Privacy policy

What we collect

• Your email address and password (stored hashed by our authentication provider), to sign you in.
• Balances, transactions, investment holdings and loan details from accounts you choose to connect through Plaid, and from files you upload.
• The categories, budgets, rules and notes you create.

How it's used

Only to provide Figure to you: categorizing transactions, finding recurring bills and income, budgeting, and tracking net worth. We don't sell your data, share it for advertising, or use it for lending decisions.

Service providers

Bank connections are provided by Plaid (see Plaid's end user privacy policy). Data is stored with our database provider (Supabase) and the app is hosted by Vercel. Prices for your watch list and assets come from market-data services (Finnhub, CoinGecko and Gold API), which receive only ticker symbols and asset names, never anything that identifies you. Each provider receives only what it needs to provide its service. Figure does not send your data to AI services; if you choose to use your own AI assistant to categorize transactions, you download that file and share it under your own account.

Security

Figure never receives your bank password. Bank access tokens and identifying details such as merchant names, descriptions and account names are encrypted before they are stored, all traffic uses HTTPS, and each person's data is isolated at the database level. Two-factor authentication is required before connecting a bank.

Retention and your choices

We keep your data while your account is active. You can disconnect any bank at any time, which revokes Figure's access with Plaid. You can delete your account in Settings, which permanently deletes your data and revokes all bank connections. Copies in our providers' backups expire on their backup schedule.

Contact

Questions or requests: travishaggar@gmail.com