Privacy Policy
Able App ("Able," "we," "us," or "our") operates the Able application at https://becomeable.app and the Able web app at https://becomeable.app/app.html (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it.
By using the Service you agree to the handling of information as described here.
1. Information we collect
1.1 Account information
When you sign up we collect:
- Email address and password (or Google account ID if you sign in with Google)
- The timestamp of your account creation and most recent activity
1.2 Financial data you enter
Able is a budgeting tool, so most of what you put into it is financial information. This can include:
- Bills, debts, income sources, and forecast items
- Balances, interest rates, and due dates
- Your allocation preferences (percentages across debt, savings, and spending)
- Goals, notes, and any other content you choose to save
You enter this data manually. Able does not currently connect to your bank account.
1.3 Usage and product analytics
We collect basic product analytics to understand how the Service is used and to improve it. This may include:
- Pages viewed, features used, and interactions with the app
- Device and browser type, operating system, approximate location (country/region) derived from IP
- Referral source
We do not use these analytics to build an advertising profile of you.
1.4 Payment information
Payments for the Service are processed by Stripe. We do not collect or store your full credit card number. We receive and store:
- Your subscription status (trial, active, canceled, past due)
- The last 4 digits of your card and card brand (from Stripe)
- Billing country and postal code (for tax)
Stripe's privacy policy: https://stripe.com/privacy
1.5 AI Coach interactions
If you use the AI Coach feature, the messages you send and the Coach's replies are stored in our database so the Coach can maintain conversation history for you. Your messages and a snapshot of your current in-app numbers are also sent to our AI provider, Anthropic, to generate responses.
Anthropic's privacy policy: https://www.anthropic.com/legal/privacy. Anthropic's commercial terms state that API content is not used to train their models.
1.6 Cookies and local storage
We use cookies and browser local storage to keep you signed in, remember your preferences, and cache your app state for offline reliability. You can clear these at any time through your browser settings; doing so will sign you out.
2. How we use your information
We use what we collect to:
- Provide the Service and your account
- Process payments and manage your subscription
- Send transactional email (e.g. password reset, trial expiration, billing)
- Send product and marketing email if you have opted in
- Generate AI Coach replies
- Analyze product usage and improve the Service
- Detect fraud, abuse, and security issues
- Comply with our legal obligations
We do not sell your personal information.
3. Who we share information with
We share information only with the following categories of service providers, and only what they need to do their job:
| Vendor | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, serverless functions | Account data, app data, coach messages |
| Stripe | Payments and subscription management | Email, subscription status, billing country |
| Anthropic | AI Coach responses | Your coach message and a snapshot of your in-app numbers |
| Resend | Transactional and marketing email | Email address, name |
| PostHog (US cloud) | Product analytics | Usage events, device/browser metadata |
We may also disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
If Able App is acquired or merges with another company, your information may be transferred to that company as part of the transaction. We will notify you before that happens.
4. Where your information is stored
Your data is stored with Supabase, which hosts on Amazon Web Services. Data may be stored in or transferred to data centers in the United States or other countries. By using the Service you consent to this.
5. Security
We use industry-standard measures to protect your information:
- Data is encrypted in transit (TLS) and at rest
- Authentication uses Supabase's session management with short-lived tokens
- Database access is restricted with row-level security so each user can only access their own data
- Payment processing is delegated to Stripe, who is PCI-DSS Level 1 certified
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@becomeable.app.
6. Your rights
Depending on where you live, you have the right to:
- Access a copy of the personal information we hold about you
- Correct information that is inaccurate
- Delete your account and associated personal information
- Export your data in a portable format
- Object to or restrict certain uses of your information
- Withdraw consent for marketing email at any time (use the unsubscribe link in any email)
To exercise these rights, email us at hello@becomeable.app. We will respond within 30 days.
7. Children
The Service is not intended for children under 13 (or under 16 in the EEA/UK). We do not knowingly collect information from children. If you believe a child has given us personal information, contact us at hello@becomeable.app and we will delete it.
8. Data retention
- Active account data is retained for as long as your account is open.
- If you delete your account, we delete your personal information within 30 days, except where we are legally required to retain it (for example, billing records for tax purposes).
- Backups that include your data are overwritten on a rolling basis, typically within 30 days.
9. California, EU, and UK residents
If you are in California, the EU, or the UK, you have additional rights under the CCPA, GDPR, or UK GDPR respectively. The rights listed in Section 6 satisfy most of these, but you also have the right to lodge a complaint with your local data protection authority.
Our legal basis for processing your information under GDPR/UK GDPR is (1) performance of our contract with you to provide the Service, (2) your consent (for marketing email), and (3) our legitimate interest in operating and improving the Service.
10. Changes to this policy
We will update this policy when our practices change or when required by law. If we make material changes we will notify you by email and by a notice in the app at least 14 days before the changes take effect.
11. Contact
Questions or requests about this policy:
hello@becomeable.app