Prism privacy policy

Last updated October 14, 2026

Prism is a personal finance app, just for you. It shows your accounts, spending, budgets, investments and net worth in one place. This page explains what Prism stores, where, who can see it, and how to delete it.

What Prism collects

• Your sign-in. Your name, and the identity and email address Apple or Google share when you sign in with them. If you sign in with an emailed code, Prism keeps the email address the code confirmed. If you sign in with an email and password, Prism stores your email and a salted scrypt hash of the password, never the password itself. Passkeys store only their public key on the server; the private key stays on your devices.
• The waitlist. Prism is invite-only. If you try to start an account without an invite, Prism keeps the email address Apple, Google or an emailed code confirmed, the name you gave and which one you used, so the developer can let you in. That request is deleted when you're let in, when the developer turns it down, or after 90 days. If the developer invites you by email instead, that email is kept on the invite list until the developer removes it.
• Your financial data from Plaid. When you connect a bank through Plaid, Prism receives your account names, balances, transactions, investment holdings and loan or credit card details. You choose which institutions to connect. Prism never sees your bank username or password; you enter those in Plaid's own screen.
• Money Forward logins (optional). For Japanese banks, Prism can sign in to Money Forward ME for you. If you choose this, Prism stores your Money Forward email, password and (if you give it) your two-step code secret, encrypted with AES-256-GCM, and uses them only to download your balances and transactions.
• What you add yourself. Budgets, categories, rules, manual accounts, stock grant details and the like.
• Ask Prism questions. If Ask Prism is turned on for you, the questions you ask, and a daily count of questions and their size so the server can keep a daily limit.

Where it's stored

Prism runs on a single server at Fly.io in the United States. Each person's data is kept in its own database file on an encrypted disk. Plaid access tokens and Money Forward logins are additionally encrypted with AES-256-GCM using a key kept separately from the database. The app on your iPhone or Mac keeps an encrypted copy of your data so it opens quickly. All traffic between the app and the server uses HTTPS.

Who can see it

Only you. Prism has no way to share your data with other people, so other people using Prism can't see it, and Prism has no advertisers, data brokers or other customers. Your data is private. Nobody at Prism reads it. The server is accessed only for maintenance, like updates and fixing problems.

Services Prism uses

• Plaid connects your banks and sends Prism your account data. Plaid's own policy: plaid.com/legal.
• Money Forward, only if you connect Japanese banks through it.
• Apple and Google, only to confirm who you are when you sign in with them.
• Resend delivers the sign-in codes Prism emails. It gets your email address and the code, nothing else.
• Anthropic, only for Ask Prism, which is turned on for a few people. When you ask a question, Prism sends your question, a summary of your accounts and spending, and the results of any lookups it makes to Anthropic's Claude to write the answer. Anthropic doesn't use this data to train its models.
• Statsig decides who has Ask Prism turned on. Prism sends it your member ID and your verified email address, and nothing about your finances.
• Fly.io hosts the server.

To show stock prices, exchange rates and logos, Prism also looks up public information: stock tickers from Yahoo Finance, currency rates from Frankfurter, and icons from banks' and companies' own websites. Those requests carry no information about you.

What Prism never does

Prism never sells your data, never shares it for advertising, and never shows ads. It doesn't track you across other apps or websites.

How long it's kept, and deleting it

• Your data is kept for as long as your account exists.
• Disconnecting a bank in the app removes that login at Plaid and stops new data coming in.
• Deleting your account (Settings > Delete account) removes your sign-ins, passkeys and devices right away, disconnects every bank at Plaid and deletes all of your data. (If you shared accounts with someone back when Prism offered shared households, those shared accounts and their history stay with them.)
• The server takes a daily backup of its disk, and each backup is deleted automatically after 5 days. So deleted data is gone from backups within 5 days.

Children

Prism isn't meant for anyone under 18.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions, or want your data deleted another way? Email israel.r.macias@gmail.com.