Legal

Privacy Policy

Effective date: October 1, 2026

DimeShield, Inc. (“DimeShield,” “we,” “our,” or “us”) operates the DimeShield mobile application (iOS and Android) and website at dimeshield.com (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. This policy describes data practices; any required consent is requested separately.

1. Information We Collect

Account Information. When you create a DimeShield account, we collect your first name, last name, and email address. If you sign in with Google or Apple, we receive the account information made available by that provider, such as your name and email address.

Financial Data via Plaid. When you connect a bank account, DimeShield uses Plaid Technologies, Inc. to establish a read-only connection to your financial institution. Through this connection we receive account balances, transaction history, institution names and logos, and account numbers (last four digits only). DimeShield never receives or stores your bank login credentials. Plaid's use of your data is governed by Plaid's Privacy Policy at plaid.com/legal/privacy-policy.

Budget and Financial Plan Data. We store the budget categories, spending plans, savings goals, and notes you create within DimeShield.

Authentication Data. DimeShield uses Firebase Authentication (Google LLC) to manage sign-in. Firebase may collect IP addresses and device identifiers for security purposes. Firebase's privacy practices are described at firebase.google.com/support/privacy.

Subscription and Payment Data. DimeShield processes subscriptions through the Apple App Store, Google Play Store, and RevenueCat. We do not collect or store your credit card number or full payment details. We receive subscription status, plan type, and renewal dates from RevenueCat.

Push Notifications and Email. If you grant permission, we send push notifications about budget alerts, transaction summaries, and product updates. We also send transactional and marketing emails to the address you provide.

App Usage and Diagnostics. Diagnostics and operational logs may include account identifiers, device information, errors, and usage events. Do not assume diagnostic data is anonymous.

AI and voice features. Rose and AI-assisted features use providers including OpenAI. Requests may contain your messages and relevant financial context; voice features process audio when you use them. Rose conversation history is stored in your account. AI responses can be inaccurate; check the underlying information before acting. A microphone permission controls microphone access and is separate from consent to share personal data with an AI provider.

Location information. If you grant location permission, the app obtains device coordinates, rounds latitude and longitude to four decimal places, and can send them with a city name in API request headers for analytics and security. This is more specific than IP-only location. You can deny or revoke device location permission.

Device Information. We collect basic device information such as operating system version and device type to provide support and optimize the app experience.

2. How We Use Your Information

Provide, operate, and improve the DimeShield Service
Sync and display your financial accounts and transactions
Generate budget reports, spending insights, and savings projections
Send notifications, alerts, and account-related communications
Process and manage your subscription
Respond to support requests and provide customer assistance
Detect fraud, abuse, and security threats
Comply with applicable laws and legal obligations

3. How We Share Your Information

DimeShield does not sell your personal information or financial data to third parties. We share information only as follows:

Plaid — to connect and retrieve data from your financial institutions
Firebase (Google) — for authentication and security
RevenueCat — for subscription management
AI providers, including OpenAI — for AI-assisted features and transaction classification; requests may include prompts and relevant financial context
Shared household members — information made available through your shared workspace
AWS — our cloud infrastructure provider
Legal requirements — if required by law, court order, or government authority
Business transfers — in connection with a merger, acquisition, or sale of assets, with advance notice to you

4. Data Retention

We retain your personal information and financial data for as long as your account is active or as needed to provide the Service. The account control records a deletion request and disables access while provider cleanup and retention review are pending. It does not indicate completed erasure. Contact privacy@dimeshield.com for an erasure request and information about processing periods, retained records, and provider-held data. See our Data Deletion page for the current process.

5. Data Security

DimeShield uses authenticated access and session controls to restrict access to account data. No service can guarantee absolute security. Specific encryption and infrastructure configurations depend on the deployed service. We use Plaid's read-only bank connections, which means DimeShield never has the ability to move, transfer, or initiate transactions in your bank accounts. For more details, visit our Security page.

6. Your Rights and Choices

Access and Correction. You may access and update your account information within the DimeShield app at any time.

Account Deletion. The account control is under More → Profile. It records a deletion request and disables access while erasure is pending. You may also submit a deletion request at dimeshield.com/delete-account.

Disconnect Bank Accounts. You may remove bank connections at any time from the Accounts section of the app.

Push Notifications. You may disable push notifications through your device settings.

Email Communications. You may unsubscribe from marketing emails using the link in any email. Transactional emails related to your account and subscription cannot be opted out of while your account is active.

California and other state residents may have additional rights under applicable state privacy laws, including the right to know, correct, delete, and opt out of the sale of personal information. Contact us at privacy@dimeshield.com to exercise these rights.

7. Children's Privacy

DimeShield is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the app. The updated policy will be posted at dimeshield.com/privacy with a revised effective date. Continued use of DimeShield after the effective date constitutes your acceptance of the updated policy.