Privacy, quietly held.

We collect only what we need to show you your money. We do not sell or rent your data to anyone. You can delete everything at any time from Settings.

When you sign in with Google, we receive your name, email address, and profile image URL. We store these to identify your Cairn account and to address you in the app. We do not receive your Google password.

When you link a bank, brokerage, or credit-card account through Plaid, we receive a steady stream of data from your institution about the accounts you choose to share. That includes:

• Transactions — date, amount, description, merchant, category, and pending status
• Balances — current and available balances on each linked account
• Investment holdings — positions, cost basis, and security metadata for linked brokerage accounts
• Liabilities — credit-card and loan APRs, minimum payments, and statement details

We do not receive your bank username or password. Plaid holds those credentials; we hold only the access token Plaid issues us.

Plaid is the connection provider. What Plaid does with your data is governed by Plaid's End User Privacy Policy. You can review or revoke Plaid's connections, and request deletion of data Plaid holds, through Plaid Portal and Plaid's data request form.

Your account and financial data are stored in a Postgres database hosted by Neon in a US region. The Plaid access tokens that authorize Cairn to read your accounts are encrypted at rest using AES-256-GCM with a key held only on our server; we decrypt them only at the moment we call Plaid on your behalf.

Data in transit is protected with TLS between your browser, our servers, and every upstream provider.

We treat the access tokens and account credentials that authorize this connection as sensitive personal information. We use them only to provide the service and protect them accordingly — they are never sold, shared, or used for any other purpose.

Cairn relies on a small set of subprocessors. Each one sees only the slice of data it needs to do its job:

• Plaid — aggregates and normalizes the data from your linked institutions
• Google — authenticates you via OAuth and provides your basic profile
• OpenRouter — routes prompts to the model provider (Anthropic) when you use Cairn's AI features (transaction Q&A, plain-language rules, the planner chat). Both are bound to zero data retention — see below.
• Neon — hosts the Postgres database that stores your account
• Vercel — hosts the Cairn application and serves it from the edge
• Cloudflare — provides DNS and CDN for cairn.nnnsightnnn.com

We share data with each subprocessor only as needed to operate Cairn. None of them are authorized to use your data for their own purposes.

We use the data we collect to show you your accounts, balances, transactions, holdings, and goal progress; to compute the planner scenarios you ask for; and to power the AI features you choose to use. That's it.

We do not sell your data. We do not rent your data. We do not share your data with advertisers, brokers, or any third party outside the subprocessors listed above.

We collect the nonpublic personal information described above to provide the service you ask for. We do not disclose it to nonaffiliated third parties except as the law permits — for example, to the subprocessors above acting on our behalf, or to comply with legal process. We maintain physical, electronic, and procedural safeguards to protect it. Because we do not share your information outside these permitted exceptions, there is nothing for you to opt out of.

Cairn's AI features are optional and off unless you turn them on. When you use them, we send only planner-derived summary figures — never your account numbers, never your credentials, never raw bank data — to the model provider so it can describe your own numbers in plain language.

The AI is observational: it describes, it does not advise, and it never moves money or makes a decision for you. We do not permit our AI provider to retain your data or train its models on it (zero data retention). Every AI response is labeled as AI and recorded in your activity trail so you can see exactly when it ran. You can turn AI off at any time in Settings.

Cairn describes your holdings and allocations — what you own, where it sits, how it has moved. Cairn does not prescribe specific buys, sells, or rebalances. We are an information tool, not a financial advisor, broker, or fiduciary.

We keep your data for as long as your Cairn account is open. When you delete your account, we delete the underlying records from our database and call Plaid's /item/remove endpoint for every linked institution to revoke the access tokens we hold. Plaid and your institutions have their own retention policies that govern any data they retain after we cut the connection.

You can disconnect a single institution at any time from Accounts and delete your full account from Settings. Our Data Retention & Deletion policy lays out what we keep, for how long, and what happens on deletion.

You can ask us, at any time, to show you the data we hold for you, to correct it, or to delete it. Email kjautry@gmail.com and we will respond within a reasonable time.

Cairn is not directed to users under 18 and we do not knowingly collect data from anyone under 18. If you believe a minor has created a Cairn account, email us and we will delete it.

We will update this page when our practices change. For any material change — a new subprocessor that touches your financial data, a new use of your data — we will notify you by email before the change takes effect.

Questions, requests, or a bug report? kjautry@gmail.com.