How the Pravely app handles financial data
When you use the Pravely app, we process the information you choose to enter—such as budgets, income and expense categories, debts, assets, liabilities, goals, calculator inputs, preferences, and generated reports—to save, synchronize, display, and secure your private workspace. Depending on applicable law and context, some financial information may be considered sensitive personal information.
- Private by account. Customer financial rows are linked to the signed-in user and protected by database access rules designed to prevent one customer from accessing another customer’s information.
- No advertising sale. We do not sell customer-entered financial data or authorize service providers to use it for their own advertising.
- Limited operations access. Our routine support and product-health tools are designed to avoid showing budgets, balances, debts, goals, and net worth. Access may occur only when needed for security, troubleshooting you request, legal compliance, or maintaining the Service.
- Deletion. You may permanently delete your account and customer-entered financial workspace in app Settings or contact support@pravely.com. Limited purchase, tax, fraud-prevention, security, or dispute records may be retained where reasonably necessary or legally required.
- Payments. Stripe, Apple, or Google process payment information. Pravely receives purchase and entitlement records, but does not store full payment-card numbers.
This app-data update supplements the notice below. If an older statement below conflicts with this section—for example, a statement that no sensitive information is processed—this more specific section controls for customer-entered app financial data. The effective date for this update is August 31, 2026.
Service provider update
We use trusted service providers only as needed to operate purchases, licensed delivery, customer support, and product communications:
- Supabase provides authentication, database, private file storage, synchronization, and server-side functions for the app and licensed workbook delivery. Information may include account details, customer-entered financial data, purchase and license records, support messages, and limited operational events.
- Resend provides transactional email delivery for purchase confirmations, licensed download links, and eligible product-update notices. Resend processes recipient email addresses and message-delivery information for those purposes.
We do not authorize these providers to use customer information for their own advertising. Stripe remains our payment processor as described in this notice.
Email choices. Order receipts and licensed-download messages are necessary to fulfill purchases. Workbook-update notices, founding-customer check-ins, and promotional marketing are optional and require separate affirmative choices. We record the choice, time, and source. Every optional email provides a way to change preferences or unsubscribe without affecting the purchased license or download access.
AI-assisted financial coaching
Pravely offers an optional AI Health Coach. When you choose to use it, we send a limited summary of your financial-health calculations and the question or scenario you submit to OpenAI, our AI service provider, so it can generate educational planning guidance.
- Data sent. The request may include your health score and summarized income, expenses, investing, debt-payment, surplus, emergency-runway, scenario, and check-in values. We do not intentionally send your name, email address, account identifier, individual debt names, transaction descriptions, receipt files, or full account records.
- Purpose and choice. Processing is used only to answer the coaching request you initiate. AI coaching is optional; the rest of Pravely remains available if you do not use it.
- Retention setting. Pravely requests that OpenAI not store the model response for later retrieval by setting API storage to off. Limited safety, security, and abuse-monitoring processing may still occur under the provider’s applicable terms and retention controls.
- Human review and decisions. AI responses can be incomplete or incorrect. They are educational, are not financial, tax, legal, accounting, or investment advice, and should not be the sole basis for a significant financial decision.
This AI update is effective September 9, 2026 and should be reviewed by qualified privacy counsel before public release.
PRIVACY POLICY
- Visit our website
at https://pravely.com or any website of ours that links to this Privacy Notice
- Download and use
our mobile application ( Pravely) , or any other application of ours that links to this Privacy Notice
- Use
Pravely .Pravely empowers individuals to take control of their financial future through clear, intelligent, and actionable budgeting systems. We transform financial chaos into confident decision‑making, helping our clients stay consistently “in the black” with tools, strategies, and guidance built for long‑term stability and growth.
- Engage with us in other related ways, including any marketing or events
SUMMARY OF KEY POINTS
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.names
email addresses
billing addresses
debit/credit card numbers
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed.
- Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called
"crash dumps" ), and hardware settings).
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.- To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To
fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
- To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
- To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see
" WHAT ARE YOUR PRIVACY RIGHTS? " below.
- To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
- To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
- To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
- To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e.- Consent. We may process your information if you have given us permission (i.e.
, consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a Contract. We may process your personal information when we believe it is necessary to
fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
- Send users information about special offers and discounts on our products and services
Analyze how our Services are used so we can improve them to engage and retain users
- Support our marketing activities
- Diagnose problems and/or prevent fraudulent activities
- Understand how our users use our products and services so we can improve user experience
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
- We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Google Analytics
We may share your information with Google Analytics to track and6. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to7. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of8. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to9. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:- Online:
https://pravely.com
- Email:
support@pravely.com
- Post: See
" HOW CAN YOU CONTACT US ABOUT THIS NOTICE? "
- We will acknowledge your complaint within 30 days of receiving it.
- We will investigate without unjustifiable or excessive delay.
- We will keep you informed of progress and explain the outcome.
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident ofCategories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section| Category | Examples | Collected |
|---|---|---|
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information |
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | ||
Transaction information, purchase history, financial details, and payment information | ||
Fingerprints and voiceprints | ||
Browsing history, search history, online | ||
Device location | ||
Images and audio, video or call recordings created in connection with our business activities | ||
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | ||
Student records and directory information | ||
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | ||
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- Category A -
As long as the user has an account with us
Sources of Personal Information
Learn more about the sources of personal information we collect inHow We Use and Share Personal Information
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising
(or sharing as defined under California’s privacy law) , the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ( "profiling" )
- Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
- Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in
California, Delaware, and Maryland )
- Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in
Minnesota and Oregon )
- Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
- Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in
Connecticut and Minnesota )
- Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
- Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)