Privacy Policy

The full policy below is the legally complete version. Here is what it says, in the same plain language we use everywhere else:

• We collect very little: your email if you give it to us, standard device and usage data, and — only if you accept analytics cookies — anonymized traffic measurement.
• If you arrived from another member's referral link, we keep that share code in a cookie for 30 days so they get credit if you sign up. It identifies them, not you, and it goes away once it is used or expires.
• By default, your BrickScore and reading progress stay in your own browser on your own device — not transmitted to or stored on our servers. If you create an account, you can opt in to sync them to your account so they follow you across devices.
• We never see your card number. If you subscribe, your card details go directly to our payment processor (currently Stripe) — on our side we keep only what runs the subscription: which plan you are on, whether it is active, and the reference IDs that link your account to Stripe.
• We never receive your bank login. If your plan includes connecting an account, your credentials go directly to our aggregation provider (currently Plaid) — we get read-only account names and balances, never a username, password, or full account number. Disconnect and the balances go with it: the accounts that came from that bank are deleted, not archived.
• When you ask Brix a question, we send it to an outside AI provider (currently Anthropic) along with a short summary from your account — never your name or email address. Your conversations stay under your account, and you can delete them at any time.
• We ask about your situation — your state, your household, your work — only in Settings, and every question is optional. It shapes what Brix says and which deadlines your calendar shows you. It never changes your BrickScore, and you can edit or delete all of it whenever you like.
• Your Money Calendar lets you enter dates only you know — when your lease or insurance renews, when your escrow statement lands. We keep the month and day, never the year, and never an amount or an account. They are yours to change or remove one at a time. If you subscribe a calendar app to your private link, that service fetches those dates from their own servers; the link is yours to reset whenever you like.
• We do not sell your personal information for money, and we never sell financial information of any kind.
• We do not use session-replay tools that record your screen, and we do not share data with data brokers.
• You can access, correct, delete, or take your data at any time — we extend these rights to every U.S. user, not only where the law requires it.
• We honor the Global Privacy Control browser signal and the cookie choices you make in our banner and in “Your Privacy Choices” in the footer.

This Privacy Policy explains how MoneyBricks LLC (“we,” “us,” “our”) collects, uses, discloses, and protects personal information when you visit https://www.moneybricks.com or interact with us (collectively, the “Site”). MoneyBricks LLC is the business/controller responsible for your personal information. If you access the Site from outside the United States, your information is processed in the United States, where privacy laws may differ from those of your jurisdiction.

The table below lists each category of personal information we collect, where it comes from, why we collect it, and who it may be disclosed to. Named providers are current as of the “Last updated” date and may change; any replacement performs the same role under equivalent contractual limits.

We do not collect bank logins, Social Security numbers, transactions, or any financial-account credentials — and we do not ask for them. There are two ways balances can reach your account, and neither one gives us your credentials. You can type account names and balances in by hand. Or, if your plan includes it, you can choose to connect a financial account: your login goes directly to our aggregation provider, currently Plaid Inc., which returns read-only account names, balances and the last few digits of the account number to us — never your username, password, or full account number. Connecting is optional and reversible. When you disconnect, we tell Plaid to revoke our access and we delete the balances that came from that bank — they are removed, not archived. Anything you typed in by hand stays until you change it. None of it is ever sold.

What we ask about your situation, and why

To make guidance useful we sometimes ask about your circumstances. Every one of these is optional. You can skip any question, answer it later, change it, or delete it. Skipping costs you nothing: the lesson you are reading does not change, and Brix simply gives more general answers.

You can review and edit everything you have shared, or delete all of it at once, in your Settings.

What we deliberately do not ask. We do not ask for your street address, ZIP code, county, date of birth, the names or birthdates of your children, your employer’s name, or any account number. We ask for age ranges for dependents, never dates of birth. We do not collect precise location — your state and metro area are not precise geolocation, and we do not track where your device is.

What your answers do not do. They do not change your BrickScore. Your score comes only from the BrickScore Assessment you choose to take. Nothing you tell us about your household or your job raises or lowers it.

Information from third parties

• Analytics, advertising, and social-media partners; and email service providers may share aggregate or interaction data with us.

Brix, our AI coach

Brix, our AI coaching feature, is powered by an outside AI provider (currently Anthropic). When you ask Brix a question, we send that question, the recent messages in that conversation, and a short summary drawn from your account — your BrickScore, your weakest assessment areas, and the Life Goals you are working on — to that provider so it can write an answer specific to you. We do not send your name or email address, and we do not send the individual answers you gave in your assessment.

