Privacy Policy

Last updated: 2026-09-26

This Privacy Policy explains how Cstructor LLC ("we", "us") handles information in the NetRegister personal finance app ("the App").

The App is local-first: your financial data lives on your device by default. Cloud sync and bank connections are opt-in features you must explicitly turn on. If you never enable them, the App works fully offline, and we do not collect personal or financial information through the App.

Cloud Sync and Bank Sync are not available in the current release. They are shown in the App marked "Coming soon", and there is no way to sign in, store anything with us, or connect a bank until they ship. The sections below describe how those features handle your information when they do; until then the App collects nothing through them.

Summary

• We collect bank account and transaction data only if you connect a bank, and an email address only if you enable Cloud Sync or contact support.
• We use Plaid to connect to your bank. We never see or store your bank login credentials — Plaid does.
• Your data is stored on your device and, if cloud sync is on, in our hosted Supabase backend. Bank access tokens are encrypted at rest.
• We do not use your information for advertising, cross-context tracking, or product analytics. Our service providers may process limited technical and security logs to operate and protect Cloud Sync and bank connections.
• We do not sell your personal information or disclose it for cross-context behavioral advertising.
• Disconnecting a bank permanently deletes that bank's data from our servers and asks Plaid to revoke the corresponding connection.

Where we operate

The App is offered to residents of the United States. Bank connections are available for U.S. financial institutions only, and all cloud-stored data is held in the United States. We do not target the App at, or market it in, the European Economic Area, the United Kingdom, or Switzerland. See "If you are outside the United States" below.

Where your information comes from

We get information from the following sources:

• From you — the transactions, accounts, budgets, payees, and categories you enter or import, and (for cloud sync) your email address.
• From your bank, through Plaid — only if you connect a bank, and only for the accounts you choose.
• From the app stores — Apple or Google tell us what you have purchased and give us the receipt and a transaction identifier for it, so we can confirm the purchase is genuine and still valid. They do not give us your payment details.
• When you contact support — we receive the information you choose to send us, such as your email address and the contents of your message.

We do not buy personal data, and we do not receive it from data brokers, advertising networks, or other users.

Information we collect

We collect the following information when you use the relevant feature or provide it to us, as described below.

If you enable Cloud Sync

• Email address — used to sign you in via a one-time email code (OTP). Authentication is handled by Supabase. We use your email to identify your account and scope your data to you.
• Your financial records — the books, accounts, transactions, payees, categories, bills, budgets, and reconciliation sessions you have chosen to sync, along with the payee name variations the App records so it recognizes the same payee across imports.

If you connect a bank (via Plaid)

When you link a bank account, our servers request and store the following from Plaid, for the accounts you choose to connect:

• Account information — account name, type, and the bank-reported balance.
• Institution — the name of your bank.
• Transactions — for each transaction: amount, date, merchant/description, Plaid's category, and pending/posted status. We derive payees and categories from this data.
• A Plaid access token — a long-lived credential that lets our servers fetch your account data on your behalf. It is stored encrypted at rest (Supabase Vault) and is never sent to the app on your device.

We request the Transactions product from Plaid, for U.S. institutions.

We never receive or store your online banking username or password. Those are entered directly into Plaid's interface. See Plaid's End User Privacy Policy for how Plaid handles your credentials and data.

If you make a purchase

The Apple App Store or Google Play processes the payment and tells the App what you have bought — the one-time Premium unlock, and the annual Bank Sync subscription, which comes in tiers covering one through five connected banks. We never receive your card number, billing address, or any other payment detail — the store does not give them to us.

That purchase record is stored on your device so the App works offline. If you are signed in for Cloud Sync, we also store it in our database, linked to your account:

• whether you hold the Premium unlock;
• for a Bank Sync subscription — which tier you hold, how many banks it allows, its current status, when it renews or expires, whether auto-renewal is on, and any tier change you have scheduled for the next renewal;
• the store receipt and the transaction identifiers the store gives us.

We do this so a purchase you made on one device unlocks the App on your other devices, and so we can check with the store that the purchase is genuine and still valid — for example that it has not been refunded, or that a subscription has not lapsed. None of it identifies you beyond your account, and all of it is deleted when you delete your account.

