The Almanac · LegalPrivacy policyLast updated · Apr 2026

What we keep, and what we don't.

Your financial inputs live on our servers so we can run your simulations — nothing more. No third-party trackers, no ad pixels, no data sold. Here is exactly what we collect, where it goes, and how to take it back.

0
third-party trackers
or ad pixels
0
records sold
or rented, ever
bcrypt
password hashing
encrypted at rest
30 days
max response to
any rights request

§ 01 · Collection

What we collect.

When you create an account, we collect your email address and a securely hashed password. As you use RetireMe, we store the financial inputs you provide — retirement age, savings targets, income, expenses, portfolio holdings, and simulation parameters — to generate your projections.

§ 02 · Storage

How we store your data.

All user data is stored in a PostgreSQL database with encryption at rest. Passwords are hashed using bcrypt and never stored in plain text. Database access is restricted to our backend services only.

§ 03 · Retention

Data retention.

We keep what the service needs and purge the rest. Deletion is immediate and permanent — not a 30-day soft window.

Active accounts
Your data is retained for as long as your account remains active.
Deleted accounts
When you delete your account, all personal data, retirement scenarios, milestones, and portfolio data are permanently and immediately removed from our systems.
Cached data
Temporary caches (market-data lookups, simulation results) are periodically purged for inactive accounts.
Email logs
Transactional email records (verification, password reset) are retained for up to 1 year for debugging purposes, then permanently deleted.
Stripe-held records
Payment-method and billing records held by our payment processor Stripe are retained according to Stripe's own retention policy for financial compliance. RetireMe does not control Stripe's retention of these records. See Stripe's privacy policy for details.

§ 04 · Sessions

Authentication & cookies.

We use JWT tokens stored in httpOnly cookies for authentication. These cookies cannot be accessed by client-side JavaScript, protecting against cross-site scripting attacks. We do not use third-party tracking cookies.

§ 05 · Analytics

Analytics & tracking.

  • RetireMe does not use any third-party analytics services (such as Google Analytics or Mixpanel).
  • We do not use advertising trackers, pixels, or third-party cookies.
  • We collect server-side usage data — such as which tools you use and when you run simulations — solely to improve the product. This data is never shared with third parties.

§ 06 · Market data

Market data.

Portfolio market data is fetched from Yahoo Finance entirely on our servers. No requests are made from your browser to Yahoo Finance or any other third-party data provider. We do not share your portfolio holdings with data providers.

§ 07 · Payments

Payment processing.

Subscription payments are handled by Stripe. We never see or store your credit-card number. Stripe provides us with a customer ID and subscription status to manage your account access.

§ 08 · Sharing

Third-party sharing.

The short version

We do not sell, rent, or share your personal data with third parties. The only external services that receive any of your information are Stripe (payment processing) and our email provider (transactional emails like password resets and verification).

§ 09 · Your rights

Your privacy rights.

EU residents · GDPR

Access, erase, port, object.

Right to access, rectification, erasure, data portability, restriction of processing, and objection. Our legal basis: contract performance (providing the service you signed up for) and legitimate interest (product improvement through anonymized usage analysis).

California residents · CCPA

Know, delete, opt out.

Right to know what personal information we collect, right to delete, right to opt out of the sale of personal information (we do not sell your data to anyone), and right to non-discrimination for exercising your rights.

  • How to exercise your rights: use the “Export my data” and “Delete my account” options on your account page, or email support@retireme.app.
  • Response timeline: we respond to all data-rights requests within 30 days.

Questions about this policy?

We answer privacy mail directly — no ticket queue.

support@retireme.app