Privacy Policy

• We use your information to run Cruse for you: to sync your accounts, build your budgets and plans, and answer your questions.
• We don’t sell your information, and we don’t use it for advertising.
• We share it only with the companies that help us run Cruse, with household members you choose to share with, and when the law requires it.
• You can disconnect a bank or delete your account in the app at any time.

Cruse is operated by Cruse, LLC, a Texas limited liability company (“Cruse,” “we,” “us”). This policy explains how we collect, use, share and protect personal information when you use the Cruse mobile app, the Cruse web app at cruse.app and our website at getcruse.com (together, the “Service”). It’s part of our Terms of Service.

• Account details. Your name and email address, and a phone number if you add one. Passwords are handled by Google Firebase Authentication; we never see or store them. If you sign in with Google or Apple, we receive the name and email address they share with us, which with Apple can be a private relay address.
• Preferences. Your region, language, currency and time zone, the financial goals you pick when you sign up, and your notification settings.
• Financial information you enter. Transactions you add yourself, budgets, goals, debts, notes and comments.
• Images and files. Images you attach to AI chats, and files you import from other finance apps, such as CSV exports.
• AI conversations. The messages you send to Cruse’s AI assistant and its replies.
• Household information. If you create or join a household, the email addresses of people you invite, and the splits, settlements and comments you add.
• Messages to us. What you send when you email us, and the email address you give us to join our waitlist.

When you link an account, you connect it through Plaid Inc. You enter your bank login in Plaid’s screens, and Cruse never sees or stores it. With your permission, Plaid gives us:

• Accounts. Each account’s name and type, the last four digits of its number, its balances and its credit limit.
• Transactions. Amount, date, merchant, category, and the merchant’s city, state and country.
• Loans and credit cards. Balance, interest rate, minimum payment, last payment, due date and statement details.
• Investments. Holdings, quantities, cost basis and value.

We don’t receive full account numbers or routing numbers. Plaid’s own handling of your data is described in the Plaid End User Privacy Policy, and you can see and manage the connections you’ve made through Plaid at my.plaid.com.

• Diagnostics. When the app crashes or hits an error, it sends a report to Sentry with your device model, operating system and app version, what went wrong, and performance timings.
• Website and web app analytics. On getcruse.com and cruse.app, Vercel Web Analytics and Speed Insights record which pages are visited, the site that linked there, your browser, operating system and device type, your approximate location (country, region and city) and how fast pages load. They don’t use cookies, and Vercel’s visitor count relies on an anonymous identifier that it discards after 24 hours. We see only totals, not individual visitors. The mobile app doesn’t use them.
• Notifications. If you turn on push notifications, a device token so we can send them. Notifications can include details such as a merchant name or an amount, and can appear on your lock screen.
• Network information. Your IP address, which we use briefly to limit repeated requests and protect accounts, and which our hosting providers may record in their logs.
• Merchant logos. When the app shows a merchant’s logo, your device may load it from a third-party logo service, which can see your IP address and which logo was requested.
• Cookies and browser storage. The web app uses two cookies that keep you signed in, and browser storage for your sign-in session and display theme. Both are needed for the web app to work. Our website at getcruse.com sets no cookies.

We don’t use advertising trackers, we don’t track you across other apps or websites, and we don’t collect your precise location or your contacts. Because we don’t track you across websites, Cruse works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

• To provide the Service. To sync your accounts, categorize spending, track budgets and goals, forecast cash flow, find subscriptions and bills, and show you insights.
• To power AI features. To answer your questions, draft plans and write summaries. See “How our AI works with your data” below.
• To keep Cruse safe. To prevent fraud and abuse, enforce usage limits and secure accounts.
• To talk with you. To reply to your emails, send notifications you’ve turned on, and, if you joined our waitlist, confirm your spot and tell you when Cruse opens.
• To improve Cruse. To fix bugs, make answers better and make pages faster. This can include people on our team reviewing AI conversations with personal details removed, and turning them into test cases. We don’t let other companies train their AI models on your conversations.
• To meet legal obligations. To comply with the law and to protect our users, the public and Cruse.

We don’t sell your personal information, we don’t share it for targeted advertising, and we don’t share it with other companies for their own marketing.

Cruse’s AI assistant is powered by Google’s Gemini API. To answer a question, we send Google your message and your recent conversation, your first name, the information from your account needed to answer it (such as spending totals or balances), and any image you attach. To write summaries, such as budget and period reviews, debt payoff plans, Money Date agendas and bill negotiation scripts, we send Google the figures they’re built from, such as category totals and debt balances.

Before account data reaches the AI, we remove identifiers such as account IDs and mask details such as email addresses and long numbers. What you type is sent as you wrote it, so please don’t type full card or account numbers, or your Social Security or Social Insurance number.

