Privacy Policy

What we collect

When you use Trellis, we collect only what's needed to make the app work for you:

• Account info - your email address and name when you sign up, whether with email and password or through Google or Apple sign-in.
• Financial data - transaction history from bank accounts you connect via Plaid and receipts you scan. If you use the net-worth and retirement features, this also includes your account balances and balance history, your investment holdings and the securities they contain, and loan and credit details such as interest rates, payment due dates, and the property address on a mortgage. This data is processed to provide spending analysis, net-worth tracking, and savings recommendations.
• Family details - number of children and their ages, household size, income, and ZIP code to personalise meal plans, budgets, and local deal recommendations. Your income may be one you enter yourself or an estimate we calculate from the recurring deposits in your connected bank accounts.
• Location - your device's location, only if you grant permission, to find grocery stores near you. If you don't, we use your ZIP code instead.
• Preferences - your selected stores, budget categories, dietary restrictions, and meal planning preferences.
• Photos - receipt images, recipe photos, and photos of shopping items you capture or upload for scanning.
• Usage data - analytics about how you use the app and crash reports. See the Amplitude and Firebase entries under "Third parties" for exactly what's tracked.

How we use it

Your data is used to:

• Analyse your spending and generate personalised savings plans.
• Track your net worth and account balances over time, and estimate your income from the recurring deposits in your connected accounts.
• Show retirement projections and general saving and investing information based on the goals you set.
• Suggest meals, recipes, and shopping lists tailored to your family and budget.
• Find product swaps and deals relevant to your shopping habits.
• Locate nearby grocery stores using your device location (if you allow it) or your ZIP code.
• Improve the app and fix bugs.
• Send you important account updates (not marketing spam).

We never sell your personal data. Full stop.

How we store it

Your data is stored securely using Supabase with encryption at rest and in transit. Receipt and recipe images are stored in private, access-controlled storage buckets. We use industry-standard security practices including row-level security policies so your data is only accessible to you and the household members you invite.

Third parties

We use a small number of trusted services:

• Plaid - to securely connect your financial accounts and retrieve your transaction, balance, investment, and loan data. Plaid's use of your data is governed by their End User Privacy Policy.
• Supabase - database, authentication, and file storage.
• RevenueCat - subscription management.
• OpenAI - to power Trellis's built-in AI features. See the "AI-powered features" section below for exactly what's sent.
• Amplitude - product analytics. Events are keyed to an internal account ID, not your email or name. We track which features you use, app opens and closes, your subscription tier, family size, whether you've connected a bank, and - when you enter a transaction manually - its amount and category.
• Firebase (Google) - crash reporting via Crashlytics (keyed to the same internal account ID) and push notification delivery. We store your device's push token to send notifications.
• Kroger and Flipp - to fetch local prices and deals. They receive your ZIP code or chosen store location - nothing else. Trader Joe's pricing comes from a national catalog, so nothing is sent to them.
• Google Places API - to find nearby grocery stores. Your ZIP code, or your device location if you've granted access, is sent to Google for the search. No other personal data is shared with Google through this feature.
• Formspree - processes the waitlist form on our website, if you submit it.

Data is shared with these providers only as needed to operate the app. We do not sell your personal data.

Plaid and bank account data

Trellis uses Plaid to securely connect to your financial accounts. When you connect an account for budgeting, Plaid retrieves your transaction history (merchant names, amounts, dates, and categories) on our behalf, and we use it to categorise your spending and provide personalised savings recommendations.

If you use the net-worth and retirement features, you can also connect accounts for balances, investments, and liabilities. In that case Plaid also retrieves your account balances, your investment holdings and the securities they contain, and loan details such as interest rates, payment schedules, and the property address on a mortgage. We use this to show your net worth, balance history, and retirement projections. You choose which accounts to connect, and connecting an account for one feature does not connect it for the others.

We do not store your bank login credentials - Plaid handles authentication directly with your financial institution. Plaid's use of your data is governed by their End User Privacy Policy.

You can disconnect your bank account at any time through the app or by contacting us at [email protected]. When you delete your account, your bank connections are revoked and the access tokens are deleted.

AI-powered features

Trellis's built-in AI features run on the OpenAI API. What gets sent depends on the feature:

• Spending analysis & categorisation - merchant names, amounts, dates, and category totals.
• Budget generation & wealth guidance - your estimated income, family size, and city/state.
• Financial chat - your messages, plus whichever of your transactions, budgets, goals, pantry, and shopping data is relevant to the conversation. Chat history is stored in your account until your account is deleted.
• Photo parsing - photos of receipts, recipes, or shopping items you submit. Receipts may include store details and the last four digits of a card number.

Your email, name, and other account details are never included in these requests. OpenAI's API does not use this data for model training, in accordance with their API data usage policy. (Connecting your own AI assistant works differently - see the section below.)

AI-generated content (including meal suggestions, recipes, and nutrition estimates) is provided for informational purposes only and may not be fully accurate. See our Terms of Service for important disclaimers about AI-generated content.

Household sharing

You can invite family members to join your household. Members share access to the household's budget, transactions, connected accounts, balances, investments, net worth, meal plans, and shopping data - so anyone you invite can see this information. When you send an invite, we store the invited email address until the invite is accepted or revoked.

Connecting your own AI assistant

You can optionally connect an AI assistant you already use (such as Claude, ChatGPT, or Cursor) to your Trellis account. If you do, that assistant can read your profile - including your email, name, income estimate, and location - along with your transactions, budgets, goals, meals, and shopping lists, and can make changes on your behalf, like updating budgets or recategorising transactions.

This connection only happens if you set it up. It requires multi-factor authentication, and you can revoke it at any time. Data accessed by the assistant you connect is handled under that provider's privacy policy, not ours.

Children's data

Trellis is designed for adults (18 and older) and is not directed at children. We do not knowingly collect personal information from children under 13. The family details you provide (such as children's ages and household size) are collected from you as the parent and are used solely to personalise your meal plans, budgets, and recommendations.

If you believe we have inadvertently collected information from a child under 13, please contact us at [email protected] and we will promptly delete it.

Your rights

You can:

• Request a copy of all data we hold about you.
• Request deletion of your account and all associated data.
• Request analytics opt-out, or deletion of your analytics data, by emailing [email protected].
• Update or correct your personal information at any time within the app.

Contact us at [email protected] for any privacy requests. We will respond within 30 days.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information, including the right to know what data we collect, the right to delete your data, and the right to opt out of the sale or sharing of your personal information.

We do not sell or share your personal information as defined by the CCPA/CPRA. To exercise any of your rights, contact us at [email protected].

Changes to this policy

We'll notify you of any significant changes via email or in-app notification. Continued use of Trellis after changes constitutes acceptance.