• Account balances
• Transaction history (date, amount, description, category)
• Investment holdings (positions, quantities, market values)

You authorize Plaid to access this data when you link an account. Plaid's collection and use of your data is also governed by Plaid's End User Privacy Policy. You can review and manage your Plaid connections at any time at my.plaid.com.

2.3 Subscription Information via Apple and RevenueCat

We use RevenueCat to manage in-app subscriptions sold through the Apple App Store. We receive subscription status (active, trial, cancelled), purchase history, and a pseudonymous user ID. We do not receive your full Apple ID, payment method, or billing address — Apple handles all payment processing directly.

2.4 Automatically Collected Information

• Device information: device type, iOS version, language, time zone, App version
• Usage information: features used, screens viewed, session duration, interaction patterns
• Crash logs and diagnostics: error reports, performance data
• Push notification token (if you enable notifications)

We do not collect your precise location, contacts, photos, or any data unrelated to App functionality.

3. How We Use Your Information

We use the information described above to:

• Provide, operate, and maintain the App
• Calculate your FIRE metrics, net worth, savings rate, and projections
• Display your financial data in dashboards and charts
• Send service-related notifications (e.g., security alerts, subscription reminders)
• Improve the App through analytics and bug fixes
• Respond to your support requests
• Comply with legal obligations

We do not:

• Sell your personal information to third parties
• Use your data for third-party advertising or marketing
• Share your financial data with anyone other than the service providers listed below
• Use your data to make any decision about your creditworthiness, employment, or insurance eligibility

4. Third-Party Service Providers

We share information with the following service providers solely to operate the App. Each is contractually required to protect your data and use it only for the purposes we authorize.

5. Data Sharing Beyond Service Providers

We may share your information outside the providers above only when:

• You consent to a specific sharing
• Required by law (e.g., subpoena, court order, regulatory request)
• To protect rights or safety of users, the public, or Meridian Studio LLC
• In a business transaction (e.g., merger, acquisition, asset sale) — successor will be bound by this Privacy Policy or a substantially similar one

We will never sell, rent, or trade your personal information.

6. Your Privacy Rights

6.1 Universal Rights

• Access: Request a copy of the data we hold about you
• Correction: Update inaccurate information
• Deletion: Request we delete your account and associated data
• Export: Receive your data in a portable format (JSON or CSV)
• Withdraw consent: Disconnect Plaid accounts or delete your account at any time

To exercise these rights, email support@meridianstudio.world from the email address associated with your account. We will respond within 30 days.

6.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to opt out of "sale" or "sharing" of personal information (we do neither), and the right to non-discrimination for exercising your rights.

6.3 EU / UK / EEA Residents (GDPR)

If you are in the European Union, United Kingdom, or European Economic Area, our legal basis for processing your personal data is:

• Performance of a contract: to provide the App as you requested
• Legitimate interest: to improve and secure the App
• Consent: where required (e.g., push notifications)
• Legal obligation: where required by law

You have the right to lodge a complaint with your local supervisory authority.

6.4 Plaid Connections

You can view, manage, and disconnect any financial account connected through Plaid by visiting the Plaid Portal at my.plaid.com. Disconnecting an account in Plaid Portal will stop new data flow but will not delete data already stored in Apogee — to delete that, use the in-app "Delete account" feature or email us.

7. Children's Privacy

You must be at least 18 years old to use Apogee. The App is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18.

In addition, we comply with the U.S. Children's Online Privacy Protection Act (COPPA), which specifically protects children under 13: we do not knowingly collect personal information from children under 13. If you believe anyone under 18 has provided us with personal information, please contact us at support@meridianstudio.world and we will delete it promptly.

8. International Data Transfers

Apogee's servers are hosted in the United States. If you access the App from outside the U.S., your information will be transferred to, stored, and processed in the U.S. By using the App, you consent to this transfer.

For EU/UK users, we rely on Standard Contractual Clauses and other lawful transfer mechanisms.

9. Data Retention

• Active accounts: We retain your data as long as your account is active
• Account deletion: When you delete your account, we delete your personal data within 30 days, except where we are legally required to retain it (e.g., tax records, fraud prevention logs — up to 7 years)
• Plaid data: Disconnecting a Plaid-linked account stops new data syncing; previously synced data is deleted from our systems within 30 days
• Subscription records: Retained as required for tax and accounting purposes

10. Security

We use industry-standard security measures, including:

• Encryption in transit: All data flows between your device, our servers, and Plaid are encrypted via TLS 1.2+
• Encryption at rest: Data in our database is encrypted at rest
• Access controls: Only authorized personnel can access user data, and access is logged
• Security reviews: We periodically review our security practices and access controls

However, no system is 100% secure. We cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via in-app message or email at least 30 days before the changes take effect
• For changes that require it under applicable law, request your explicit consent

Continued use of the App after the effective date constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

We will respond to all inquiries within 30 days.