Your privacy is the point.

We built Finnlight because we’re planning for our own retirement and were frustrated by the complexity and intrusiveness of existing tools. Our mission is to provide you with powerful planning without compromising your privacy. We hold ourselves to a strict standard: we cannot see your account balances, account numbers, or transaction details—ever. We collect only the absolute minimum data needed to power your plan and protect everything with industry-leading security, both at rest and in transit. Your financial future belongs to you, and we’re honored to help you secure it with total peace of mind.

At Finnlight, we believe that powerful financial planning shouldn’t come at the cost of your privacy. When you trust us with your financial data, we commit to being transparent, minimal, and secure in everything we do. Our approach is designed to give you total peace of mind, ensuring that your sensitive information remains yours and yours alone.

We operate under a "privacy-first" mandate, which means we only collect and store the absolute minimum amount of information required to generate your retirement plan. We do not need, and we do not want, visibility into your specific account balances, transaction histories, or the granular details of your daily spending. By masking these details at the application layer, we ensure that your private financial reality—your account numbers, your specific deposit amounts, and your personal life events—remains hidden from our systems and our staff.

Security is the bedrock of this trust. We protect your data using industry-leading safeguards, both while it is stored in our systems and as it moves across the network. We also empower you with control: you have the right to know how your data is handled, to request a copy of your information, or to ask that it be deleted. Your financial future is a personal journey, and our role is simply to provide the tools to help you secure it, without ever intruding on the privacy of your financial life.

How our categorization improves

When you correct the category on a transaction, Finnlight learns from it so the same merchant is filed correctly next time—for you and for everyone else. The only thing shared is the cleaned-up merchant name (for example "att") and the category you chose. Amounts, dates, account numbers, statements, and anything that identifies you are never shared, and a shared rule only forms once several unrelated people have independently agreed on the same category.

Questions you ask Finn

When you're signed in and ask Finn, our assistant, a question, we save the question, Finn's answer, the date, and whether you told us the conversation resolved your issue. To answer, Finn uses details from your own plan; those details are sent to our AI provider only to produce that answer and are not used to train AI models or to answer other people's questions.

Authorized Finnlight administrators—who must sign in with multi-factor authentication—may review saved questions and answers to check accuracy and improve Finn. Admins also see summaries that group questions into broad topics (for example, "Social Security" or "Spending") with counts only. Saved Finn questions and answers are permanently erased when you delete your account.

Encryption and security

Every connection between your browser and Finnlight is encrypted in transit using TLS 1.2 or better—our servers negotiate TLS 1.3 where your browser supports it, fall back to TLS 1.2, and refuse the older, deprecated TLS 1.0 and 1.1 protocols entirely. The same standard applies to the connections between Finnlight and our database, authentication, and other backend services. HTTP Strict Transport Security (HSTS) is enabled, so browsers are instructed to only ever reach us over an encrypted connection.

In the browser, we send a strict set of security headers—including a Content Security Policy, X-Content-Type-Options: nosniff, a restrictive referrer policy, and a permissions policy that disables device APIs we do not use—to limit the risk of script injection, clickjacking, and data leakage.

Your sensitive financial values are encrypted at rest. Account balances, statement transactions, and the detailed contents of your plan are encrypted with AES-256-GCM using a key held only by Finnlight's server environment, not your account password. We also keep a separate aggregate total so the app can show you high-level summaries and so our support staff can see only broad asset ranges (for example, "$100k–$250k") when helping with your account. Individual account balances and transaction details are never visible to Finnlight staff or administrators. Administrator access requires multi-factor authentication, and privileged actions are audit logged. We verify our transport encryption automatically on an ongoing basis.

Text-message two-factor authentication

If you connect a bank account, we require an additional layer of security and may ask you to verify sign-ins with a one-time code sent to your mobile phone number. Your phone number is collected solely for this purpose. We do not sell, share, or use your mobile number for marketing, advertising, or any purpose other than delivering these security codes and protecting your account.

Message frequency: you will receive a code when you sign in and occasionally when we need to re-verify your identity. Standard message and data rates may apply depending on your mobile phone service plan and carrier. You can remove text-message verification or delete your account at any time, which stops further messages.

Data retention and deletion

We keep your plan data while your account is active. If paid access ends, we retain your plan for 90 days so you can return, then schedule its deletion. You can export your data and delete your account from Settings → Data; account deletion cancels an active subscription before removing your personal data. Limited billing and security records may be retained where legally required. Contact support@finnlight.ai for help with a copy or deletion request.

Cookies and analytics

Finnlight uses a small number of cookies to keep you signed in and remember your preferences while you use the app. These are essential cookies, and they are not used to track you across other websites. We also collect anonymous, aggregated usage analytics to understand which features help people plan most effectively and where the app can be improved. This data is never tied to your account balances, transactions, or personal financial details.

When you create a Finnlight account, Google Ads places a small tag on our site solely to count completed signups — an anonymous, once-per-account event that never includes your name, email, balances, transactions, or any financial details. You can opt out of this measurement by enabling your browser's Do Not Track setting or blocking third-party cookies, or review Google's advertising settings at adssettings.google.com to control how Google uses your activity.