Privacy Policy
Last updated: 10/16/2026
- We collect only what powers your budget, net worth, and account features, and what keeps your account secure — nothing more.
- We never sell or rent your data, financial or otherwise, to anyone, for any reason.
- Connecting an account through Plaid always shows you what's shared first, and you approve it.
- You can remove any account, entry, or your whole profile whenever you want.
This policy explains what information Arko ("we," "us") collects when you use the app, why we collect it, and what control you have over it. Arko is a personal budgeting and net worth tracking application.
Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, password (hashed, never stored in plain text) | You, at signup |
| Financial account data | Balances, account type, institution name, and — where enabled — transaction history and investment holdings | Plaid, only for accounts you explicitly connect |
| Budget and tracking data | Categories, amounts, notes you enter manually | You, directly |
| Payment information | Processed for paid tier subscriptions and lifetime purchases. We keep your plan and billing status, such as whether a renewal payment didn't go through | Our payment processor (Stripe) — we don't store card details ourselves |
| Usage and device signals | The last time you opened Arko; at sign-up, a device identifier and the IP address you signed up from, used only to stop repeat free trials | Your browser |
| Activity and error records | A log of important actions in your account (such as connecting or removing a bank, or changing two-factor settings), and errors the app hits on your device (the error message and page only) | The app, as you use it |
| Messages you send | Feedback form messages, with your account email (and your name, if you add it) so we can reply. They're emailed to us, not stored in the app | You |
How we use your information
- To provide the core features you're using Arko for: budgeting, net worth tracking, and account aggregation.
- To detect recurring bills, subscriptions, and income when you've connected accounts with Transactions enabled — this detection is automatic, but nothing is added to your budget without your explicit approval.
- To communicate with you about your account, such as password resets or service updates.
- If you switch them on in Settings → Email updates, to send the emails you picked: new subscriptions and price changes, budget pace, and a monthly recap. All are off by default, and every email links to turn it off.
- If you tick "Trust this device" when entering a two-factor code, to skip the code on that browser for 30 days. We keep only a scrambled copy of a random code stored in that browser, and you can remove it from Manage 2FA at any time.
- To keep your account secure, stop repeat free trials, and find and fix problems in the app.
We do not sell or rent your personal or financial information to any third party, for any purpose, ever. Data obtained via Plaid is used exclusively to power features within Arko itself, for the account holder it belongs to.
Service providers. Arko runs on a few providers that process data only to provide the service to you: Vercel (hosting), Supabase (database and sign-in), Plaid (bank connections), Stripe (payments), Resend (email delivery), and ImprovMX and Google (forwarding and receiving mail sent to contact@arkofinance.com, including feedback). Pages also load fonts and code libraries from Google Fonts and jsDelivr, and stock and fund logos from Parqet; those services see your IP address and, for logos, the ticker symbol — never your account information.
Browser storage and cookies. Arko keeps your sign-in session, a few settings, and some short-lived status in your browser — such as display preferences, dismissed notices, whether your subscription's latest payment went through, and, if you chose it, the trusted-device code. We don't use advertising or analytics cookies. Stripe's checkout and Plaid's connection window may set their own cookies for security and fraud prevention.
Your consent
When you connect a financial account through Plaid Link, Plaid shows you exactly what data will be shared and requires your explicit agreement before any connection is made. You can review or revoke access to any connected account at any time from the Connections page in Arko, or directly through Plaid's own consumer portal at my.plaid.com.
Data retention and deletion
- We retain your data for as long as your account is active, so the app continues to work as expected.
- You can remove any individual linked account, budget period, or log entry at any time — these deletions are immediate and permanent.
- You can delete your entire account at any time from Settings → Delete account, on the website or in the iPhone app. It takes effect immediately: any subscription is cancelled, every bank connection is revoked at Plaid, and all of your data and your sign-in are erased. Our payment processor (Stripe) keeps its own payment records where the law requires it (e.g., for tax purposes), and we keep only a note that your device or network already used the free trial — no name, email, or financial data. You can also email contact@arkofinance.com and we'll do it for you within 1-3 business days.
- Removing a linked account fully disconnects it — both from Arko and from Plaid's access to that institution — once it's the last account tied to that connection.
- If a free trial ends without upgrading to a paid tier, any connected financial accounts are automatically and fully disconnected (revoked at Plaid's end, not just hidden), since connected accounts are a paid-tier feature. Manually entered budget data is not affected. We email a reminder about two days before a trial ends. The same applies if a paid plan is cancelled and the account returns to the free tier.
- If you don't open Arko for about 90 days while bank connections are active, we'll email you once. If you still haven't returned 14 days after that email, your bank connections are disconnected at Plaid's end. Your accounts stay in Arko as manual accounts with their last balances, and nothing else is removed; you can reconnect anytime. Connections whose accounts have had no new transactions in 90 days are also flagged in Connections so you can disconnect them yourself.
Security
We use industry-standard practices to protect your data, including encryption in transit (TLS) and at rest, and restricted access to systems that store financial data. Details are available in our Security Policy on request.
In the iPhone app, Face ID lock is handled entirely by your phone — Arko never receives your face or fingerprint data.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. To exercise any of these rights, contact us at contact@arkofinance.com. You can also export your log (as a spreadsheet, CSV, or PDF) and save any budget as a PDF yourself, anytime, from the app.
Changes to this policy
We'll update this page when our practices change. Material changes will be communicated to you directly.
Contact
Questions about this policy or your data: contact@arkofinance.com