Privacy Policy

• Account info: your name, email address, and sign-in method (email code or Google).
• Plan data you enter: current age, target retirement age, monthly income and expenses, and each goal’s category, cost, target age, and funding progress.
• Transactions you log against a goal.
• Basic session data (a secure, encrypted cookie) to keep you signed in.

We never ask for or store bank credentials, card numbers, or brokerage logins.

Solely to run the Service: computing your funding plan, rendering your goals and simulator, and sending you sign-in codes by email. We do not sell your data or use it for advertising.

Your data lives in a MongoDB database used only by Retired. Session cookies are encrypted and httpOnly, so they can’t be read by page scripts.

We use an email provider to deliver one-time sign-in codes, and optionally Google Sign-In if you choose that login method. Neither receives your financial plan data — only what’s needed to authenticate you.

You can review and edit your data any time from within the app. You can permanently delete your account and every record tied to it — profile, goals, transactions, and plan assumptions — from Profile → Danger zone → Delete account. Deletion is immediate and cannot be undone or recovered by us afterward.

We keep your data only as long as your account is active. One-time sign-in codes expire automatically within minutes and are not retained afterward.

The Service is not directed at anyone under 18, and we do not knowingly collect their data.

If this policy changes materially, we’ll update the date above and, where appropriate, notify you in the app.

Privacy questions or data requests: privacy@retired.app.