Relay
Relay

Privacy policy

Last updated: May 1, 2026

1. Information we collect

We collect the following categories of information:

  • Account information: email address, name, and role (parent or child) provided during registration.
  • Financial data: account balances, account types, and institution names retrieved through Plaid. This data is read-only. We do not collect transaction history, account numbers, or routing numbers.
  • Allocation data: beneficiary allocation percentages set by parent users.
  • Documents: files uploaded by users, stored encrypted with SHA-256 integrity hashes.

2. How we use your information

We use your information solely to provide the Service: displaying verified account balances and inheritance allocations to authorized family members. We do not sell, share, or monetize your financial data. We do not use your data for advertising. We do not build profiles for third parties.

3. Data sharing

We share data only with:

  • Plaid: to retrieve account balances from financial institutions.
  • Stripe: to process subscription payments. We do not store credit card numbers.
  • Supabase: our database and authentication infrastructure provider.
  • Resend: to send transactional emails (magic links, invitations).

We do not share data with any other third parties unless required by law.

4. Data security

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Database access is restricted by row-level security policies that enforce role-based visibility. A child user cannot access another family member's data even if they modify API requests.

5. Data retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion, we remove all personal and financial data within 30 days. Account balances from Plaid are refreshed every 24 hours; stale data is overwritten, not accumulated.

6. Your rights

You may request access to, correction of, or deletion of your personal data at any time. You may disconnect any Plaid connection at any time through the Accounts page.

7. Children's privacy

Relay is intended for adults aged 18 and older. We do not knowingly collect information from children under 18.

8. Contact

Contact details for privacy questions will be published here when Relay opens.