Privacy Policy

Account details. Your email address, an optional display name, and a hashed password (never the password itself). If you sign in with Google, we receive your verified email address from Google — never your Google password.

The financial data you enter. Portfolio transactions (buys, sells, deposits, dividends), account balances and other assets you add, and the FIRE plan assumptions you set — spending, contributions, expected returns, target ages, and similar. This is the data the product runs on, and it stays yours.

Linked bank and brokerage data via Plaid. If you connect an account, Plaid shares holdings, transactions, and balances with us. We never see your bank or brokerage credentials — you enter them with Plaid, not with us — and the access tokens Plaid issues are encrypted at rest on our servers.

Payment details via Stripe. Paid subscriptions are processed by Stripe. Your card number never touches our servers; we store only your subscription status and plan.

We share data with a small set of processors, each only what their job requires:

• Plaid — bank and brokerage account linking.
• Stripe — subscription payments and billing.
• Resend — transactional email (verification, password resets, account notices).
• Google — optional “Sign in with Google”.
• Amazon Web Services — hosting and infrastructure; your data is stored on AWS.
• Anthropic — powers the optional AI assistant. Only the content of your assistant conversation is sent; your portfolio data is not.
• Google (Tag Manager) and Reddit — if you arrive from one of our ads, we use an advertising pixel (loaded through Google Tag Manager) to measure whether the ad led to a signup. This receives the fact that a signup or subscription happened — never your portfolio, balances, or holdings.

Each processor receives data solely to provide its service to us, under its own privacy and security commitments.

We set two first-party cookies: a session cookie that keeps you signed in, and an attribution cookie that remembers which link brought you here so we know what’s working. If you arrive from one of our ads, our advertising pixel (see above) may also set a cookie to measure that conversion. We do not use cookies to build advertising profiles or track you across unrelated sites.

We keep your data for as long as your account exists — including when you downgrade a paid plan, where your data becomes read-only rather than being deleted. You can delete your account at any time in Settings → Delete account: this cancels any active subscription and removes your account data — portfolios, transactions, plan settings, linked-account tokens, and sessions — from our systems.

If you signed up through a referral link, we record which affiliate referred you so they can be paid. Their dashboard shows them the date you joined, which plan you are on, and what it earned them — it never shows your name, your email address, or anything about your portfolio, and they cannot see your account.

We do not sell your data, and we do not share your financial information — portfolios, balances, holdings, or transactions — with advertisers or data brokers. Ad-conversion measurement (above) tells an ad network only that a signup or subscription happened, never what you hold. Fire Horizon is paid for by subscriptions, not by your information.

Questions about this policy or your data? Email support@fire-horizon.com.