Categories of personal information

Stated in the categories that U.S. state privacy laws use, so you can compare this policy against others:

Sensitive personal information

Your bank account and transaction data may constitute sensitive personal information under applicable privacy laws, including California's CPRA. We use it for one purpose only: to run the features of the App you have turned on. We do not use or disclose sensitive personal information to infer characteristics about you, and we do not use it for advertising of any kind.

We do not collect

• We do not collect your bank login credentials.
• We do not use third-party advertising, behavioral-tracking, session-replay, or product-analytics SDKs. This does not prevent our hosting, authentication, and bank-connection providers from maintaining limited operational and security logs for the services they provide.
• We do not collect your contacts, photos, location, or browsing history.

How we use your information

We use the information above solely to provide the App's features:

• Show your accounts, balances, and transactions.
• Keep your data in sync across your devices (if cloud sync is on).
• Keep your bank connection working (refreshing transactions, re-authenticating when your bank requires it).
• Unlock Premium features you have purchased.
• Respond to you when you contact support.
• Comply with law, and protect against fraud and abuse.

We do not sell or share your information

We do not sell your personal information or disclose it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We do not disclose personal information to advertising networks or data brokers, and we run no advertising.

We also do not use your information to train machine-learning models, and we do not build de-identified or aggregated datasets from it for any purpose other than operating, securing, maintaining, or improving the App. The Terms of Service make the same commitment.

Because we do not sell personal information or disclose it for cross-context behavioral advertising, there is currently nothing for you to opt out of on those bases.

How your data is shared

• Plaid — a third-party service we use for bank connectivity. We send Plaid the requests needed to provide the bank-connection feature, and Plaid provides account and transaction data in return.
• Supabase and its infrastructure providers — our hosting, database, and authentication providers, which store synced data and process technical and security logs on our behalf. Our Supabase project is hosted on AWS in the United States.
• Apple and Google — the app stores that distribute the App and process purchases. They act as sellers of record, not as our processors.
• Zoho Desk — our support provider, when you contact us through our support address. It receives the information you choose to include in your request.

Plaid, Supabase, and the infrastructure providers used to operate those services process financial data only to provide, secure, and maintain the features you choose to use. We do not otherwise disclose your data to third parties, except as described below.

Legal and safety disclosures. We may disclose your information if we believe in good faith that doing so is necessary to: (a) comply with applicable law, regulation, legal process, or an enforceable governmental request; (b) enforce our terms, including investigating potential violations; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Cstructor LLC, our users, or the public as required or permitted by law.

Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will provide notice of any material change in ownership or in the ways we use your personal information, as required by applicable law, including by posting notice through the Services or updating this Privacy Policy.

Where your data is stored

• On your device — the App stores your data locally (offline-first).
• In our cloud backend — if you enable cloud sync, your data is also stored in our hosted Supabase project, hosted on Amazon Web Services in the United States (AWS us-west-2, Oregon).

Your device backups are yours, not ours

If your device backs itself up — iCloud Backup, iCloud Drive, Google One, a computer backup, or any other tool you have set up — your App data may be copied into that backup. Those backups are controlled by you and by Apple, Google, or whoever provides the backup service, under their own privacy policies. We have no access to them and cannot read, restore, or delete them. Deleting your data from the App or from our servers does not remove it from a backup you control.

Web browser storage works the same way: on the web version, your data lives in your browser's local storage, and clearing your browser data clears it.

