Fin · Last updated 24 October 2026
Fin is a private, non-commercial application built and operated by a single household for its own use. It has no public users, no sign-up, and no customers. This policy describes how it handles financial data belonging to the household members who use it.
When a household member connects an institution, Fin receives the following through Plaid:
Fin requests only Plaid's investments product. It does not request transaction history, identity, or payment-initiation data.
Fin never sees or stores usernames, passwords, PINs, or MFA codes for any financial institution. Authentication happens directly between the household member and their institution through Plaid. Fin holds only the resulting access token.
Fin has no ability to move money, place trades, or initiate transfers. Its access is read-only.
Account and holdings data is used for exactly one purpose: showing the household its combined asset allocation and calculating how far that allocation has drifted from a chosen target. Rebalancing output is a suggestion for a person to act on manually.
The data is not used for advertising, profiling, scoring, resale, or training machine-learning models.
Fin runs on hardware controlled by the household. Account data is stored in a self-hosted PostgreSQL database on that hardware and is not hosted with any third-party analytics, logging, or storage provider.
Fin does not sell, rent, or share financial data. It communicates with exactly two external services:
Connection and holdings data persists until the household member removes the connection in Fin, which deletes the stored access token and that institution's data. Access can also be revoked at any time from the institution's own website, or through Plaid's portal, which ends Fin's access regardless of anything stored locally.
Fin is reachable only from within the household's own network and is not exposed to the public internet. Traffic between the browser and the application is encrypted, as is all communication with Plaid.
Fin is used only by the adult members of one household and is not directed at children.
If this policy changes, the revised version will be posted here with an updated date.
Questions about this policy can be sent to pat@jakattack.net.