Privacy Policy
Last updated: October 20, 2026 · Effective date: October 20, 2026
In plain words: Money God is free, read-only and private to your family. We collect what you put in and what the accounts you connect report, and we use it only to run the service for you. We don't sell your data, we don't show ads, and there is no screen that shows your finances to anyone outside your household. You can export everything or delete it for real at any time. The details are below.
This Privacy Policy describes how SPARCgen Inc, a Delaware corporation headquartered in Plainsboro, New Jersey ("SPARCgen", "we", "us", "our") collects, uses, shares and protects information when you use Money God, our personal finance service at app.getmoneygod.com, and our website at getmoneygod.com (together, the "Service"). It should be read alongside our Terms of Service and Cookie Policy. By using the Service, you agree to the practices described here.
- Information we collect
- How we use information
- AI features and your AI provider
- How we share information
- What we do not do
- Households and who can see what
- Security
- Data retention
- Your choices: export, correct, delete
- US state privacy rights
- Financial privacy laws
- Children
- Users outside the United States
- Changes to this policy
- Contact
1. Information we collect
1.1 Information you provide
- Account information: your name, email address, and password (stored only as an Argon2id hash — we never store the password itself). Two-step sign-in is required for every account, so we also keep your authenticator-app secret (encrypted) and your recovery codes (hashed).
- Household information: the households you create or join, their names and type, each member's role (owner, admin, member or viewer), and the email addresses of people you invite.
- Financial information you enter: accounts, balances and holdings you add by hand; income, spending budgets, goals, retirement and college plans; tax profile details; insurance, property, loans, benefits, beneficiaries and estate-planning details; business details if you use the business-owner features; and the notes your family writes in the app.
- Information about family members: details you choose to enter about other people in your household, such as a spouse, parents or children (for example, a child's age for a college plan or a dependent on a tax return). Please only enter information about others that you have the right to share.
- Documents: tax returns, W-2s, 1099s, K-1s, statements, policies, deeds, wills and other files you upload to the document vault, together with the labels you give them (name, kind, year, person).
- Connection credentials and keys: your SnapTrade connection, your SimpleFIN access, your AI provider API key and similar keys you add. These are stored encrypted with your household's own key and are never shown back in full or included in exports.
- Messages to us: what you send us when you contact us for support, report abuse, or make a privacy request.
1.2 Information from the accounts you connect
Connecting accounts is optional — you can enter everything by hand. If you connect:
- Brokerage accounts (through SnapTrade): account names and types, holdings and positions, balances, cost basis where the broker provides it, and account activity such as trades, dividends and transfers. The connection is read-only: Money God cannot place trades or move money.
- Bank and card accounts (through SimpleFIN): account names, balances and transactions. This connection is also read-only. You authorize it with your own SimpleFIN subscription and access token.
We never receive your bank or brokerage username and password; you sign in to those institutions through SnapTrade or SimpleFIN, not through us.
1.3 Information collected automatically
- Security log: sign-ins, failed attempts, lockouts and changes to two-step sign-in, with the email address used, the time and the IP address. This log never contains financial data.
- Household activity log: actions such as vault uploads, downloads and deletions, invitations and role changes, so your household can see who did what.
- Usage records: counts of syncs, analyses and AI usage (provider, model and tokens), used to run the Service fairly and to show you your own AI usage.
- Technical data: IP address, browser type and request details that our servers and our network provider (Cloudflare) process to deliver pages, defend against attacks and diagnose errors.
- Cookies and browser storage: only what is needed to keep you signed in, protect forms and remember your display preferences. See our Cookie Policy.
1.4 Information the Service creates for you
From the information above, the Service produces net-worth history, spending categories, tax estimates, retirement and Monte Carlo projections, optimizer results, alerts, AI reports and briefings, and — only if you agree — facts the AI CFO remembers about your family. These belong to your household and are treated like the rest of your data.
2. How we use information
We use the information described above to:
- Operate the Service for you: show your accounts, net worth, spending, taxes and plans; sync connected accounts; read documents you upload into proposals you can accept; and run the analyses you ask for
- Authenticate you, secure your account and households, and enforce two-step sign-in
- Send service email — verification, password resets, invitations, security notices, and the alerts and daily summaries you choose — and phone alerts if you turn them on
- Detect, prevent and respond to fraud, abuse, security incidents and violations of our Acceptable Use Policy
- Diagnose errors and keep the Service working
- Comply with legal obligations and respond to lawful requests
We do not use your financial data for advertising, and we do not use it to train AI models.
