Privacy Notice

1. About this notice

Gentoo Solutions LLC (“Gentoo”, “we”, “us”) operates Tyche, a personal financial planning application. This Privacy Notice explains how we collect, use, share, and protect your information when you use Tyche.

2. Data we collect

• Account information: email address, display name, authentication provider (Google, Apple, or email/password).
• Financial data: linked account balances, transactions, and holdings fetched via Plaid with your explicit authorization.
• Planning data: household composition, retirement goals, expense estimates, and scenario inputs you enter directly.
• Usage data: pages visited, features used, error reports submitted in-app, and browser information.
• Security events: login times, MFA enrollment/use, and password changes (no plaintext credentials are ever stored).

3. How we use your data

• To provide and improve Tyche features including net worth tracking, retirement projections, and tax planning.
• To maintain account security and detect fraudulent activity.
• To communicate important service updates, including changes to this notice or the Beta Participation Agreement.
• To analyze aggregate, anonymized usage patterns that help us improve the product.

We do not sell your personal financial data. We do not use your financial data for advertising.

4. Third-party sharing

We share data only with:

• Plaid Inc.: to connect and retrieve your financial institution data under their own privacy policy and your explicit authorization.
• Google Firebase: for authentication, secure credential management, and session handling.
• Infrastructure providers: cloud hosting and database providers operating under strict data processing agreements.

We disclose data to law enforcement only when legally required.

5. Data protection

All data is encrypted in transit (TLS) and at rest. Financial data is fetched on-demand from Plaid and stored in encrypted PostgreSQL databases. Passwords are never stored by Tyche — authentication is delegated to Firebase. IP addresses in security logs are one-way hashed (SHA-256) before storage.

6. Your rights

• Access and export: you can view and download your planning data from within the app.
• Correction: you can update your profile and household information at any time.
• Deletion: you can delete your account from Settings. We will remove your personal data within 30 days.
• Disconnect: you can revoke Plaid access to any financial institution from within the app.

7. Data retention

We retain your data for as long as your account is active. After account deletion, we retain anonymized aggregate data indefinitely. Security event logs are retained for 90 days. Deleted financial connection data is purged within 30 days.

8. Beta program

During the beta period, we may collect additional diagnostic information to identify and fix issues. This data is used only for product improvement and is not shared with third parties for commercial purposes.

9. Contact

Questions about this notice? Contact us at privacy@gentoosolutions.com.