What Sprout collects, and where it goes.

What we collect

• Account information: your email address, optional display name, internal user ID, and authentication records. If you sign in with Apple or Google, we receive the account identifier and email address they share; for Apple on iPhone we keep Apple's refresh token encrypted so we can revoke it when you delete your account. Passwords are held by our identity provider as salted hashes and never by Sprout.
• Financial information you authorize: institution and account identifiers, account type and mask, balances, transactions, merchant and category information, connection status, and synchronization history. We never receive your bank password.
• Your content: the questions you ask, your conversations, the answers generated for you, and any support message you send us.
• Usage and device data: the pages and screens you view, what you click, tap, scroll, and type, session recordings, page performance, device and browser details, approximate location derived from your IP address, the link or ad that brought you to Sprout, and identifiers stored in cookies or on your device. See Analytics and advertising.
• Operational data: request and audit identifiers, security events, provider event identifiers, error details, and limited server logs such as IP address when needed to operate, secure, and troubleshoot the service.

How it is used

Your onboarding answers about goals, tracking habits, and account setup personalize your starting plan. They are saved on your device under your Sprout account. Those answers, the onboarding steps you view, and the plan you select are also sent to our analytics providers so we can measure and improve onboarding. They are not sent to an AI provider.

We receive account information from you, from our identity provider, or from Apple or Google when you sign in with them. We receive financial records from Plaid only after you complete its authorization flow. We use this data to sign you in, connect and synchronize the accounts you authorized, show balances and analysis, generate the answers you request, prevent fraud and abuse, keep the service reliable, and provide support.

We also use usage data, session recordings, and analytics events to understand how people find and use Sprout, fix problems, and improve the website and the app, and we use advertising measurement to learn which of our ads bring people to Sprout. Sprout does not show ads, and we do not sell personal data for money. Some US state privacy laws treat that kind of advertising measurement as selling or sharing personal data.

Who receives it

• Plaid: provides the bank-connection and financial-data access flow. Plaid receives the information required to create and maintain the connection, under its own privacy terms.
• Contracted AI provider: only after you allow AI analysis, we send your question and the financial records needed to answer it to the configured AI inference provider. That data is used to deliver the feature you asked for, not advertising or cross-service tracking.
• WorkOS: our identity provider. It stores your email address, name, sign-in methods, and password hash, verifies your email, sends sign-in and password-reset emails, and authorizes connections such as ChatGPT and Claude.
• ChatGPT (OpenAI): only if you connect Sprout to ChatGPT. ChatGPT receives the balances, transactions, and summaries it requests to answer your questions there, plus your email address and display name to label the connection. Sprout sends nothing to ChatGPT that the connected account cannot see, and OpenAI handles it under its own privacy terms.
• Claude (Anthropic): only if you connect Sprout to Claude. Claude receives the balances, transactions, and summaries it requests to answer your questions there, plus your email address and display name to label the connection. Sprout sends nothing to Claude that the connected account cannot see, and Anthropic handles it under its own privacy terms.
• Analytics and session-recording providers: PostHog, Microsoft Clarity, and Google receive usage data, device details, and session recordings from the website and the app, as described in Analytics and advertising.
• Advertising partners: Meta and Google receive ad-measurement data from the website, the web app, and the iPhone and Mac apps. In the apps, your advertising identifier and hashed email go to Meta only if you allow tracking. Apple tells the iPhone app which of its App Store ads led to an install.
• Infrastructure and security providers: may process encrypted application data, logs, or error information solely to host, secure, and operate the service.

These providers are required to protect data consistently with this policy and applicable law. PostHog, Microsoft, Google, Meta, and Apple also handle data under their own privacy terms. We may also disclose information where legally required, or to protect users and the service.

Apple handles iOS subscription billing under its own privacy terms. We give Apple an opaque identifier derived from your Sprout user ID to associate the subscription with your account. Sprout checks verified Apple transactions on your device for access; this implementation does not upload receipts or purchase history to our servers. We do not receive your payment card details.

Analytics and advertising

The website at sprout.z4k.app and the app, on the web at app-sprout.z4k.app and on iPhone, use the tools below. They store cookies or similar identifiers in your browser or on your device. The website and the web app share these identifiers, so a visit to the website can be connected with your later use of the app and, once you sign in, with your Sprout account.

• PostHog: product analytics, heatmaps, and session recording on the website and in the app. It receives page and screen views, clicks and taps, scrolling, typed input, page performance, device and browser details, approximate location, and app events such as onboarding answers, sign-in method, plan choices, purchases, bank connections, and chat activity.
• Microsoft Clarity: session recording and heatmaps on the website and in the app, with the same kinds of interaction and device data.
• Google Analytics and Google Analytics for Firebase: usage and conversion measurement on the website and in the app, including page and screen views, events, device details, and approximate location.
• Meta Pixel and Meta SDK: advertising measurement. On the website and the web app, the Meta Pixel tells Meta which pages you visit and actions you take, such as opening the app or signing up, and Meta can connect that with your Meta account. In the iPhone and Mac apps, the Meta SDK reports installs, sign-ups, trials, and subscriptions with your Sprout user ID so Meta can measure our ads; it adds your advertising identifier and hashed email only if you allow tracking when Sprout asks through App Tracking Transparency. Google Analytics for Firebase reports the same app events for Google ads measurement.
• Apple Ads attribution: if you install the iPhone app from a Sprout ad on the App Store, the app uses Apple's AdServices framework to learn which campaign, ad group, keyword, and ad led to the install. This does not require tracking permission. We store the result with your app analytics.

Session recordings capture what is shown on screen and what you type, so we can replay how the website and the app were used. On the website, that includes anything you type into a form, such as the contact form. In the app, recordings can include your balances, transactions, account names, and your questions and Sprout's answers. Password fields are always masked; other content can appear in recordings unmasked.

Keeping and deleting

Account and financial data is retained while your account is active. Connection records stop updating as soon as you disconnect an institution.

In the app, open More → Delete account to permanently delete your account together with its financial records, transactions, conversations, and access tokens. Limited security or legal records may be retained only where the law requires it or where it is necessary to prevent abuse, and are separated from the deleted account wherever possible.

Deleting your Sprout account clears its onboarding answers on that device. It does not cancel your Apple subscription or delete billing records held by Apple. Manage or cancel the subscription separately in your Apple subscription settings.

Analytics events, profiles, and session recordings are kept by PostHog, Microsoft Clarity, Google, and Meta under each service's retention settings. Deleting your Sprout account also deletes your PostHog profile, events, and recordings; for the other providers, contact us to have analytics data linked to you deleted.

Your choices

You choose which institutions to connect, and you can disconnect any of them from Accounts. You can disconnect Sprout from ChatGPT or Claude at any time in that assistant's connector settings, which stops new requests. You can delete your account at any time. System permissions such as notifications can be changed in iOS Settings.

On iPhone, you choose whether to allow tracking when Sprout asks, and you can change it later in Settings → Privacy & Security → Tracking. In a browser, you can block or delete cookies, or use a content blocker, to limit analytics and advertising tools. Google offers a Google Analytics opt-out browser add-on, and Meta lets you manage ad preferences in your Meta account settings.

Security and children

We use transport encryption, access controls, user-scoped data access, and strict separation of provider secrets from the browser and the app. No system is completely secure, and we will tell you promptly if an incident affects your data.

Sprout AI is not directed to children under 13, and we do not knowingly collect their personal data.

Changes

If this policy changes in a way that materially affects you, we will update the effective date above and notify you in the app before the change takes effect.

Contact

Privacy questions and requests: [email protected]. You can also reach us from the contact page.