Privacy Policy

ELIXIR FINANCE LTD (Company no. 16938984), Registered in England and Wales.71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

operates ElixirFinance (“ElixirFinance”, “we”, “us”) — a personal-finance web app for users in the United States. We are the data controller for personal data described in this policy. ElixirFinance is not a bank, is not a licensed financial institution, does not provide financial advice, and has no access to your bank accounts without your explicit consent.

• Account data — the email address and name you provide at sign-up. Needed to create and protect your account.
• Financial data — accounts, transactions, categories and budgets that you create or that are derived from your data.
• Manual and imported data — transactions and accounts you enter manually or import from files you choose to upload.
• Bank connection data — if you connect a bank account through Plaid, a regulated US bank-data network, we receive read-only transaction and balance data with your consent (see section 3).

Bank account connection is read-only and performed through Plaid, a regulated US bank-data network. You authenticate with your bank — we never see or store your online-banking login credentials. We only receive transaction and balance data to display in the app. You can disconnect a bank at any time in settings and delete the imported transactions.

Your data is stored on our servers within the European Economic Area (Hetzner infrastructure). Data transfer between your device and the service is protected by HTTPS (TLS) encryption. Access is limited to what is needed to operate the service.

We don't sell your data. We share it only with processors the app cannot work without, under appropriate contracts, and only to the extent required:

• Account information service providers — regulated third parties that connect to your bank at your request and pass read-only transaction and balance data to us.
• AI providers — for the AI assistant to work, your transaction data may be sent to an AI provider for processing so it can answer questions about your finances.
• Central banks — we obtain published central-bank exchange rates. No personal data is transmitted in the process.

We may disclose data if required by law or a valid legal request.

• We don't sell or rent out your personal or financial data.
• We don't show ads or embed ad networks.
• We don't use third-party trackers or advertising SDKs to track you.
• We don't request access to your bank without your explicit consent.

• To provide core features — accounts, categories, budgets, spending analytics.
• So the AI assistant can answer questions about your own finances.
• To categorise transactions from connected banks and imports.
• To maintain account security and prevent abuse.

• Access and correction — you can view and edit your data directly in the app.
• Account deletion — you can delete your account together with all data in one tap in settings.
• Bank disconnection — you can disconnect a connected bank at any time and delete the imported transactions.
• Under applicable data-protection law you also have rights to erasure, restriction, portability and to object to certain processing. If you believe we have handled your data unlawfully, you may contact your local data-protection authority. For any request, contact us — we'll respond within one month.

We keep your data while your account is active. After you delete your account, we remove your personal and financial data from our servers, keeping only what we're legally required to retain, and no longer than necessary.

We set no cookies at all — not on this website, not in the app. We run no advertising, no third-party trackers and no external analytics services: everything described below is sent only to our own servers in the EU.

On this website and inside the ElixirFinance app we use your browser's storage in two ways, and we treat them differently:

• Strictly necessary. Your sign-in session and a few interface preferences. Without these the app cannot keep you logged in, so they are exempt from consent and are always present while you use the app.
• Analytics (optional). A random anonymous identifier and a record of which pages and screens are opened and which buttons are pressed, used only to improve the product. Alongside it we record the site that referred you, any campaign tag in the link you followed, your browser and device type, and the country your browser's time zone points to — we never look up your IP address. We never record what you type into input fields. This is stored and sent only after you agree, and nothing about it runs until you do. The same identifier is carried from this website to the app so that one visit is not counted as two people.

The first time you open this website — and again the first time you open the app, because they are separate sites — we ask you to choose. Accepting and declining are equally easy, and declining changes nothing about how either of them works. You can change your mind at any time: on this website through “Privacy choices” in the footer, and in the app through Settings → Privacy. Declining also erases the anonymous identifier from your device.

We may update this policy as the service evolves and will update the date at the top of the page. For any privacy questions, write to us at support@elixirfinance.app.