3. AI features and your AI provider
AI features — the AI CFO, analyst reports, document reading and transaction categorization — are optional and run on an AI provider you choose (for example OpenAI, Anthropic, Google, xAI, DeepSeek, Mistral, OpenRouter or another listed provider) using your household's own API key, billed to you by that provider. Where we offer a platform-provided AI key to some households, the same rules apply and we will say so in the app.
- When you run an AI feature, we send that provider the information the feature needs — for example the figures behind a question you ask, or the masked text of a document you asked it to read. Before document text is sent, numbers such as Social Security numbers, EINs and account numbers are masked.
- What the provider does with that information is governed by its terms and privacy policy, under your account with it. Please review them; some providers retain or review requests, and some are based outside the United States.
- The AI CFO only remembers facts about your family after you confirm them. You can see and delete remembered facts in the app.
- AI output can be wrong. See Section 3 of the Terms.
4. How we share information
We share information only as described here.
Service providers (processors)
| Provider | Purpose | What they receive |
|---|---|---|
| Cloudflare | Hosts the marketing website; provides the network, HTTPS and secure tunnel in front of the app; protects against attacks | All traffic passes through Cloudflare's network, including IP address and request data |
| Resend | Sends service email (verification, password reset, invitations, alerts) | Your email address and the message content |
| SnapTrade | Read-only brokerage connections, when you link one | The connection you authorize and the brokerage data it returns |
| SimpleFIN | Read-only bank and card connections, when you link one | Your SimpleFIN access; it returns your bank data to us |
| Your chosen AI provider | AI features you run | Only what each feature needs (see Section 3) |
| Error tracking (Sentry or a self-hosted GlitchTip), if enabled | Diagnosing crashes and errors | Technical error details; configured not to send request bodies, cookies or user details |
| ntfy push server, if you turn on phone alerts | Delivering phone notifications | A short alert line on a random topic only you know — never full account numbers or balances |
The app itself and its database run on servers we operate. Market and economic data (prices, fund holdings, interest and inflation rates) come from public sources such as Yahoo Finance, the SEC and the Federal Reserve Bank of St. Louis; we fetch that data once for everyone and send nothing about you to those sources. Tax calculations run on the open-source PolicyEngine engine on our own servers, not with a third party.
Some features link out to, or depend on, services you have your own relationship with — your brokerage, your bank, SnapTrade, SimpleFIN and your AI provider. Their own terms and privacy policies govern what they do.
People in your household
Members of a household see that household's data according to their role. Inviting someone gives them access to the household's data; removing them ends it.
Legal disclosures
We may disclose information when we believe in good faith it is required by law (for example a subpoena, court order or other lawful government request), or to protect the rights, property or safety of our users, the public or SPARCgen. Where the law allows, we will try to tell you first.
Business transfers
If SPARCgen or Money God is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy. We will notify you by email and with a notice in the Service before your information becomes subject to a different privacy policy.
Aggregated information
We may publish aggregated statistics about the Service (for example, the number of households) that cannot reasonably be used to identify you or your household.
5. What we do not do
- We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising.
- We do not show ads, and we do not use advertising or analytics trackers in the app.
- We do not refer you to, or receive payment from, advisers, banks or product providers.
- We do not use your financial data or documents to train AI models.
- We do not trade, move money or initiate any transaction in your accounts — the Service has no ability to do so.
6. Households and who can see what
- Each household's data is isolated in the database itself with row-level security, so a household's data can only be read in the context of that household.
- Roles: viewers can see; members can see and edit; admins can also manage people and invitations; owners can also delete or hand over the household.
- The people who operate the Service can manage accounts (for example, to help you recover access), but there is no administrative screen that shows any household's finances or documents.
7. Security
We use administrative, technical and physical safeguards appropriate to financial information, including:
- HTTPS for all traffic; the app server is reachable only through a Cloudflare Tunnel and publishes no ports to the internet
- Mandatory two-step sign-in (password plus authenticator app) for every account, with lockouts and rate limits against guessing
- Per-household encryption keys: connection credentials, AI keys and every vault file are encrypted (AES-256-GCM) with a key unique to your household, itself protected by a master key
- Row-level security in the database, so households are walled off from each other
- Argon2id password hashing; hashed recovery codes and session tokens
- Session time-outs, and protection against cross-site request forgery
- Nightly database backups that are encrypted before they are written
No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you and any authorities as required by law.
