What We Store
Data you provide
| Data | Where it's stored | Who can read it |
|---|---|---|
| Email address | Supabase Auth | You, admin |
| Name (optional) | profiles table | You, your advisor (with consent) |
| Age, retirement age, inflation pref | user_preferences | You, your advisor (with consent) |
| Asset values and types | user_assets | You, your advisor (with consent) |
| Income, expenses, EMIs | user_cashflows | You, your advisor (with consent) |
| Goals | user_goals | You, your advisor (with consent) |
| AI chat history | ai_chat_sessions | You only |
| AI brain (personality model) | user_brains | You only |
| Memories extracted from chat | user_memories | You only |
Data we compute
Freedom Scores, projections, and AI analysis results are derived from your inputs. We store these outputs (in user_freedom_scores, freedom_analysis_reports) because they represent completed computations that cost credits.
What's public (opt-in only)
Nothing is public by default. You can choose to make your Freedom Score and FIRE stage visible on the public leaderboard by enabling it in Settings → Leaderboard. Public data is:
- Bucketed (score shown as a range, not exact number)
- Pseudonymous (your handle, not your real name, unless you choose to use it)
- Minimum cohort size enforced (individual identification prevented)
You can disable leaderboard sharing at any time and your data is removed from the public view within 24 hours.
Stories
If you publish a story, the text you write is public. Your name, score, and selected charts are included only if you toggle them on during composition. Stories go through admin review before publication.
What we never store
- Bank account numbers or login credentials
- Aadhaar or PAN numbers
- Investment transaction history (we don't connect to brokers)
- Payment card details (payments handled by Razorpay, not stored on our servers)
Data deletion
You can request full account deletion from Settings → Account → Delete Account. This deletes all user data permanently. Credit balances are non-refundable on deletion.