Privacy Policy

Introduction

Adigeo Security ("we", "our", or "us") operates the Lena mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

Information We Collect

• Account Information: When you create an account, we collect your Apple ID user identifier. Your name and email address are only collected if you choose to share them during Apple Sign In.
• Financial Data: When you connect your bank accounts through Plaid, we receive account balances, transaction history, investment holdings, liabilities, and account identifiers. We donot store your bank login credentials—these are handled entirely by Plaid.
• Push Notification Token: If you enable notifications, we store the device push token issued by Apple so we can deliver alerts to your device. This token identifies your device only for notification delivery and is deleted when you disable notifications or delete your account.
• Subscription Data: If you subscribe to Lena, Apple handles all payment processing. We only receive confirmation of your subscription status, not your payment details.
• Support Communications: If you contact us, we receive the information you include, such as your email address and the contents of your message.

How We Use Your Information

• To provide and maintain our net worth tracking service
• To aggregate and display your financial information
• To generate security and financial alerts about activity in your connected accounts, and to deliver them via push notification if you enable notifications
• To send you important updates about your accounts
• To secure the Service and prevent fraud and abuse of it
• To improve and optimize our application
• To comply with legal obligations

How We Share Information

We do not sell your personal information, and we do not share it with third parties for advertising or marketing. We disclose information only in these limited circumstances:

• Service providers: Plaid (bank connections), Apple (authentication, payments, and push notification delivery), and Amazon Web Services (cloud hosting) process data on our behalf to operate the Service
• Legal requirements: If required by law, subpoena, court order, or other legal process, or to protect the rights, safety, or property of our users, ourselves, or others
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy
• With your consent: At your direction

Data Security

We implement industry-standard security measures to protect your personal information. All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. We use Plaid's secure infrastructure to connect to your financial institutions, ensuring your banking credentials are never exposed to our servers. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide you services. You can permanently delete your account and all associated data at any time using the "Close Account" feature in Settings. This immediately removes your financial data from our production systems and revokes our access to your connected bank accounts. Residual copies in encrypted backups are purged within 35 days. We keep a minimal deletion audit record (with no financial data) for up to one year to demonstrate compliance, and short-lived operational logs are deleted within 30 days.

Your Rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Receive a copy of your data in a portable format
• Opt-out of marketing communications (we don't send any)

You can exercise deletion directly in the app ("Close Account" in Settings) or contact us at the email below for any request. We will not discriminate against you for exercising your rights.

California residents: Under the CCPA/CPRA, you have the rights to know, delete, correct, and port your personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information as those terms are defined by California law, and we do not use or disclose sensitive personal information for purposes other than providing the Service.

Where Your Data Is Stored

Our servers are located in the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.

Children's Privacy

Our service is not intended for users under the age of 18, and we do not knowingly collect personal information from anyone under 18 (including children under 13, consistent with COPPA). If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy in the app and updating the "Last updated" date. Where required by law, we will provide additional notice.

Contact Us

If you have questions about this Privacy Policy, please contact us at:
contact@adigeosecurity.com