This is the privacy policy for LasagnaFi, a personal finance app made by SuperCoolLabs LLC. It explains what happens to your data.
What we collect
Here's the data we hold, and why:
- Your account details. Your email address, and your name if you give it to us. This is how you sign in and how we reach you.
- Your financial data. When you connect a bank, brokerage, or credit card through Plaid (see below), we store the account balances, transactions, and holdings that come back so we can show you your money and give you insights. You can also type in accounts by hand.
- What you tell the app. Your goals, plans, and the questions you ask in chat.
- Tax documents you upload. If you upload a tax form, we send the page to an AI model to read the numbers from it. We store those numbers and a short summary. We delete the file once it has been read.
The services we rely on
We use a small number of trusted software services to make the app work, and we only pass each one the data it needs to do its job. These include, but are not limited to, the following, and this may not be a comprehensive list, as the services we use can change over time:
- Plaid connects your financial accounts. When you link an account, Plaid securely handles your bank login and sends us your balances and transactions. We never see your bank password. That stays between you and Plaid. Connections are read-only: we can see your accounts, but we can't move money.
- WorkOS handles sign-in and sends the one-time login codes to your email.
- Stripe processes payments if you subscribe to a paid plan. Your card details go straight to Stripe, and we never store your card number.
- Umami counts page views, so we can see which features get used.
- Google Cloud runs the app. Our servers and our database are there, and it is where the AI reads your tax documents.
- AI models (via OpenRouter). The insights and chat answers are generated by AI. When you ask a question in chat, your identity is stripped out first and replaced with anonymous tokens. The model sees numbers and patterns, never your name, your bank, or your account numbers.
Uploaded documents are handled differently. A photo or PDF cannot be anonymized before it is read, because the model reads the image of the page. Anything printed on that page, including your name and Social Security number, is visible to the model.
For those documents:
- We use Google Vertex AI, which runs inside our own Google Cloud account. The document is not sent to an outside AI company.
- Google does not use the document to train its models.
- We have turned off Google's prompt caching.
- We delete the file once it has been read. The numbers we store exclude your name and Social Security number.
These are processors we depend on to run the service, not partners we sell your information to. Each of them (Plaid, WorkOS, Stripe, OpenRouter, Google Cloud, and the others we use) is its own company with its own privacy policy governing the data it processes on our behalf. We do not sell your data to anyone, and we do not share it with advertisers.
Analytics
The hosted version of LasagnaFi uses Umami.is to get telemetry on user actions. It tells us which features people use, which ones they skip, and where they get stuck, so we know what to focus on and what needs fixing.
No personal or financial information gets sent. We do not use analytics for advertising, and we don't sell this data or share it with advertisers. Umami is its own company with its own privacy policy covering its use.
Cookies
We use a single cookie to keep you signed in and grant access to the platform. We don't use third party advertisers so no other cookies.
How your data is kept safe
Your data is encrypted in transit, and access is limited to what's needed to run the service. Your connection to your banks through Plaid is read-only, so no one can move your money through LasagnaFi.
How long we keep your data
We keep your data for as long as you have an account. When you delete your account from Settings, we remove your personal and financial data from our systems. Some information may stay in backups for a short while before it rolls off, and we may keep the minimum we need to meet a legal or accounting obligation. The services we rely on, like Plaid and Stripe, keep their own records under their own policies.
Children's privacy
LasagnaFi is meant for adults managing their own money. It is not directed to children, and you must be at least 18 to use it, in line with our Terms of Service.
No liability
We work hard to protect your data, but no system is perfectly secure, so we provide the service "as is" and can't guarantee it will never be breached. To the maximum extent permitted by law, SuperCoolLabs LLC is not liable for any damages arising from a security incident or from your use of the app. This is also covered in our Terms of Service.
Your privacy rights
You're in control of your data, and you can exercise these rights yourself:
- Delete your account. You can delete your account at any time from Settings. This removes your data from our systems.
- Disconnect accounts. You can unlink any connected financial account whenever you want.
You can delete your account within the app if you want to delete all your data.
Prefer to keep everything yourself?
LasagnaFi is open source. If you'd rather your data never leave your own server, you can self-host the whole thing.
Changes to this policy
These terms are subject to change and if changes are made, we'll update the "Last updated" date at the top of this page. By continuing to use the service, you agree to these changes.
Contact us
Questions about your privacy? Email us at dheeraj@supercoollabs.com.