Privacy Policy

Different Productions LLC ("Liminal Wallet," "we," "us," or "our") operates the Liminal Wallet application for iPhone, iPad, and Mac (the "App"). This policy explains what information we collect, why we collect it, how we use and share it, how long we keep it, and the choices you have — including how to delete your account and everything attached to it.

Liminal Wallet is a personal finance app. We use Plaid to connect to your bank. We never see or store your bank username or password, and our access to your accounts is read-only.

Questions about this policy: support@liminalwallet.app.

1. Who this applies to

The App is offered only to users in the United States at this time, and only to people 18 years of age or older. By using the App you represent that you are accessing it from within the United States.

2. What we collect, and why

We collect only what the App needs to work, to keep your account secure, and to improve the product. We do not collect data for advertising, and we do not sell your information.

2.1 Account and transaction data, through Plaid

When you connect a financial account, you do it through Plaid Inc. ("Plaid"). You enter your bank login directly into Plaid's own screen. We never receive, see, or store your bank username or password. Plaid returns a read-only access token to us, not your credentials.

Through Plaid we receive:

• Account names, types and subtypes, the last digits of the account number, and current and available balances.
• Transaction amounts, dates, descriptions, merchant names and logos, categories, and pending status.
• Where your bank provides it, the location of the merchant a charge was made at.
• If you use the investment features, your holdings, securities, and investment transactions.

Why: to show you your accounts, balances, and transactions, and to power features built on them, such as recurring-bill detection and spending history.

Merchant location is not your location. The location described above is where a purchase happened, as reported by your bank through Plaid. It is not your device's location. Device location is covered separately in Section 2.5.

2.2 Sign in with Apple

You create your account with Sign in with Apple. We receive a stable Apple-provided user identifier and, if you choose to share it, your email address. If you use Apple's Hide My Email relay, we receive only the relay address.

Why: solely to create and authenticate your account, to link your data to you across your devices, and to reply to you about your account or a support request. Never for advertising or tracking.

2.3 Push notification token

If you turn notifications on, we store an Apple Push Notification service (APNs) device token for each of your devices.

Why: to deliver the notifications you enabled, such as new-transaction alerts and alerts about a bank connection that needs attention. You can turn notifications off at any time in your device's Settings.

2.4 Product analytics, through Amplitude

We use Amplitude to understand how the App is used. Events are keyed to your Liminal Wallet account identifier and to Apple's Identifier for Vendor (IDFV). We do not collect or use the Advertising Identifier (IDFA).

The events describe what happened, never what you bought: screens opened, controls tapped, whether a bank connection succeeded or failed, how many transactions a sync added or removed, and paywall and purchase events. We do not put your bank credentials, account numbers, merchant names, or transaction amounts into analytics events.

2.5 Device location, only if you allow it

Some charges arrive from your bank with no location attached. If you choose to set one yourself, the App searches Apple Maps for a place. If you grant When In Use location access, your device's location is used to rank those search results by how near they are to you.

Your device's location stays on your device. It is used to order a list of search results and is never sent to our servers. Location access is optional: the search works without it, and the App never asks for background or always-on location. The place you pick is saved on your device and synced through your own iCloud, as described in Section 3.

2.6 What you send to support

If you email us, we receive what you include — your email address, your message, and any details you choose to share, such as the App version. Why: to answer you.

3. How your data is stored and protected

• On your device: account and transaction data is stored locally with Apple's SwiftData, protected by iOS Data Protection, which is tied to your device passcode.
• Across your devices: that data syncs through Apple iCloud (CloudKit), in your own private iCloud database, which Apple encrypts in transit and at rest.
• On our backend: our server runs on Amazon Web Services (AWS) Lambda and stores account, transaction, and bank-linkage records in Amazon DynamoDB, encrypted at rest.
• Your sign-in tokens are held in the device Keychain.
• In transit: all traffic between the App, our backend, and Plaid is encrypted with TLS 1.2 or higher. The App makes no insecure connections.

4. The companies that process your data

We share data only with the service providers below, only as needed to run the App. Each is required to protect your information at a level consistent with this policy. We sell your data to none of them, and to no one else.

Plaid's own policy

When you connect an account, Plaid's handling of your data is governed by Plaid's End User Privacy Policy at plaid.com/legal. How Plaid handles data is described at plaid.com/how-we-handle-data. We encourage you to read both. Where they conflict with this policy, Plaid's policies govern Plaid's practices.

5. How we use your information

• To provide and operate the App: showing accounts, balances, transactions, investments, and insights such as recurring bills.
• To create, authenticate, and secure your account.
• To send the notifications you turned on.
• To answer your support requests.
• To understand and improve how the product is used.

We do not use your information for advertising, and we make no automated decision about you that produces legal or similarly significant effects.

6. We do not sell your data, and we do not track you for ads

• We do not sell or rent your personal information to anyone.
• We do not use your data for advertising. The App contains no advertising software.
• We do not use the Advertising Identifier (IDFA) and we do not combine your information with third-party data for cross-app or cross-site advertising. Our App Store Tracking status is No, and the App shows no App Tracking Transparency prompt.

7. Your rights and choices

Wherever you live in the United States, you may:

• See the data the App holds about you, at any time, in the App.
• Disconnect a bank at any time, which tells us to remove that connection at Plaid.
• Delete your account and all associated data from inside the App (Section 9).
• Turn notifications off, and turn location access off, in your device's Settings.

California residents: we do not sell or share your personal information as those terms are used under the California Consumer Privacy Act, and we do not use it for cross-context behavioral advertising. You may exercise your rights to know, access, and delete by using the in-app deletion flow or by writing to support@liminalwallet.app.

8. How long we keep it

• We keep your account, transaction, and linkage data for as long as your account exists.
• When you delete your account, we delete the associated data from our backend within 30 days, except where we must keep limited records to meet legal, tax, or accounting obligations, or to resolve a dispute.
• Data held by Plaid, Apple, AWS, and Amplitude is kept and deleted according to their policies and our instructions to them.

9. Deleting your account

You can delete your account and all associated data from inside the App at any time: open Settings, choose Delete Account, and confirm.

When you do, we:

• Revoke your Sign in with Apple token with Apple.
• Call Plaid's item/remove for every bank you connected, so Plaid drops the connection and its access token.
• Delete your registered notification devices.
• Purge your account, transaction, and linkage records from our backend.
• Remove the App's local data and the copy in your private iCloud database from your devices.

You can also disconnect a single bank without deleting your account; that performs the Plaid removal for that bank only.

Deleting your account does not cancel your subscription. Subscriptions are billed by Apple and must be canceled in the App Store.

10. Children

The App is not directed to children and is intended only for people 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, write to support@liminalwallet.app and we will delete it.

11. Changes to this policy

We may update this policy. When we do, we revise the "Last updated" date above and, for material changes, give notice in the App or by email. Continuing to use the App after an update means you accept the revised policy.

12. Contact us