Privacy Policy

Last updated July 2026. Fire Horizon exists to answer one question — when you can retire — and that takes financial data you trust us with. This page explains exactly what we collect, who processes it, and how to take it back.

What we collect

Account details. Your email address, an optional display name, and a hashed password (never the password itself). If you sign in with Google, we receive your verified email address from Google — never your Google password.

The financial data you enter. Portfolio transactions (buys, sells, deposits, dividends), account balances and other assets you add, and the FIRE plan assumptions you set — spending, contributions, expected returns, target ages, and similar. This is the data the product runs on, and it stays yours.

Linked brokerage data via SnapTrade or Plaid. If you connect an account, the provider that handles the connection shares holdings, transactions, and balances with us. We never see your brokerage credentials — you enter them with SnapTrade or Plaid, not with us — and the access credentials they issue us are encrypted at rest on our servers.

Payment details via Stripe. Paid subscriptions are processed by Stripe. Your card number never touches our servers; we store only your subscription status and plan.

Third parties that process data for us

We share data with a small set of processors, each only what their job requires:

  • SnapTrade — brokerage account linking.
  • Plaid — brokerage account linking, for institutions we connect to that way.
  • Stripe — subscription payments and billing.
  • Resend — email delivery: account mail (verification, password resets, security notices) and, if you haven’t opted out, product updates about your own plan.
  • Google — optional “Sign in with Google”.
  • Amazon Web Services — hosting and infrastructure; your data is stored on AWS.
  • Anthropic — powers the optional AI assistant. Only the content of your assistant conversation is sent; your portfolio data is not.
  • Google (Tag Manager) and Reddit — if you arrive from one of our ads, we use an advertising pixel (loaded through Google Tag Manager) to measure whether the ad led to a signup. This receives the fact that a signup or subscription happened — never your portfolio, balances, or holdings.

Each processor receives data solely to provide its service to us, under its own privacy and security commitments.

Cookies

We set two first-party cookies: a session cookie that keeps you signed in, and an attribution cookie that remembers which link brought you here so we know what’s working. If you arrive from one of our ads, our advertising pixel (see above) may also set a cookie to measure that conversion. We do not use cookies to build advertising profiles or track you across unrelated sites.

Ad-conversion measurement is on by default, and you can turn it off at any time:

Ad-conversion measurement is on for this browser. You can turn it off here.

This choice is stored in this browser, so it applies per browser and per device.

Email we send you

Two kinds. Account email — verification, password resets, security notices, receipts — is part of having an account and cannot be switched off while you have one. Product email is everything else: a monthly summary of your own plan, the occasional note when a milestone lands or a linked account stops syncing, and rarely, an offer.

Every product email carries an unsubscribe link that works without signing in, and you can choose which kinds you want from that same page. We cap product email at three a week and, in practice, send far less than that.

Retention and deletion

We keep your data for as long as your account exists — including when you downgrade a paid plan, where your data becomes read-only rather than being deleted. You can delete your account at any time in Settings → Delete account: this cancels any active subscription and removes your account data — portfolios, transactions, plan settings, linked-account tokens, and sessions — from our systems.

If someone referred you

If you signed up through a referral link, we record which affiliate referred you so they can be paid. Their dashboard shows them the date you joined, which plan you are on, and what it earned them — it never shows your name, your email address, or anything about your portfolio, and they cannot see your account.

What we never do

We do not sell your data, and we do not share your financial information — portfolios, balances, holdings, or transactions — with advertisers or data brokers. Ad-conversion measurement (above) tells an ad network only that a signup or subscription happened, never what you hold. Fire Horizon is paid for by subscriptions, not by your information.

Contact

Questions about this policy or your data? Email support@fire-horizon.com.

This document is a template pending legal review.