BeforeBefore privacy policy
Updated November 5, 2026
About this version
Before 0.1.0 offers personal planning with manually confirmed finances and optional bank-connection testing through Sign in with Apple and Plaid. Connecting is optional. Household sharing and Monarch are not enabled.
Information stored on your iPhone
Your profile, optional photo, birthday, ZIP, manually entered finances, personal goals, wishes, weekly rhythms and latest 100 purchase checks stay on your iPhone with iOS file protection. These local plan records are not uploaded when you connect a bank.
Photos
You can choose an optional profile photo, which is stored with your local profile. An optional purchase photo is held in memory while composing the question. Purchase photos are not saved to question history, uploaded or automatically analyzed for a price. You enter and confirm purchase costs yourself. Before uses Apple’s photo picker; selecting a photo does not give the app unrestricted access to your photo library.
Analytics and third parties
Before has no advertising, tracking SDK or product analytics. Apple handles Sign in with Apple and TestFlight under its own privacy practices. Optional bank connections use Plaid. Your bank credentials stay with your bank or Plaid. Apple supplies an app-specific identifier to authenticate your connection account; the app does not request your email or full name for bank sign-in.
Optional connected information
After you sign in and explicitly allow a connection, Before receives account details, balances and transactions through Plaid. Access tokens and financial records are encrypted in the private Before service on Supabase, accessed through our Vercel-hosted gateway. These connections are read-only; Before does not move money. This testing build stores connected information for coverage review. Purchase answers still use finances you confirm, not an unreviewed bank balance or credit limit.
Your controls and retention
Local records remain until you edit, clear or remove them. Disconnect an account in Settings → Bank accounts to stop its use in Before and remove cached financial records. If Plaid cannot confirm removal, a disconnect remains pending and can be retried. An encrypted token is retained only while removal is pending. Active connected records remain until disconnected. Clearing local app data does not disconnect bank accounts or erase existing device backups. Sign out revokes your app session; it does not disconnect an account. Contact hello@timandarobot.com to request deletion of the remaining connection identity and support correspondence; do not send bank credentials or account details.
Contact and policy changes
Email hello@timandarobot.com with Before in the subject for privacy or support requests. We use information you choose to send to respond. Do not email passwords, account numbers or financial records. We will update this policy before adding new data handling.