The provider processes what we send only to generate your answer, under a contract that limits what it may do with it.

Your conversations with Brix are stored under your account so you can return to them, protected by the same access controls as the rest of your account data. You can delete a conversation at any time with “Clear conversation” on the Brix page, which removes it from our servers.

Brix gives financial education, not individualized financial, investment, legal, or tax advice, and nothing Brix does makes an automated decision about you. Please do not type account numbers, card numbers, Social Security numbers, or passwords into Brix — it never needs them.

Children

The Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact support@moneybricks.com and we will delete it.

By default, parts of the Site are personalized without sending your information to us. Your BrickScore score and recommendations, the bricks you have read, and in-progress assessment state are stored in your browser’s local storage on your own device. Used this way, that information is not transmitted to, or stored on, our servers, and we cannot see it. Clearing your browser’s site data removes it. If you enter your email to receive your results without creating an account, only the email address is sent to us — your answers still remain on your device.

If you create an account

If you choose to create a MoneyBricks account, you can opt in to sync this progress — your BrickScore and the bricks you’ve read — to our servers so it’s available on every device you sign in from. Once synced, that information is stored under your account with our infrastructure provider (Supabase), protected by access controls that let only you read your own data. It is still never sold. Creating an account is optional; you can keep using the free BrickScore anonymously and device-only.

• To operate, maintain, and improve the Site and its content;
• To send newsletters, updates, and marketing you have requested (you can opt out at any time);
• To respond to inquiries and provide customer support;
• To measure and analyze traffic, engagement, and content performance;
• To personalize content and, where permitted, deliver and measure advertising;
• To personalize the educational coaching Brix gives you, using your BrickScore, Life Goals, and the answers about your situation you chose to share;
• To choose which financial dates and deadlines we show you — for example, showing college-related deadlines to someone who told us they have teenagers at home. You can always change what the calendar shows;
• To detect, prevent, and address security incidents, fraud, and abuse;
• To comply with legal obligations and enforce our Terms.

We do not use your personal information to make decisions that produce legal or similarly significant effects through automated profiling. We may create and use aggregated or de-identified data that can no longer reasonably be linked to you; we maintain such data in de-identified form and do not attempt to re-identify it, except as permitted by law to test whether our de-identification is effective.

We disclose personal information to: service providers and processors that perform functions on our behalf (hosting, analytics, email delivery, payment processing, error monitoring, advertising measurement, and AI processing for the Brix coaching feature) under contracts limiting their use; advertising and analytics partners (which may involve “sharing” for cross-context behavioral advertising as defined below); and to authorities or others when required by law, to enforce our rights, or in connection with a merger, acquisition, or sale of assets — in which case this Policy will continue to apply to your information until you are notified otherwise. We do not sell personal information for money, we never sell financial information of any kind, and we do not disclose personal information to data brokers. Some uses of cookies for targeted advertising may be considered a “sale” or “share” under certain state laws — you can opt out as described in Section 8.

Connected financial accounts

Because a connected account is the most sensitive thing we touch, this is what happens to that information specifically, stated separately rather than left to be assembled from the sections above.

• What we receive: account names, types, current balances, and the last digits of the account number. Not transactions, not statements, not your full account number, and never your bank username or password.
• Who receives it from us: nobody. It is not shared with advertisers, analytics partners, data brokers, or any other member. It is not used to market anything to you and it is not used to build a profile of you for anyone else.
• Who else touches it: our aggregation provider, currently Plaid, which is the party your bank actually authenticates you with, and the infrastructure providers named above that host and secure our systems on our behalf under contract.
• How long we keep it: only while the connection is live. Disconnecting deletes it (Section 10).
• How it is held: our access token to your bank is encrypted at rest, and no browser session can read it (Section 11).
• What you can do: connect nothing at all — every balance on your account can be typed in by hand — or connect and disconnect whenever you like, as often as you like.

We do not share this information with anyone for their own marketing, so there is nothing here for you to opt out of. If that ever changes, we will say so before it does, not after.

What we do not do

• No collection of financial-account credentials — a bank login goes to our aggregation provider, currently Plaid, never to us — and no ability to move your money: access is read-only;
• No sale of personal information for money;
• No affiliate links and no commissions — we are paid by your subscription, not by anyone whose product we mention (see the Affiliate Disclosure in our Disclaimers);
• No session-replay tools that record your screen or keystrokes;
• No disclosure of personal information to data brokers;
• No use of your assessment answers for advertising — they never leave your device (Section 4).

