Skip to content

Privacy Policy

Version 2026-10-27-us6
DRAFT — this document accurately describes how Zuren works today, but it has not yet been reviewed by legal counsel.

What Zuren collects

Your email address (for sign-in), and the financial records you create or import: institutions, accounts, balances and their history (entered by hand or imported from a CSV file), repayment schedules, Bills, saved goals, the assumptions you record for them and the contributions and withdrawals you record towards them (each with its date, amount and any note), journal entries, and the observations Zuren derives from them (“What changed”, with the evidence behind each one). If you watch a public Bitcoin address, Zuren stores that address.

If spending is on for you, Zuren stores the transactions you enter or import from a CSV file: each one's date, description, amount, currency, kind (such as income, expense or a transfer), category and whether it is still pending, with the name you give each import. Your browser reads the file; Zuren receives only the rows you confirm, and keeps a one-way fingerprint of each import to catch an accidental repeat. It also stores what you add to your transactions: corrections and removals with the reasons you give, splits across categories, links between a refund or transfer and the transaction it belongs to, which of your accounts a transaction moved, the reimbursements you expect, and the categorisation rules, budgets and recurring series you set.

If manual holdings are on for you, Zuren stores what you record that a manual account holds: each holding's name, currency and quantity, the unit price or total value you give it, the date of that value and whether it came from a statement, a quote or your own estimate, and the reason for any correction or removal. Like your other financial records, your spending and holdings are shown only to you, and none of the companies named under “Who else receives data” receives them.

If you choose Continue with Google or Continue with Apple, that provider confirms your email address to Zuren and gives it an identifier for your account there. Google may also share your name and a link to your profile picture. If you choose Apple's Hide My Email, Zuren receives a relay address instead of your own. Zuren keeps these with your sign-in record and uses them only to sign you in. It never receives your Google or Apple password, and it cannot read your email, contacts, files or anything else in that account.

Zuren also stores the optional answers you save in your financial profile: your birth year (not your full date of birth), primary and secondary financial goals, investment horizon, risk tolerance, how you say you would respond to a large market fall, income stability, number of dependants, and whether you expect major financial commitments.

If you send feedback from inside Zuren, Zuren stores your message, its type, the product area you chose and the screen you came from, whether we may email you about it, and when you sent it, so the person building Zuren can read and organise it. If you allow a follow-up, that person also sees your account's email address with the message. Nothing else is attached.

Zuren also keeps your choices about two optional features: whether you allowed product analytics, when, and the random ID used for it; and whether you turned setup tips on or off, when, which setup emails were sent to you, and whether the email provider accepted them. Accepting this policy does not turn on product analytics or setup tips; each is your own separate choice.

How your financial profile is used

Zuren may use your saved answers and whether you have provided enough profile context, together with information derived from your financial records, to personalise parts of the product through deterministic rules run within Zuren. For Personalised Intelligence, those rules may highlight the relevance of an existing generic insight or add fixed context, but they do not change the underlying financial facts.

In this release, your financial-profile answers and the personalisation frame derived from them stay within Zuren: they are not sent to any external AI service, and Zuren uses none.

What it deliberately does not collect

No bank or brokerage credentials, and this release has no brokerage connection at all. No full account numbers (you may store a masked hint like “•••• 1234”). No card or payment details: this release takes no payments. Zuren is read-only by construction: it cannot place a trade or move money.

Where data lives

Your account, financial records and consent records are stored in a Supabase project (hosted PostgreSQL) in the United States, in the AWS us-east-1 region, with row-level security isolating every user's rows. Supabase keeps daily backups of that database; where those backups are stored is not yet confirmed. Sign-in, confirmation and setup-tip emails are sent through Resend.

The application runs on Vercel. Its server functions are planned to run in Vercel's iad1 region, in the eastern United States. Vercel serves pages through a global edge network, and where Vercel keeps request logs is not yet confirmed.

Supabase and Vercel operate global networks and support teams, so this is not a promise that every request, log, backup, email or support operation stays in the United States.

Who else receives data

Nothing is sold, and there are no advertising trackers. In this release Zuren uses no external AI service, no brokerage connection and no payment processor: AI-generated summaries, Financial Copilot answers, brokerage sync and payments are all switched off. If any of them is switched on later, this policy changes first, under a new version, and you are asked to accept it before it applies to you.

Sign-in and confirmation emails are sent through Resend. Resend receives the recipient's email address and the message, from Zuren's servers; it receives no financial records. If you turn on “Email me setup tips”, Zuren also sends you a few short setup emails through Resend: at most three in your first two weeks, never more than one every three days. These are a welcome, a reminder if you have not recorded an account yet, and one tip about a feature you have not used. Resend receives your email address, the message and a label naming which email it is. These emails contain no amounts, balances, account or Bill names. Every one has an unsubscribe link, and you can turn them off in You at any time. If an email to you bounces or is reported as spam, Zuren keeps a one-way fingerprint of the address, not the address itself, so that it is not emailed again.

If you sign in with Google or Apple, you do so on that company's own page, and it learns that you signed in to Zuren; its own privacy policy covers that. A new account still needs the email address your invitation was sent to, however you sign in.

Product analytics is optional and off unless you turn it on. If you allow it, Zuren's server sends PostHog (PostHog, Inc., US hosting), our analytics provider, a record of when you open Zuren and which optional features are on for you, the screens you open, and the tasks you start, finish or have trouble with, with the app version and platform; and, when you allow it, whether you had already added an account. These records are kept under a random ID that is not your email address or account ID. They never include amounts, balances, account or Bill names, anything you type, your feedback messages, your IP address or your location. You can turn it off at any time in You; nothing more is sent after that. To have what was already sent deleted, contact support.

If you watch a public Bitcoin address, Zuren's server looks up that address's public balance at Blockstream (blockstream.info) and the Bitcoin price at CoinGecko. They receive the address and your account's currency from Zuren's server, not your name or email address.

Zuren's figures and observations are informational and are not professional financial advice. Independently verify important facts before relying on or acting on them.

Your controls

Download portfolio export includes accounts, balances, holdings, connection status, sync history, repayment schedules, Bills (saved obligations, not payments), saved goals, radar and consent records, and your journal, spending, goal progress, manual holdings and review records. Until a feature has been set up on Zuren's service, its section is marked unavailable, never shown as empty; after that, your records are included even while the feature is switched off. It excludes financial profile, preferences, financial events and activities, AI records, billing records, provider credentials, operator audit records, feedback you sent with Give feedback, and your product-analytics and setup-tip choices. Correcting or removing a transaction, a holding or a recorded contribution or withdrawal adds a new version: the earlier versions stay in your records and your export. Removing a saved goal deletes the progress recorded towards it. Clear manual accounts deletes manually entered accounts and their attached balance history, imports, repayment schedules and manual holdings; your spending records stay. Institution names, profile, preferences, radar, financial events and activities, legal and audit records remain. Contact support to close your account; legal and audit retention may apply.

Contact

Security or privacy questions: support@getzuren.com.