Data retention and deletion

• Turning Cloud Sync off deletes the cloud copy of your books and the accounts, transactions, payees, categories, bills, budgets, and other records in them from our active systems. The records on your device remain, and the App continues to work offline. Your account and purchase entitlements remain. If any banks are still connected, the App refuses to turn Cloud Sync off: it leaves Cloud Sync on and your cloud data in place. You must disconnect those banks yourself before turning Cloud Sync off; we do not disconnect them for you.
• Disconnecting a bank permanently deletes that bank's data from our servers — the account names, balances, and the amount, description, payee and category of every transaction, along with the internal mappings, the item record, and the encrypted access token — and asks Plaid to revoke the connection. Deletion markers remain so your other devices learn the accounts and their records are gone. These markers retain dates and record timestamps; internal account, book, transaction and Plaid identifiers; check/reference numbers; account type and currency; transfer and reconciliation links and status; and bill scheduling settings. They do not retain the original amounts, balances, payees, descriptions, categories, account names or account numbers. There is no scheduled purge of these markers: they remain until the book's cloud contents are deleted, including when you delete the book, turn off Cloud Sync or delete your account. The App also removes that bank's data from your device, including imported transactions. Entries you entered yourself are kept in a detached manual account on that device, along with their bills and reconciliation records. Transfer entries in other accounts are preserved. These detached records stay local until you edit them or enable Cloud Sync again. We ask you to confirm twice before removing the imported data. Plaid revocation depends on Plaid's systems: if Plaid cannot complete it because of an item-level or transient failure, the connection may remain active at Plaid even though we have removed our copy of the data and access token.
• Moving to a lower Bank Sync tier can also disconnect banks and delete their data. Before the lower limit takes effect at renewal, you can disconnect the banks you choose to remove. If too many remain connected at renewal, we disconnect the excess, starting with the banks you connected most recently. We delete each affected bank's data from our servers as we do when you disconnect it yourself. Its accounts and transactions are removed from devices signed in to Cloud Sync when they next sync; a device not signed in keeps its own copy.
• When Bank Sync ends because its paid term expires, a cancelled term ends, or the store revokes the subscription, we disconnect its linked banks and delete each bank's data from our servers as we do when you disconnect it yourself. Turning off auto-renewal alone does not delete bank data before the paid term ends, and a billing-retry or grace period does not trigger deletion. The affected bank accounts and transactions are removed from devices signed in to Cloud Sync when they next sync; a device not signed in keeps its own copy. Your other cloud-synced books and manually created accounts remain.
• Once those bank connections have been removed, turning Cloud Sync off separately deletes the remaining cloud copy as described above.
• A Premium refund or revocation removes the cloud Premium entitlement and suspends Bank Sync access. It does not itself delete cloud books or disconnect banks; existing connections remain until you disconnect them or the Bank Sync term itself ends. You can still request cloud-data or account deletion after signing in.
• If Plaid tells us your permission to access an institution has been revoked, we purge that item's data automatically.
• Deleting your account — in the app (Cloud Account → "Delete account & cloud data") you can permanently delete your entire account. Before deleting it, we ask Plaid to revoke each connected bank. We then erase cloud-stored data — books, accounts, transactions, payees, payee name variations, categories, bills, budgets, reconciliation sessions, purchase and subscription records, and stored access tokens. This cannot be undone. As with an individual bank disconnect, a Plaid revocation can fail even though the cloud account is deleted. The purchase and subscription records erased here include the record of a Premium unlock you paid for: deleting your account does not refund or revoke the purchase itself, which stays with your Apple Account, but our copy of it goes. To re-establish it, use Restore purchases on your iPhone. Restoring while signed out unlocks that iPhone; the app reports the restored purchase after you sign in. The browser version, which has no store of its own, regains Premium after successful server verification. Data stored on your device is separate and is not removed by this action. We remove data from our active systems when deletion completes. Residual copies may remain in encrypted backups for the period required by our hosting provider's backup and retention practices, after which they are overwritten or deleted under those practices.
• Deleting a book removes it from your device and, if Cloud Sync is on, deletes everything in it from our servers — the accounts, transactions, payees, categories, bills, budgets and reconciliation sessions it held. An empty marker remains so your other devices learn the book is gone; it carries no financial detail and not even the book's name. If the book still has a bank connected, disconnect the bank first: we leave that book's cloud data in place rather than break the link to a live connection, and disconnecting is what deletes it and revokes the connection at Plaid.
• Data stored only on your device is removed when you delete the App or clear its data.
• We keep records we are required to keep — for example, a record that a deletion request was made and honored — for as long as the law requires.

Security

• Bank access tokens are stored encrypted at rest.
• Bank credentials are never handled by us — they go directly to Plaid.
• Access to your synced data is scoped to your authenticated account.

