Privacy Policy

1. Who We Are

Legacy Builder ("we," "our," or "us") operates lbmymint.com, a biblically-grounded personal finance platform designed to help families track spending, build wealth, and create a lasting financial legacy. We take your privacy seriously, especially given the sensitive nature of financial data.

For privacy questions, contact us at: [email protected]

2. Information We Collect

Information You Provide Directly

• Account registration details (name, email address, password)
• Financial data you manually enter: accounts, transactions, budgets, bills, goals, debts, investments, vehicles, and net worth snapshots
• Work expense and mileage records
• Crypto wallet addresses (public only — we never ask for private keys or seed phrases)
• Credit score history you choose to record
• Receipts and images you upload for AI scanning (Premium feature)

Information Collected Automatically

• Log data: IP address, browser type, pages visited, timestamps
• Device information: operating system, screen resolution
• Cookies and session tokens used to keep you logged in

Information from Third-Party Services

• Plaid: If you connect a bank account, Plaid provides us with your account balances, transaction history, and institution name. We do not receive or store your bank login credentials. Plaid's privacy policy governs how they handle your data: plaid.com/legal/privacy
• Stripe: Payment information for Premium subscriptions is processed by Stripe. We do not store your card number, CVV, or full payment details. Stripe's privacy policy: stripe.com/privacy

3. How We Use Your Information

• To provide, maintain, and improve the Legacy Builder service
• To display your financial data back to you in a meaningful way
• To process Premium subscription payments via Stripe
• To analyze receipts using AI (Cloudflare Workers AI — data is not retained by the AI provider)
• To send transactional emails such as password resets
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations

We do not sell your personal or financial data to third parties. Ever.

4. How We Store and Protect Your Data

Your data is stored in a Cloudflare D1 (SQLite) database hosted on Cloudflare's global infrastructure. Passwords are stored using PBKDF2 hashing with a unique salt per user — we cannot recover your password in plaintext. Authentication tokens are signed using industry-standard JWT (HS256).

All data in transit is encrypted using TLS. We follow the principle of least privilege — only the minimum data required to serve your request is accessed at any time.

While we take reasonable measures to protect your data, no system is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal and financial data within 30 days, except where we are required to retain it for legal or fraud-prevention purposes.

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request your data in a machine-readable format (CSV/JSON)
• Opt-out — disconnect your bank accounts or delete data at any time from your dashboard

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking pixels. We do not use Google Analytics or similar services.

8. Children's Privacy

Legacy Builder is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it promptly.

9. Third-Party Links

Our app may contain links to third-party services (insurance quotes, credit products, etc.). We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date above and, for material changes, notify you by email or an in-app notice. Continued use of the service after changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: