Privacy Policy

Last updated: October 15, 2026 · Version 2026-10

1. About This Policy

Slate ("we," "our," or "us") is an iOS app that helps you understand and pay down credit card debt. This Privacy Policy explains what information we collect, how we collect it, every way we use it, who we share it with, how long we keep it, and the choices you have.

It applies to the Slate app and the services that run it. By creating an account you agree to this policy. If you don't agree, please don't use Slate.

Questions? Email hello@withslate.co.

2. The Short Version

We never sell your information for money. If you allow tracking when iOS asks, Slate tells Meta (Facebook and Instagram) about a few steps you take, so we can see which of our ads work. Your balances, cards, banks, transactions and anything else about your money are never shared with Meta (section 6).
Your bank data comes through Plaid. We never see your bank username or password.
AI features are off until you allow them. When they're on, parts of your information are sent to Anthropic, the company that makes the Claude AI model. The app shows exactly which parts before you decide.
You can turn AI features off, disconnect a bank or delete your account at any time in the app.

3. Information We Collect and How

Information you give us

Account details: your email address and password when you sign up (the password is stored only as a secure hash), or the email address Apple shares if you use Sign in with Apple, which can be a private relay address. Optionally, your first and last name.
What you enter: APRs and minimum payments you type in, your payoff plans and extra payments, notification preferences, and your answers during onboarding, including anything you write in free-text answers.
Statements you upload or scan: the file itself, and the figures read from it.
Coach conversations: the messages you send to the AI coach, and its replies.
Your choices: the version and date of the policies you accepted, and your answer to the AI data-sharing question.

Information from your bank, through Plaid

When you connect a card, Plaid Technologies, Inc. retrieves, with your permission: the account's name and last four digits, balances, credit limit, APRs, minimum payment, statement balance and dates, payment history, and transactions (dates, amounts, merchant names and categories). Plaid connects to your bank directly, so we never receive your bank username or password. Slate works only with credit cards: checking, savings and loan accounts are skipped and not stored.

Information collected automatically

Usage events: which screens and features you use, with some details of what you saw or did (for example a card's name, an APR or an amount), your app version and a session identifier. They're stored in our own database, linked to your account.
Crash and error reports: your device model, iOS version, app version, a random account identifier and technical details of the problem. Before a report leaves your device or our servers, we remove dollar amounts, email addresses, account numbers, access tokens and the contents of requests.
Notifications: if you allow them, your device's push token, so that alerts can reach you.
Advertising information, only if you allow tracking: when iOS asks whether Slate may track you and you allow it, Meta's software in the app collects your device's advertising identifier, an identifier it creates for the app, basic device information (such as model, iOS version, language, time zone and screen size) and the steps listed in section 6. If you don't allow it, none of this is collected or sent.

Information from Apple and RevenueCat

If you subscribe to Slate Pro, Apple processes the payment and RevenueCat, Inc. tells us whether your subscription is active. We never receive your payment card details.

What we don't collect

We don't collect your precise location or contacts. We collect your device's advertising identifier only if you allow tracking, and Slate never receives information about you from other companies' apps or websites. The camera is used only when you choose to scan a statement. Face ID is handled entirely by iOS: we never receive biometric data.

4. How We Use Your Information

We use your information to:

Run Slate: show your cards, balances, interest and statements; build payoff plans and projections; and track your progress.
Read statements you upload, with your permission (section 5).
Provide AI features, with your permission (section 5): coach replies, weekly insights, Spending DNA, plan explanations and statement reading.
Send the alerts and notifications you turn on, such as payment due dates and new statements.
Keep your account secure: sign-in, the Face ID lock and preventing abuse.
Fix and improve Slate: diagnose crashes and errors, and understand which features are used.
Manage subscriptions: confirm your Slate Pro access.
Measure our advertising, only if you allow tracking (section 6): see which of our Facebook and Instagram ads bring people to Slate.
Support you: answer your questions and requests.
Meet legal obligations: comply with the law, enforce our Terms, and protect the rights and safety of our users and Slate.

We don't sell your personal information for money, and we don't use it to build advertising profiles. If you allow tracking, we share the limited information in section 6 with Meta, which is sharing for cross-context behavioral advertising under California law (section 10). If you don't, nothing is shared with Meta.

5. AI Features and Anthropic

Slate's AI features are powered by Claude, an AI model made by Anthropic, PBC. They are off until you allow them on the "AI and your data" screen in the app, which shows what is sent and to whom before anything is sent. You can change your answer at any time in Settings → AI & Data Sharing. Without AI features, your balances, plans, payoff math and alerts keep working.

When AI features are on, our servers send Anthropic only what each feature needs:

Coach: your messages and the conversation so far, with your cards (names, balances, APRs, credit used, statement figures and payments), your plan, your subscriptions and a summary of your spending.
Reading a statement: the whole file you upload or scan, including anything printed on it, such as your name, address and account number.
Weekly insights and Spending DNA: your cards, your plan and progress, and your transactions (dates, amounts, categories and merchant names).
Plan explanations: your plan's figures and your card names.

We never send Anthropic your email address, password, bank login, or the tokens that connect Slate to your bank.

Anthropic processes this information for us under its Commercial Terms and Data Processing Addendum. It may use it only to provide its service to us, it doesn't train its models on it, and it deletes it within 30 days, unless the information is flagged for a Usage Policy review or the law requires Anthropic to keep it longer. See Anthropic's Privacy Policy.

If we change what AI features send, we'll ask for your permission again before sending it.

AI can make mistakes. Check important figures against your statement before you act on them.

We share personal information only with the service providers below, and only what each needs to do its job for us. Each is bound by contract to use your information only to provide its service to us, to keep it confidential, and to protect it with the same or equal protection as this policy describes.

Plaid Technologies, Inc.: connects to your bank and delivers your card data. Plaid's End User Privacy Policy also applies to the information you give Plaid.
Supabase, Inc.: hosts our database, sign-in, file storage and servers in the United States (US East, Virginia).
Anthropic, PBC: provides the AI features, only if you allow them (section 5).
Sentry (Functional Software, Inc.): receives crash and error reports, with the details listed in section 3 removed.
RevenueCat, Inc.: manages subscription status. It receives your App Store purchase history and a random account identifier, never your financial data. If you allow tracking, it also receives your device's advertising and vendor identifiers, your IP address and Meta's identifier for the app, so that subscription renewals and trial conversions can be reported to Meta.
Apple Inc.: provides Sign in with Apple, delivers push notifications (including their text) and processes App Store payments.
Resend: sends account emails, such as sign-up confirmations and password resets, to your email address.

Meta Platforms, Inc. is not one of our service providers: it also uses what it receives for its own advertising purposes, under its Privacy Policy. We share with Meta only if you allow tracking when iOS asks: that you installed and opened Slate, created an account (and whether with Apple or email), connected a bank, finished onboarding, saved a payoff plan, used the coach, and started a free trial or a subscription, with the plan and the price the App Store charged. Meta also receives your device's advertising identifier, an identifier it creates for the app and basic device information. We never send Meta your balances, APRs, card or bank details, transactions, statements, plan figures, coach messages, email address or name. Change your answer anytime in iOS Settings → Privacy & Security → Tracking.

Apple's SKAdNetwork may tell an ad network such as Meta that one of its ads led someone to install Slate. It doesn't identify you or your device, and it works whether or not you allow tracking.

We may also disclose information when the law requires it, such as in response to a valid court order; to protect the rights, property or safety of our users, Slate or others; or as part of a merger or acquisition, in which case the new owner must keep honoring this policy. We never rent personal information or sell it for money.

7. How We Protect Your Information

Your information is encrypted in transit and at rest.
Database access rules let each account reach only its own records.
The tokens that connect Slate to your bank are stored encrypted in a secrets vault and are never sent to the app.
Passwords are stored only as secure hashes.
You can add a Face ID lock.
Uploaded statement files are deleted from our storage as soon as they've been read.

No system is perfectly secure. If a security incident affects your personal information, we'll notify you as the law requires.

8. How Long We Keep It

We keep your account and financial information while your account is open. Some records expire sooner:

Uploaded statement files: deleted as soon as they've been read.
Statement results you don't confirm: 7 days.
AI memory (short summaries of recent weekly insights) and AI usage counters: 90 days.
Bank connection notices from Plaid: 30 days.
Crash and error reports at Sentry: up to 90 days.
Information sent to Anthropic: deleted by Anthropic within 30 days, with the exceptions in section 5.
Information shared with Meta, if you allowed tracking: kept by Meta under its own policies.

When you delete your account, we delete it and everything linked to it (section 9). The full schedule is in our Data Retention Policy, in Settings → Legal & Privacy.

9. Your Choices and Rights

AI data sharing: turn it on or off in Settings → AI & Data Sharing. Turning it off stops anything new from being sent to Anthropic.
Bank connections: disconnect a bank in Settings → Connected Accounts. This revokes Slate's access at Plaid and stops new syncing.
Notifications: change them in Settings → Notification Preferences or in iOS Settings.
Tracking: allow or stop it anytime in iOS Settings → Privacy & Security → Tracking. Stopping it stops anything new from being sent to Meta; what Meta already received stays with Meta under its own policies.
Access and portability: Slate Pro members can request a copy of their data in Settings → Request My Data. Anyone can request a copy, free, by emailing us.
Correction: edit your details in the app, or ask us to correct them.
Deletion: delete your account in Settings → Legal & Privacy → Delete Account. This deletes your account and its data from our systems right away and disconnects your banks at Plaid. Backup copies are overwritten within 30 days.
Usage events: ask us, and we'll delete the usage events linked to your account.

To make a request, email hello@withslate.co from the address on your account. We respond within 30 days, and we won't treat you differently for exercising your rights.

10. California Privacy Rights

If you live in California, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

In the past 12 months we collected these categories: identifiers (email address, name, account and device identifiers, and your advertising identifier if you allow tracking); financial information (card balances, APRs, payments, transactions and statements); commercial information (subscription purchases, and the subscriptions detected in your spending); internet or other electronic activity (usage events and crash reports); and inferences drawn from your information (insights and Spending DNA). The sensitive personal information we collect, your account login and financial account details, is used only to provide Slate, never to infer characteristics about you.

Sources: you, your device, Plaid (from your bank), Apple and RevenueCat. We use and disclose each category only for the purposes in section 4, to the service providers in section 6 and, if you allow tracking, to Meta as described there. We don't sell personal information for money. Sharing with Meta for advertising may count as "sharing" for cross-context behavioral advertising, or as a "sale", under California law. It happens only if you allow tracking, and you can opt out at any time by turning tracking off in iOS Settings → Privacy & Security → Tracking, or by emailing us with the subject "Do Not Sell or Share". We don't knowingly sell or share the personal information of anyone under 16.

To make a request, email hello@withslate.co with the subject "California Privacy Request". We verify your identity by matching the email address on your account. An authorized agent may make a request with your signed permission.

11. Where Your Information Is Processed

Slate is designed for people in the United States. Your information is stored and processed in the United States, by us and by our service providers.

12. Children

Slate is for adults 18 and over. We don't knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email hello@withslate.co and we'll delete it.

13. Changes to This Policy

When we make material changes, we'll show the updated policy in the app and ask you to accept it before you continue. The "Last updated" date above shows the latest revision.

14. Contact Us

Email: hello@withslate.co

Subject: Privacy Inquiry

We respond to privacy requests within 30 days.