Privacy Policy

Last updated: October 28, 2026

Kilter is run by Loam Labs Inc. ("Kilter", "we", "us"). Your financial life is about as personal as data gets, so this policy says plainly what we collect, why, who helps us handle it, and what you can do about it. It applies to the Kilter web and iOS apps, the assistant, Kilter's connection for outside AI apps and our website, trykilter.com.

In short: we use your data to run Kilter for you. We don't sell it, we don't show ads, we don't use advertising trackers, and we don't let anyone train AI models on it. Our own product analytics never see your financial data, except anything you choose to write in a feedback message.

What we collect

Your account. Your email address and your settings, such as your country, province or state, language and notification preferences. If you sign in with Google, we get your name and profile picture from Google. If you sign in with Apple, we get your name from Apple, and Apple may give us a private relay address that forwards to your inbox in place of your own address. If you sign in with a code we email you, your name starts as the part of your address before the @, and you can change it. If you add a passkey, we store its public key and the name you give it, never your fingerprint, face or device PIN.

The waitlist. If you join the waitlist before you have an account, we keep your email address, the country you pick and your language, and use them only to confirm you joined and to invite you. To be taken off it, reply to the confirmation email or write to privacy@heykilter.com.

Your financial data. When you connect an institution, we receive account names, types, balances, holdings and transactions from it. We keep the data as received, plus your edits: categories, rules, splits and notes. Bank connection credentials (such as a Plaid access token) are encrypted before they're stored. You sign in to your bank in Plaid's own window: we never see or store your bank password.

What you tell us about your finances and household. Your balance sheet (including things you type in, such as a home or a mortgage) and your plans: ages, incomes, expenses, goals, accounts, corporations and, if you add them, details about a spouse or children. Only add other people's information if you have the right to share it.

Your conversations with the assistant. We receive each message to answer it, but the conversation itself is kept in your browser, not on our servers. The assistant also keeps short notes about you between conversations (you can see, edit and delete them in Settings → Assistant). While you use Kilter, it may offer a suggestion in a small popup when it notices something worth a look (a change to your plan, transactions left to categorize), and about once a week it checks in and leaves a few suggestions in your notifications. We keep a record of what it suggested and whether you followed it up. You can turn both off in Settings → Notifications.

A history of changes to your data, with what changed and who made the change (you, the assistant, or an app you connected), so you can review and undo it.

Technical information we need to keep the Service secure and working: a session cookie that keeps you signed in, and server logs (such as IP address, browser type and errors), kept for a short time.

How you use the app. Product analytics and error reports (PostHog): which pages and features you use, errors you hit, and recordings of sessions in which every piece of text and everything you type is masked, so they never show your amounts, accounts, merchants or plans. They're linked to your account (your name and email) so we can help when something breaks.

Visits to our website. trykilter.com counts visits with PostHog without cookies or anything stored in your browser, and without identifying you: the pages viewed, the site that sent you, and clicks through to the app. A link to the app carries where you came from (the site or campaign), which is kept with your product analytics if you then sign up.

Feedback you send us. When you use "Send feedback", we receive what it's about and what you write, kept exactly as you wrote it, with your account and the session you sent it from (its masked recording and any errors), so we can understand and fix what you report. It's stored at PostHog with your product analytics, and people at Kilter read every message. The form asks you to leave out amounts and account details, since anything you include is kept as written.

We don't collect your bank passwords. If you have your own AI app bring in an institution's files, you sign in to the institution yourself, in your own browser; we receive only the files it imports into Kilter.

How we use it

• To provide Kilter: sync and categorize your transactions, show your net worth, run projections, answer your questions and send you in-app notifications.
• To keep your account secure, prevent abuse and fix problems.
• To provide support when you ask for it. We look at your data only when you ask us to, when it's needed to fix a problem with your account, or when the law requires it.
• To improve Kilter, using aggregate information about how features are used, never by selling or sharing your data.
• To categorize well-known businesses for everyone: when at least five people put the same business (a coffee chain, a grocer) in the same category themselves, Kilter uses that category for others' first transactions there. Only the business's name and the category are used, never who shopped there, amounts or dates, and never payments to or from people. Your own choices always come first.

AI

Kilter uses Anthropic's Claude models to categorize transactions from merchants it hasn't seen before and to power the assistant. To do that, we send Anthropic the information needed for the task: for categorization, a transaction's description and amount (never payments to or from people, such as Interac e-Transfers or Zelle, which carry someone else's name); for the assistant, your messages and the parts of your data it needs to answer; for its suggestions, what you just did in the app, a summary of what you've set up and changed lately, its notes about you, and the parts of your data it reads to make them. Anthropic processes this for us under commercial terms that don't allow it to train its models on our data, and deletes it within 30 days, unless its automated systems flag it as breaking Anthropic's usage policy (then up to two years) or the law requires keeping it longer.

