1. Overview
SirHENRY is built on a local-first architecture. The financial data you import and generate is stored on your device in a local SQLite database. This Privacy Policy explains what data is collected, how it is used, and what protections are in place.
One feature is an exception to the fully local model. If you connect a bank account using our hosted bank-connection service (the "Plaid relay"), the credentials that authorize access to your financial institution, and the account and transaction data retrieved on your behalf, pass through servers operated by Henry Financial, Inc. See Section 3 (Bank Connections and the Plaid Relay) for details. Where this policy describes data as staying on your device, that description does not apply to the hosted relay path.
2. Information We Collect
The Service may collect the following types of information:
- Account setup information — Name, household details, and financial goals you provide during onboarding.
- Financial data you import — Bank accounts, transactions, investment holdings, insurance policies, tax documents, and other financial information you manually enter or connect through Plaid.
- Usage preferences— Theme selection, sidebar state, and other interface preferences stored in your browser's localStorage.
3. Local Data Storage
The financial data you import and generate — transactions, holdings, balances, goals, insurance and tax details, and AI conversation history — is stored in a SQLite database on your local machine. Except for the specific data flows described elsewhere in this policy (the Plaid relay in Section 3a, AI processing in Section 4, and the third-party services in Section 5), this data is not uploaded to or stored on centralized servers operated by Henry Financial, Inc.
- Bank connection tokens obtained through the local (non-relay) connection path are encrypted using Fernet symmetric encryption before being stored locally.
- You may delete your locally stored data at any time by removing the local database file.
- You may export your data for portability at any time through the Service.
3a. Bank Connections and the Plaid Relay
SirHENRY offers two ways to connect a bank account, and they have materially different privacy characteristics:
- Local connection — The Plaid access token is delivered to your device, encrypted locally with Fernet, and stored only in your local database. Henry Financial does not retain the token or your bank data on its servers in this path.
- Hosted connection (the Plaid relay) — To support connections that cannot complete on-device, the bank link is brokered by a cloud relay operated by Henry Financial, Inc. In this path, the Plaid access token is exchanged and held by the relay (encrypted with a per-user key using AES-GCM), and the relay uses that token to retrieve your account and transaction data from Plaid on your behalf. This means your bank credentials (in the form of the access token) and the financial data retrieved with them pass through, and are processed by, Henry Financial-operated servers. Because the relay holds the decryption key for these tokens, Henry Financial is technically capable of accessing the token and the associated bank data for relay-linked institutions.
Relay-linked items are labeled in the Service. You may revoke a relay connection at any time, which instructs the relay to delete the stored token for that institution. If you require a strictly on-device model, use the local connection path or avoid connecting accounts through the relay.
4. AI Data Processing
When you use AI-powered features (such as the Sir Henry chat or AI-generated analysis), certain data is sent to Anthropic for processing by Claude, their AI model — by way of a service we operate. Here is what that means and how we protect your privacy:
- Requests pass through our infrastructure — AI features run on our infrastructure, using our Anthropic account. Your prompt — including the text of any document you ask us to read — passes through a service we operate before it reaches Anthropic. We meter that usage to bill your plan, so we can see how much you use and when.
- PII sanitization— Before data is sent to Claude, a privacy sanitizer replaces personal identifiers (names, employers, business entities) with generic labels (e.g., "Primary Earner," "Employer A").
- Limited data categories — Only the data necessary for your specific query is included. This may include anonymized transaction descriptions, account balances, and financial summaries.
- Not sent to AI — Bank account numbers, routing numbers, passwords and Plaid access tokens are never included in AI requests.
- Documents are the exception — When you import a W-2, 1099, pay stub or insurance document, its text and a picture of the page are sent to Anthropic so the fields can be read. Those pages can contain your Social Security number and account numbers, and they are not anonymized. Every other AI feature replaces your names and employers with generic labels first.
- Anthropic's privacy practices — AI requests are processed by Anthropic in accordance with their Privacy Policy. Anthropic does not use your data to train their models when accessed through the API.
You may revoke consent for AI features at any time through the Service's privacy settings, which will disable all AI-powered functionality.
5. Third-Party Services
The Service integrates with the following third-party services, each with their own privacy practices:
- Plaid— Used to connect your bank accounts and financial institutions. Plaid accesses your account data directly from your financial institution. Transaction data may include merchant location information (address, city, coordinates) provided by Plaid's enrichment service, which is stored locally for categorization purposes. When you use the hosted connection path, your Plaid access token and the bank data retrieved with it also pass through Henry Financial-operated relay servers, as described in Section 3a. Under CFPB Section 1033, you may revoke access to any linked institution at any time, and connections require reauthorization every 12 months. See Plaid's End User Privacy Policy.
- Anthropic (Claude) — Powers AI chat and analysis features. See Anthropic's Privacy Policy.
- Supabase— Provides authentication and hosted database services. When you create an account or sign in, Supabase (acting as our service provider) processes and stores your authentication data, such as your email address and login credentials. If you join our waitlist, the email address you submit is stored in a Supabase-hosted database operated on Henry Financial's behalf. See Supabase's Privacy Policy.
- Yahoo Finance — Provides market data and security pricing. No user data is sent to Yahoo Finance; only ticker symbols are used to request pricing data.
6. Data We Never Collect or Access
Henry Financial, Inc. does not collect, access, transmit, or store the following:
- Social Security numbers
- Full bank account or routing numbers
- Credit card numbers
- Raw tax returns or tax documents
Two clarifications apply. First, account authentication for the Service is handled by Supabase (Section 5); your login credentials are processed and stored by that provider on our behalf. Second, Plaid access tokens are held only on your device in the local connection path, but in the hosted connection path they are held by our Plaid relay and are decryptable by Henry Financial, as described in Section 3a. We do not treat relay-held tokens as data we "never access."
7. Data Retention
Because of our local-first architecture, you have full control over data retention:
- All financial data is stored locally on your device and persists until you delete it.
- AI conversation history is stored locally for your convenience and can be cleared at any time.
- You may delete all data by removing the local database file from your device.
- An audit log of data access actions is maintained locally (with no personally identifiable information) for your review.
9. Security
We take the security of your data seriously. Measures include:
- Encryption — Sensitive tokens (such as Plaid access tokens) are encrypted using Fernet symmetric encryption (AES-128-CBC) before being stored in the local database.
- HTTPS — All communication with external services (Plaid, Anthropic, Yahoo Finance) is conducted over encrypted HTTPS connections.
- Local-first architecture— By keeping most of your data on your device rather than on centralized servers, we reduce the attack surface for data breaches. Data handled by the Plaid relay and by our authentication provider (Supabase) is an exception and is protected by those services' own security controls, including per-user encryption of relay-held tokens.
- PII sanitization — Personal identifiers are stripped from data before it is sent to AI services.
10. Financial Privacy Notice (GLBA)
As required by the Gramm-Leach-Bliley Act, we maintain a separate Financial Privacy Notice that provides additional details about how we collect, use, and protect your nonpublic personal financial information. This notice is provided at onboarding and updated annually.
11. Children's Privacy
The Service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
13. Contact
For questions or concerns about this Privacy Policy or your data, please contact us at privacy@sirhenry.app.