Your money data belongs to you.
This page explains what CapSTEP collects, why we collect it, and the controls you have. Written in plain English — no dark patterns.
1. What we collect
We collect only what's needed to run your personal money dashboard:
- Account details — your email, name and avatar (from Google if you use it).
- Financial data you enter — accounts, transactions, budgets, goals, debts, investments and notes. This is your data — we do not sell it, share it or use it to train models.
- Support content — messages and attachments you send through the Support screen.
- Usage signals — basic, aggregated logs (page views, errors) to keep the app fast and stable.
We do not connect to your bank, we do not read SMS, and we do not ask for card numbers, CVV or OTPs.
2. How your data is protected
- Data is encrypted in transit (TLS) and at rest on our managed cloud database.
- Row-level security ensures a signed-in user can only read and write their own rows — even if a request tries to ask for someone else's.
- Administrator access is scoped and logged. Support attachments live in a private bucket and are served through short-lived signed URLs.
No online service is 100% secure. This page describes controls we operate today; it is not a certification or a legal warranty.
3. Your controls
- Access & export — you can view every entry you've made from inside the Money Tracker.
- Delete — deleting a row removes it from active tables. Deleting your account removes your profile and cascades to your financial rows.
- Correct — every entry is editable directly in the app.
- Withdraw consent — sign out any time; contact us to close the account entirely.
4. Subprocessors
CapSTEP is built on a small set of trusted providers:
- Cloud database & auth — hosted on a managed Postgres platform.
- Email — transactional email for sign-in and support notifications.
- Hosting / CDN — used to serve the web app worldwide.
We do not share your financial rows with advertisers or analytics vendors.
5. Cookies & analytics
We use only functional cookies required to keep you signed in and to remember interface preferences (theme, layout). We do not run third-party advertising trackers.
6. Contact us
Privacy questions or data requests? Reach out from the in-app Support screen or email connect@capstep.in.