If you connect an outside AI app (such as Claude, ChatGPT or Codex) to Kilter, that app can read the Kilter data you've allowed it to, and what it does with it is governed by its own privacy policy and your agreement with its provider.

Who we share it with

We share personal information only with service providers that help us run Kilter, only what they need, and under agreements that require them to protect it:

We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

Where your data is stored

Our servers and service providers are mainly in the United States, so if you live in Canada, your information may be accessible to courts and authorities there under US law. We protect it the same way wherever it's stored.

How we protect it

Data is encrypted in transit and at rest, and bank credentials have an additional layer of encryption with keys kept separately from the database. Access to production systems is limited to the people who need it to run the Service. No system is perfectly secure. If a breach puts your information at risk, we'll tell you and the authorities as the law requires: in Canada, the Privacy Commissioner of Canada when it creates a real risk of significant harm, and in the United States, as your state's data breach law requires.

How long we keep it

We keep your data while you have an account. When you delete your account, we delete your data straight away, all of it at once: there's no waiting period, and we can't restore it afterwards. That includes your product analytics at PostHog: your profile there and the events, session recordings and feedback linked to it, which PostHog then removes in the background. Copies in our database backups expire within 14 days, so everything is gone within 30 days, except anything we must keep by law (such as payment records, which Paddle keeps as the seller). Disconnecting a bank stops its syncing straight away. Its stored credential is deleted as soon as the bank data provider confirms the connection is removed, usually within seconds.

One thing stays after you delete your account, so the free trial is one per person: a one-way, keyed fingerprint of your email address and of the Google or Apple account you signed in with. It can't be turned back into your address, and the only thing we use it for is telling whether a new account has already had the trial.

Your rights and choices

You can, at any time:

• See and correct most of your data directly in the app, or ask us for a copy of everything we hold about you.
• Export your data in a structured, commonly used format: in Settings → Data & privacy, download everything we hold about you as a JSON file, and your transactions as a CSV file for a spreadsheet.
• Delete your account and its data, in Settings → Data & privacy. To protect you, you'll be asked to sign in again if you haven't in the last 15 minutes, and to type your email address to confirm. Deletion is immediate and permanent, signs you out everywhere and disconnects any outside AI apps.
• Withdraw consent, for example by disconnecting a bank or an outside AI app, or by deleting the assistant's notes. Some features can't work without certain data.
• Complain to us, and if you're not satisfied, to the Office of the Privacy Commissioner of Canada or your provincial commissioner (such as the Commission d'accès à l'information in Quebec), or, in the United States, your state attorney general or the Federal Trade Commission.

To make a request, email privacy@heykilter.com. We'll answer within 30 days. To make sure it's you, write from the address on your account; someone you've authorized can also make a request for you. We won't treat you differently for using any of these rights.

If you live in the United States

Some US states' privacy laws, such as California's, give their residents specific rights and ask businesses to describe their practices in those laws' terms. Whether or not your state's law applies to us, here's how it works at Kilter:

• We don't sell or share personal information, as those laws use the words, and we don't use it for targeted advertising or for profiling that makes decisions about you with legal or similarly significant effects. There's nothing to opt out of; if your browser sends a Global Privacy Control signal, we treat it as an opt-out anyway.
• Sensitive information. Your financial account information and your sign-in are sensitive personal information under some state laws. We use them only to provide the Service you ask for, as described above.
• What we collect, in those laws' categories: identifiers (your name, email address, IP address and account), financial information (accounts, balances, holdings and transactions), commercial information (your subscription), internet activity (how you use the app), inferences (the assistant's notes about you), and the information about you and your household you put in your plans. It comes from you, the institutions you connect and the providers above. We use it for the purposes in "How we use it" and disclose it only to the service providers listed above, for those purposes.
• Your rights to know, access, correct, delete and get a copy of your information are the ones in "Your rights and choices", which we give everyone. If we refuse a request, our answer will say why, and you can appeal by replying to it. We'll answer an appeal within 45 days; if you're not satisfied, you can contact your state attorney general.
• California's "Shine the Light" law: we don't share personal information with anyone for their own direct marketing.

Children

Kilter is for adults and isn't directed at children. We don't knowingly collect information from children, except details a parent enters about their own children (for example, for RESP or 529 planning).

Changes to this policy

If we make a significant change, we'll tell you by email or in the app before it takes effect.

Contact

Our person in charge of the protection of personal information is Ben Black, Founder. Loam Labs Inc., Squamish, BC, Canada · privacy@heykilter.com