We do not intentionally collect “sensitive personal information” (such as precise geolocation, government IDs, financial-account log-in credentials, race, health, or biometric data) for the purpose of inferring characteristics. If any sensitive information is collected incidentally, we use it only as permitted by law and honor applicable limitation rights.

The answers described in Section 3 are deliberately kept above the level of detail that would make them sensitive: we collect your state and metro area rather than precise location, and age ranges for dependents rather than dates of birth.

Comprehensive state privacy laws — including in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — give residents the rights below. We extend these rights to all U.S. users as a matter of practice, regardless of the state you live in:

• Right to know / access — the categories and specific pieces of personal information we hold about you;
• Right to delete — request deletion of personal information we collected from you;
• Right to correct — request correction of inaccurate personal information;
• Right to portability — receive a copy in a portable, machine-readable format;
• Right to opt out — of the “sale” or “sharing” of personal information and of targeted/cross-context behavioral advertising;
• Right to limit — the use of any sensitive personal information;
• Right to non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a right;
• Right to appeal — if we decline your request, you may appeal (see below).

How to exercise your rights

Submit a request by emailing support@moneybricks.com or calling 949.534.6101. To verify your identity we will ask you to confirm the email address associated with your information (and, if needed, limited additional information proportional to the sensitivity of the request); we use verification information only for that purpose. We will respond within the timeframe required by law (generally 45 days, extendable once with notice). We do not charge a fee unless a request is manifestly unfounded or excessive, in which case we will explain the fee before proceeding. An authorized agent may submit a request on your behalf with proof of written authorization.

Appeals

If we decline all or part of your request, you may appeal by replying to our response or emailing support@moneybricks.com with the subject line “Privacy Appeal — [Your State]” within 45 days of our decision. We will respond to appeals within the period your state’s law requires (generally 45–60 days). If your appeal is denied, you may contact your state Attorney General; in California, you may also contact the California Privacy Protection Agency.

Opt out of sale/share and targeted advertising

You can opt out by adjusting your choices in our cookie banner or by clicking “Your Privacy Choices” in the footer. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request where required.

California Civil Code § 1798.83 lets California residents request information about disclosures of personal information to third parties for their direct-marketing purposes. We do not share personal information with third parties for their own direct marketing. To inquire, contact support@moneybricks.com.

We retain personal information only as long as necessary for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements. In practice:

• Waitlist and newsletter data — until you unsubscribe or ask us to delete it, or until the list is retired;
• Support communications — for up to two years after resolution, unless a dispute or legal obligation requires longer;
• Analytics data — per our analytics provider’s configured retention window;
• Server and security logs — for a limited rolling window consistent with our hosting provider’s practices;
• Coaching conversations — kept under your account until you clear them or close your account, whichever comes first;
• The answers you share about your situation — kept until you change or delete them, or until you close your account; closing your account deletes them;
• Balances from a connected bank — kept only while the connection is live. Disconnecting deletes the account rows that came from that bank in the same action, and our access token with them; closing your account does the same;
• Device-local data (Section 4) — held on your device, under your control, until you clear your browser’s site data.

When retention ends, we delete or de-identify the information. Account data is purged after account closure, subject to legal holds.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, appropriate to the volume and sensitivity of what we hold — including encryption in transit (HTTPS/TLS across the Site), access controls limiting who can reach stored contact data, and a data-minimization design that keeps assessment answers off our servers entirely (Section 4). No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password anywhere you maintain credentials, and contact us immediately at support@moneybricks.com if you suspect unauthorized activity involving your information.

For details about the cookies and similar technologies we use and how to control them, see the Cookie Policy in Part 4.

Some browsers send “Do Not Track” signals. There is no industry standard for responding to them. We respond to recognized opt-out preference signals such as GPC as described above; otherwise we do not currently alter our practices in response to DNT signals.

The Site links to third-party sites and services with their own privacy practices, which we do not control. Review their policies before providing information.

We may update this Privacy Policy from time to time. We will post the revised policy with a new “Last updated” date and, for material changes, provide additional notice where required — such as a notice on the Site or an email to the address you gave us. Your continued use of the Site after a revised Policy takes effect means you accept the revised Policy.

MoneyBricks LLC, Attn: Privacy, 8502 E Chapman Ave. #130, Orange, CA 92869. Email: support@moneybricks.com. Phone: 949.534.6101.