Security
Read-only. On purpose.
This page is for the reader who wants evidence rather than adjectives: where your data goes, who touches it and why, how it's protected, how long it's kept, what AI features send, and what has and hasn't been tested. Every line here restates the privacy policy.
The path your data takes
Holds your login
Your bank
Reports your card's balance, APRs, statement figures, payments and transactions.
Your username and password stay here. Slate never asks for them.
Makes the connection
Plaid
Signs in to your bank with your permission and passes Slate a read-only copy of your credit card data.
Checking, savings and loan accounts are skipped and never stored.
Does the arithmetic
Slate
Prices the interest, builds your plan and names your date. Encrypted in transit and at rest; each account reaches only its own records.
Cannot make a payment, move money or change anything at your bank.
Optional, off by default
Anthropic
Reached only when you turn AI features on, and only with the fields a feature needs, shown to you before anything is sent.
Not used to train models. Deleted within 30 days.
What Slate receives
From your bank, through Plaid
- The account's name and last four digits
- Balances, credit limit and APRs
- Minimum payment, statement balance and statement dates
- Payment history
- Transactions: dates, amounts, merchant names and categories
Credit cards only. Checking, savings and loan accounts are skipped and not stored. Your bank username and password go to Plaid and never reach Slate.
From you
- Your email and a password, stored only as a secure hash, or the address Apple shares through Sign in with Apple
- Optionally, your first and last name
- APRs and minimums you type in, your payoff plans and extra payments, and your notification preferences
- Statements you upload or scan, and the figures read from them
- Your coach conversations, and the policies and AI answer you accepted
Automatically
- Which screens and features you use, with some detail of what you saw, kept in Slate's own database
- Crash reports, with dollar amounts, email addresses, account numbers, tokens and request contents removed before they leave
- Your device's push token, if you allow notifications
- Your device's advertising identifier, only if you allow tracking, for Meta (below)
Never collected
- Your precise location or contacts
- Anything about you from other companies' apps or websites
- Your payment card details: Apple processes Slate Pro
- Biometric data: Face ID is handled entirely by iOS
Who touches it, and why
Only these seven, each bound by contract to use the information only to do its job for Slate, and only what each needs.
| Vendor | Job | What it gets |
|---|---|---|
| Plaid Technologies, Inc.Connects to your bank and delivers your card data. | Connects to your bank and delivers your card data. | Your bank login, which Slate never sees. |
| Supabase, Inc.Hosts the database, sign-in, file storage and servers, in the United States (US East, Virginia). | Hosts the database, sign-in, file storage and servers, in the United States (US East, Virginia). | Your account and card data, encrypted at rest. |
| Anthropic, PBCProvides the AI features, only if you turn them on. | Provides the AI features, only if you turn them on. | Only the fields each feature needs, shown to you first. Deleted within 30 days; never used for training. |
| Sentry (Functional Software, Inc.)Receives crash and error reports. | Receives crash and error reports. | Technical details, with amounts, emails, account numbers and tokens removed. |
| RevenueCat, Inc.Manages subscription status. | Manages subscription status. | Your App Store purchase history and a random account identifier. Never your financial data. If you allow tracking, also your advertising and vendor identifiers, IP address and Meta's app identifier, so renewals can be reported to Meta. |
| Apple Inc.Sign in with Apple, push notifications and App Store payments. | Sign in with Apple, push notifications and App Store payments. | What those services need; Slate never receives your payment card. |
| ResendSends account emails such as sign-up confirmations and password resets. | Sends account emails such as sign-up confirmations and password resets. | Your email address. |
Meta, only if you allow tracking.Meta isn't one of the seven: it also uses what it receives for its own advertising. If you allow tracking when iOS asks, Slate tells Meta that you installed and opened the app, created an account, connected a bank, finished onboarding, saved a plan, used the coach, and started a trial or subscription with its price, along with your device's advertising identifier. Never your balances, APRs, cards, banks, transactions, statements, plan figures or coach messages. Turn it off anytime in iOS Settings, Privacy & Security, Tracking.
How it's protected
- Encrypted in transit and at rest.
- Database access rules let each account reach only its own records.
- The tokens that connect Slate to your bank are stored encrypted in a secrets vault and are never sent to the app.
- Passwords are stored only as secure hashes.
- You can add a Face ID lock.
- Uploaded statement files are deleted from storage as soon as they've been read.
How long it's kept
- Account and card data
- While your account is open. Deleted when you delete the account; backups overwritten within 30 days.
- Uploaded statement files
- Deleted as soon as they've been read.
- Statement results you don't confirm
- 7 days.
- AI memory and AI usage counters
- 90 days.
- Bank connection notices from Plaid
- 30 days.
- Crash and error reports at Sentry
- Up to 90 days.
- Information sent to Anthropic
- Deleted by Anthropic within 30 days, unless flagged for a policy review or the law requires longer.
- Information shared with Meta
- Only if you allowed tracking. Kept by Meta under its own policies.
The full schedule is the data retention policy.
AI features: off until you say so
Nothing is sent to Anthropic until you turn AI features on, and the app shows the list below before anything goes. Your email, password, bank login and bank tokens are never sent. Anthropic doesn't train on it and deletes it within 30 days.
- Coach
- Your messages and the conversation so far, with your cards (names, balances, APRs, credit used, statement figures and payments), your plan, your subscriptions and a summary of your spending.
- Reading a statement
- The whole file you upload or scan, including anything printed on it, such as your name, address and account number.
- Weekly insights and Spending DNA
- Your cards, your plan and progress, and your transactions (dates, amounts, categories and merchant names).
- Plan explanations
- Your plan's figures and your card names.
Your controls
AI data sharing
On or off in Settings, AI & Data Sharing. Off stops anything new from being sent.
Bank connections
Disconnect in Settings, Connected Accounts. Slate's access at Plaid is revoked and syncing stops.
A copy of your data
Slate Pro members request one in Settings, Request My Data. Anyone can ask for a copy, free, by writing to hello@withslate.co.
Deletion
Settings, Legal & Privacy, Delete Account. Immediate; your banks are disconnected at Plaid and backups are overwritten within 30 days.
Tracking
iOS Settings, Privacy & Security, Tracking. Off stops anything new from being sent to Meta.
Independent testing
No independent security audit or penetration test has been published yet. When one is, it will be linked here. Nothing on this page should be read as implying otherwise: the controls above are Slate's own description of its systems, and a security researcher is welcome to check them.
Report a weakness
Found something? Write to hello@withslate.co with enough detail to reproduce it. You'll get an acknowledgement within two business days, and credit if you want it. The address is also published at /.well-known/security.txt.