Privacy Policy

Last Updated: March 2026

This Privacy Policy ("Policy") describes how Treedy, Inc. ("Treedy", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you access or use our website, mobile application, and related services (collectively, the "Service").

This Policy incorporates disclosures required under applicable U.S. laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

By accessing or using the Service, you acknowledge that you have read, understood, and agree to this Policy.

1. Scope and Applicability

This Policy applies to all users of the Service, including individuals who:

Register for an account
Link financial accounts
Use Treedy's savings and round-up features

This Policy does not apply to third-party services integrated with Treedy.

2. Information We Collect

We collect the following categories of personal information:

a. Identifiers

Full name
Email address
Phone number
IP address
Device identifiers

b. Financial Information

Linked financial account data (via third-party providers)
Transaction history
Round-up calculations
Savings and account balance data (read-only access)

c. Internet or Network Activity

Browser type
Operating system
Usage data and interactions

d. Inferences

Spending patterns
Savings behavior
Financial trends derived from user activity

e. Compliance and Verification Data (AML/KYC)

Where required, we may collect or process:

Identity verification data
Government-issued identification (through third-party providers)
Fraud prevention and risk assessment data

3. Sources of Information

We collect personal information from:

You directly
Financial institutions via secure aggregators (e.g., Plaid)
Identity verification providers
Devices and browsers
Analytics tools

4. How We Use Personal Information

a. Service Delivery

Provide, operate, and maintain the Service
Execute round-up transactions
Display savings insights

b. Communication

Send account notifications
Provide customer support
Deliver updates and service-related communications

c. Security and Compliance

Detect fraud, unauthorized access, or illegal activity
Perform identity verification (KYC)
Comply with applicable financial regulations, AML laws, and reporting obligations

d. Product Improvement

Analyze usage trends
Enhance performance and features

e. Legal and Regulatory

Enforce agreements
Respond to lawful requests

We do not sell personal information.

5. Financial Services Disclaimer

Treedy is a financial technology platform, not a bank, broker-dealer, or investment advisor.

Treedy does not provide financial, investment, legal, or tax advice
Funds are held and processed by third-party financial institutions
Any savings projections, analytics, or insights are informational only and not guaranteed

Users are solely responsible for their financial decisions.

6. Sharing and Disclosure of Information

a. Service Providers

Including:

Financial aggregators (e.g., Plaid)
Payment processors
Identity verification providers
Cloud and infrastructure providers

b. Compliance and Legal Requirements

We may disclose data:

To comply with AML, KYC, and regulatory requirements
In response to subpoenas or legal processes
To prevent fraud or security threats

c. Business Transfers

In connection with:

Mergers
Acquisitions
Asset sales

7. CCPA / CPRA Privacy Rights (California Residents)

California residents have the following rights:

Right to Know
Right to Access
Right to Delete
Right to Correct
Right to Limit Use of Sensitive Information
Right to Opt-Out of Sale/Sharing (we do not sell or share)
Right to Non-Discrimination

Requests can be submitted to: hello@treedy.life

We will verify identity and respond within legally required timeframes.

8. Data Retention

We retain data only as long as necessary for:

Providing the Service
Legal, tax, and regulatory compliance
Fraud prevention and dispute resolution

Certain financial or compliance data may be retained longer as required by law.

Upon account deletion, personal data is deleted or anonymized within 30 days, unless legally required otherwise.

9. Data Security

We implement industry-standard safeguards, including:

256-bit encryption
Role-based access controls
Continuous monitoring

Treedy maintains SOC 2 compliance. We do not store banking credentials. All connections are handled through secure third-party providers with read-only access.

10. Cookies and Tracking Technologies

We use cookies to:

Maintain sessions
Analyze behavior
Improve user experience

Users may manage cookie preferences through browser settings.

11. Third-Party Services

Treedy integrates with third-party providers. We are not responsible for their privacy practices.

12. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Policy periodically. Continued use of the Service constitutes acceptance of updates.

14. Contact Information

For privacy-related requests:

Email: hello@treedy.life

15. California "Shine the Light" Notice

Treedy does not share personal information with third parties for their direct marketing purposes.

16. Notice at Collection (California)

We collect: Identifiers, Financial data, Internet activity, and Inferences.

We use this data for business and operational purposes. We do not sell personal information.

17. Anti-Money Laundering (AML) and Know Your Customer (KYC)

To comply with applicable laws, Treedy may:

Verify user identity
Monitor transactions
Report suspicious activity to authorities
Restrict or terminate accounts if required

Failure to provide required information may result in denial of service.

18. Limitation of Liability (Privacy-Related)

To the fullest extent permitted by law:

Treedy shall not be liable for indirect, incidental, or consequential damages arising from unauthorized access
Users acknowledge that no system is completely secure
Use of the Service is at the user's own risk