We take reasonable technical and organizational measures to protect your information, including encryption of bank access tokens at rest, encryption in transit (HTTPS/TLS), and access controls that scope your data to your authenticated account. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You also play a part: keep your email account secure, since anyone who can read your email can request a sign-in code for your account, and keep your device locked.

Security Vulnerability Reporting. If you believe you have discovered a security vulnerability in the App or our Services, please report it to support@cstructor.zohodesk.com. We encourage good-faith security research. This policy does not authorize access to another person's data, disruption of our Services, testing outside your own account or device, or any unlawful activity. We generally will not pursue civil action against a researcher who follows these conditions, complies with applicable law, avoids accessing, modifying, downloading, or exfiltrating personal or financial information unless strictly necessary to demonstrate a vulnerability, and promptly stops testing and reports the issue if they encounter another user's information.

Security Incidents and Breach Notification. We maintain administrative, technical, and organizational safeguards designed to protect your personal and financial information against unauthorized access, use, alteration, or disclosure. If we determine that a security incident constitutes a breach for which notification is required under applicable law, we will notify affected individuals, regulators, and/or other parties as required by applicable law and within the time periods required by applicable law.

Your privacy rights

We extend the following privacy rights to all U.S. users, whether or not a particular state privacy law applies to Cstructor based on its scope or thresholds:

• Know and access — ask what personal information we hold about you and get a copy of it.
• Correct — ask us to fix inaccurate personal information.
• Delete — ask us to delete your personal information.
• Portability — receive your data in a portable, machine-readable format.
• Opt out of sale, sharing, or targeted advertising — we do none of these, so there is nothing to opt out of.
• Limit use of sensitive personal information — we already use it only for the purposes the law permits without an opt-out.
• Non-discrimination — we will not deny you service, charge you a different price, or degrade the App because you exercised a privacy right, except to the extent necessary to process your request or because the information is needed to provide the affected feature.

The fastest route is in the App itself. Disconnect a bank to delete that bank's data from our systems, or use Cloud Account → "Delete account & cloud data" to delete the cloud account. Both begin immediately and need no separate request to us; Plaid revocation remains subject to Plaid's ability to complete it.

Otherwise, email support@cstructor.zohodesk.com. We may verify your request by confirming control of the email address associated with your account and, when reasonably necessary, by asking for additional information needed to verify the request. We generally respond within 45 days, or within the period required by applicable law, whichever applies. Requests are free unless applicable law permits a fee or the request is excessive or repetitive.

Authorized agents. You may use an authorized agent to make a request. We will ask for written proof that you authorized them, and may ask you to confirm directly.

Appeals. If we refuse your request, you may appeal by replying to our decision with the subject line "Privacy appeal". We will respond within the period required by applicable law, generally within 45 days, with our decision and the reasons for it. If we deny the appeal, you may complain to your state Attorney General or other applicable regulator.

If you are outside the United States

The App is intended for U.S. residents and our services are hosted in the United States. If you use the App from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent under the GDPR or UK GDPR. Where those laws apply to us, we process your data to perform our contract with you (to provide the App's features) and, for bank connections, on the basis of your consent, which you give before connecting a bank and can withdraw by disconnecting it. Contact us at the address below to exercise any of these rights; you may also lodge a complaint with your local data protection authority.

Children's privacy

The App is intended for adults and is not directed to anyone under 18. You must be at least 18 to use the App, which matches our Terms of Service. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.

Communications from us

If you enable Cloud Sync, we email you one-time sign-in codes and, when necessary, service notices (for example, a security or outage notice, or a change to this policy). We do not send marketing email, and we do not send text messages or make marketing calls at all. There is no advertising or promotional messaging in the App.

Changes to this policy

We may update this policy. Material changes will be reflected here with a new "Last updated" date. Where a change materially affects how we handle bank-connected data or otherwise requires renewed consent under applicable law, we will provide an appropriate notice and, where required, ask you to review and re-accept the applicable in-app disclosure before using the affected feature.

Contact

Questions about this policy or your data? Contact us:

Cstructor LLC 4957 Lakemont Blvd SE, Suite C4-244 Bellevue, WA 98006 support@cstructor.zohodesk.com