Google processes this data for us as a service provider. Under Google’s terms for its paid API, Google doesn’t use it to improve its products, and it keeps prompts and replies for up to 55 days only to detect abuse.

The AI can change your data, for example by creating a budget, only after you confirm. Its replies are generated automatically and can be wrong. They are educational, not financial advice.

We share personal information only in these situations:

• With service providers. Companies that run parts of Cruse for us, under terms that limit how they can use your information:

• Plaid: connects your bank accounts.
• Google: sign-in (Firebase Authentication), push notifications (Firebase Cloud Messaging) and AI features (Gemini API).
• Apple: Sign in with Apple, and push notifications on Apple devices.
• Expo: issues the tokens the mobile app uses to receive push notifications.
• Stripe: payments and subscription management. You enter card details on Stripe’s pages, and we never see them.
• Amazon Web Services: storage for files you import and exports you create.
• Neon, Vercel and our other hosting providers: run our databases, servers, website and web app in the United States. Vercel also provides the website and web app analytics described above.
• Sentry: crash and error reports.
• Resend: keeps our waitlist and sends its emails.
• Microsoft: hosts our email, so it processes messages you send us.

• With your household. If you join a household, as described in the next section.
• For legal and safety reasons. To comply with the law, a court order or a valid request from authorities; to enforce our terms; or to protect the rights, safety or property of our users, the public or Cruse.
• In a business transfer. If Cruse is involved in a merger, acquisition, financing or sale of assets, your information may pass to the new owner, who must honor this policy for the information it receives.
• With your permission. For anything else we describe when we ask.

Households let people manage money together. If you join one:

• By default, other members can see each account you link: its name, institution, type, last four digits, balances, credit limit, loan and card details, and its transactions.
• You can change this for each account, to share only its name, institution, type, last four digits and current balance, or to hide it.
• Members can see each other’s names and email addresses.
• Household summaries such as Money Date add up spending and income from every member’s linked accounts, including accounts you’ve chosen not to share individually.
• Splits, settlements and comments you add are visible to the household.
• If the person who created the household deletes their account, or the household’s owner leaves the paid plan, the household closes and its shared records (splits, settlements, invites and Money Date history) are deleted for everyone.

• We keep your information while your account is open, except as described here.
• AI chat messages are deleted automatically 30 days after they’re sent. We don’t keep images you attach to a chat once the reply is written. A record of each action you confirmed through the AI is kept until you delete your account.
• If you unlink a bank, we ask Plaid to disconnect it and we delete that bank’s accounts, transactions and holdings from Cruse. Things created from them, such as recurring bill records and net worth history, can stay until you delete your account.
• When you delete your account, we cancel your subscription, disconnect your banks at Plaid, delete the files you uploaded or exported, and delete your account data from our database.
• Deleted data can remain in our backups for a limited time before it’s overwritten. Our service providers keep some records under their own policies; for example, Stripe keeps payment records as the law requires.
• We may keep information longer when the law requires it, or to resolve disputes and prevent fraud. We may keep information that no longer identifies you, such as de-identified test cases, to improve Cruse.

• We encrypt the tokens that connect Cruse to your bank before we store them, and we never receive your bank login.
• Access to user data is limited to the people and systems that need it to run Cruse.
• On your phone, your sign-in token is kept in the device’s secure storage. The app also keeps recently loaded data on your phone for up to a day so it opens quickly, so please protect your phone with a passcode.
• No system is perfectly secure. If a breach affects your information, we’ll notify you as the law requires.

• Update your profile and notification settings in the app.
• Unlink a bank in the app, or revoke access at my.plaid.com.
• Export the transactions you’ve added yourself, and a tax report built from them, in the app. For a copy of anything else, email us.
• Delete your account at any time in the app’s settings.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to withdraw your consent. Email support@getcruse.com and we’ll respond within 30 days. We may need to confirm your identity first. We won’t treat you differently for using these rights. Because we don’t sell your information or use it for targeted advertising, there’s nothing to opt out of.

We handle the personal information of people in Canada in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec’s. By using Cruse, you consent to the collection, use and sharing described in this policy. You can withdraw your consent by deleting your account, although some features need certain information to work.

We and our service providers store and process your information in the United States, where it may be accessible to authorities under US law.

Our founder is the person responsible for protecting personal information at Cruse. To reach them, or to access or correct your information, email support@getcruse.com. If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Cruse is for adults 18 and older. We don’t knowingly collect information from anyone under 18. If you believe a minor has given us information, email us and we’ll delete it.

If we make material changes, we’ll tell you in the app or by email before they take effect. The date at the top shows when this policy last changed. This policy is also available in Spanish and French.

Email support@getcruse.com. Cruse is operated by Cruse, LLC, a Texas limited liability company.