8. Data retention
| Data | Kept |
|---|---|
| Account (name, email, sign-in factors) | Until you delete your account |
| Household data, documents, notes, AI reports and memory | Until you delete them or the household; deleting a household removes its data (not just hides it) |
| Data from connected accounts | Until you disconnect and delete it, or delete the household |
| Sent-alert records | About 400 days, so the same alert isn't sent twice |
| Sessions | End after 30 minutes idle or 12 hours; up to 30 days if you choose to remember a device |
| Security log (email, IP, time, event) | Kept to protect accounts and the Service, including after an account is deleted (the link to the deleted account is removed) |
| Encrypted backups | Roll off after 30 days, so deleted data is gone from backups within about 30 days |
| Documents sent for reading | Processed in a temporary file that is deleted as soon as the text is extracted; raw document text is not stored |
We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.
9. Your choices: export, correct, delete
- Export: download everything your household holds — including your vault files — from People & households → Your data. Exports never include passwords or keys.
- Correct: edit or remove what you entered at any time in the app.
- Disconnect: remove a brokerage, bank or AI key connection at any time.
- Delete: delete a household (owners), or delete your account from My account. Deletion is real deletion. When a household is deleted, we also remove its SnapTrade user where we manage one, so nothing keeps syncing.
- Email: choose which alerts and summaries you receive. Essential account and security email cannot be turned off while you have an account.
For anything you can't do in the app, contact hello@getmoneygod.com. We will respond within 30 days, or sooner where the law requires.
10. US state privacy rights
Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws — you may have the right to:
- Know and access the personal information we hold about you, and receive it in a portable format
- Correct inaccurate personal information
- Delete personal information
- Opt out of the sale of personal information, its sharing for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects — we do none of these
- Limit the use of sensitive personal information — we use it only to provide the Service you asked for, as permitted by law
- Not be discriminated against for exercising these rights
- Appeal a decision we make about your request, by replying to our decision; if we deny the appeal you may contact your state attorney general
California (CCPA/CPRA) notice at collection
In the past 12 months we have collected the following categories of personal information, for the business purposes in Section 2, from you, from the accounts you connect and automatically as described in Section 1:
| Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email address, IP address, account ID | Cloudflare, Resend, error tracking |
| Customer records / financial information | Account balances, holdings, transactions, tax and insurance details | SnapTrade, SimpleFIN, your AI provider (only what a feature needs) |
| Sensitive personal information | Account log-in credentials (your password and authenticator), financial account information, and any government identifiers or health information inside documents you upload | Not disclosed except to the providers above as needed to deliver the feature you use |
| Characteristics of protected classifications | Age or marital status, if you enter them for planning | Your AI provider, only if a feature you run needs them |
| Internet or network activity | Security log, usage records | Cloudflare, error tracking |
| Inferences | Projections, plans and suggestions the Service computes for you | Not disclosed |
We have not sold or shared (for cross-context behavioral advertising) any personal information, including of consumers under 16. Retention periods are in Section 8.
How to make a request
Use the export and delete tools in the app, or email hello@getmoneygod.com with the subject "Privacy request". We verify requests by confirming control of the account's email address and, for access or deletion, two-step sign-in. You may use an authorized agent; we may ask for proof of the agent's authority and verify your identity directly. California's "Shine the Light" law: we do not disclose personal information to third parties for their own direct-marketing purposes.
11. Financial privacy laws
Money God is a personal finance tool. SPARCgen is not a bank, broker-dealer, investment adviser or tax preparer, and does not offer loans, deposit accounts, insurance or other financial products. To the extent the Gramm-Leach-Bliley Act or similar financial privacy laws apply to the Service, we handle your information as described in this policy, and we do not disclose your nonpublic personal information to non-affiliated third parties except as needed to provide the Service you requested, as permitted by law.
12. Children
You must be 18 or older to create an account. The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children. Parents and guardians may enter limited information about their children (for example, for college planning or tax dependents) as part of their own household; that information is controlled by the household and can be edited or deleted at any time. If you believe a child has created an account, contact hello@getmoneygod.com and we will delete it.
13. Users outside the United States
Money God is designed for US households and US tax rules. The Service is operated from, and your information is stored and processed in, the United States. If you use it from elsewhere, you understand your information will be transferred to the United States, and your chosen AI provider may process data in other countries under its own terms.
14. Changes to this policy
We may update this Privacy Policy from time to time and will post the new version here with a new "Last updated" date. For material changes that affect your rights, we will notify registered users by email and in the app at least 30 days before the changes take effect.
15. Contact
To exercise your rights, ask a question or report a privacy concern:
SPARCgen Inc (Money God)101 Morgan Ln, Suite 206
Plainsboro, NJ 08536
Email: hello@getmoneygod.com