Privacy

Privacy Policy

Your financial data belongs to you. This policy explains what we collect, why, and your privacy rights under U.S. law, including the California Consumer Privacy Act (CCPA) where it applies.

Last updated: 14 September 2026

Encryption in transit

All data is transmitted over a secure HTTPS (TLS) channel and stored in encrypted form on our servers.

No ads, no selling data

We don't show ads and we don't sell your data. Optional analytics (ours, Google Analytics, and Microsoft Clarity) run only after you agree.

Full control

You can disconnect a bank or delete your account with all data in one tap.

1. Who we are

ELIXIR FINANCE LTD (Company no. 16938984), registered in England and Wales, offering the Elixir app to people in the United States.71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

operates Elixir (“Elixir”, “we”, “us”), a personal-finance app for iOS and Android offered to people in the United States. We decide how and why the personal data described in this policy is used. Elixir is not a bank, is not a licensed financial institution, does not provide financial advice, and has no access to your bank accounts without your explicit consent.

2. What data we collect

  • Account data The email address and name you provide at sign-up. Needed to create and protect your account.
  • Financial data Accounts, transactions, categories and budgets that you create or that are derived from your data.
  • Manual and imported data Transactions and accounts you enter manually or import from files you choose to upload.
  • Bank connection data If you connect a bank account through Plaid, a regulated US bank-data network, we receive read-only transaction and balance data with your consent (see section 3).

3. How bank connection works

Bank account connection is read-only and performed through Plaid, a regulated US bank-data network. You authenticate with your bank; we never see or store your online-banking login credentials. We only receive transaction and balance data to display in the app. You can disconnect a bank at any time in settings and delete the imported transactions.

4. How we store data

Your data is stored on our servers in the United States. Data in transit is protected by HTTPS (TLS) encryption. Access is limited to what is needed to operate the service.

5. Who we share data with

We don't sell your data. We share it only with processors the app cannot work without, under appropriate contracts, and only to the extent required:

  • Plaid If you connect a bank, Plaid (a U.S. bank-data provider) sends us read-only transaction and balance data at your request. See section 3.
  • AI providers For the AI assistant to work, your transaction data may be sent to an AI provider for processing so it can answer questions about your finances.
  • Published exchange rates If we show an amount in another currency, we may use a published exchange-rate feed. That feed does not receive your personal data.
  • Google Analytics If you accept analytics on this website, Google receives page-view and similar usage data through Google Tag Manager / Google Analytics, used only to understand how the site is used. This does not include your bank data, and it does not run until you agree.
  • Microsoft Clarity If you accept analytics on this website, Google Tag Manager also loads Microsoft Clarity, which records how people use the pages (clicks and scrolls). It does not receive your bank data. This does not run until you agree.

We may disclose data if required by law or a valid legal request.

6. What we do NOT do

  • We don't sell or rent out your personal or financial data.
  • We don't show ads or embed ad networks.
  • We don't use advertising SDKs. Google Analytics and Microsoft Clarity on this website load only after you accept, and never see your bank data.
  • We don't request access to your bank without your explicit consent.

7. Why we use data

  • To provide core features: accounts, categories, budgets, spending analytics.
  • So the AI assistant can answer questions about your own finances.
  • To categorize transactions from connected banks and imports.
  • To maintain account security and prevent abuse.

8. Your rights

  • Access and correction You can view and edit your data directly in the app.
  • Account deletion You can delete your account together with all data in one tap in settings.
  • Bank disconnection You can disconnect a connected bank at any time and delete the imported transactions.
  • U.S. state privacy rights If you live in California or another U.S. state with a comprehensive privacy law, you may have the right to know what personal information we collect, request a copy, ask us to correct it, or ask us to delete it. We do not sell your personal information or share it for cross-context behavioral advertising. We will not deny you the service or change prices because you exercise these rights. Email the address in section 11; we aim to respond within 45 days. You can also delete your account in the app.

9. Retention and deletion

We keep your data while your account is active. After you delete your account, we remove your personal and financial data from our servers, keeping only what we are legally required to retain, and no longer than necessary.

10. Cookies and similar technologies

This website does not set analytics cookies until you accept. If you accept, Google Analytics (through Google Tag Manager) and Microsoft Clarity may set cookies on your device. The Elixir app does not set cookies for analytics; it uses on-device storage, and only after you agree in the app.

On this website and inside the Elixir app we use storage in three ways, and we treat them differently:

  • Strictly necessary. Your sign-in session and a few interface preferences. Without these the app cannot keep you logged in, so they are exempt from consent and are always present while you use the app.
  • Our own analytics (optional). A random anonymous identifier and a record of which pages and screens are opened and which buttons are pressed, used only to improve the product. Alongside it we record the site that referred you, any campaign tag in the link you followed, your browser and device type, and the country your browser's time zone points to. We never look up your IP address. We never record what you type into input fields. This is stored and sent only after you agree, and nothing about it runs until you do. The same identifier is carried from this website to the app so that one visit is not counted as two people.
  • Google Analytics (optional). On this website only, after you accept, we load Google Analytics and Microsoft Clarity through Google Tag Manager so we can see which pages people read. Google and Microsoft may set their own cookies. This does not include your bank data. Declining leaves both unloaded.

The first time you open this website, and again the first time you open the app (because they are separate sites), we ask you to choose. Accepting and declining are equally easy, and declining changes nothing about how either of them works. You can change your mind at any time: on this website through “Privacy choices” in the footer, and in the app through Settings → Privacy. Declining also erases our anonymous identifier from your device and stops Google Analytics and Microsoft Clarity on this site after a reload.

11. Changes and contact

We may update this policy as the service evolves and will update the date at the top of the page. For any privacy questions, write to us at support@elixirfinance.app.

When you contact us, we process your message and the email address on your account so we can reply. Support emails may remain in our inbox after you delete your account.

Still have questions?

We read every email. Write to us at support@elixirfinance.app.