Privacy Policy
Effective February 9, 2026. Withdraw Guard is a lifestyle banking app — locks, bill locks, streaks and a city map. This policy explains, in plain English, what we collect (including the address you save for the Map), why we collect it, and every way you can turn it off or take it back.
- We do not sell your personal information. Not for money, not for barter.
- We collect only what we need to run a savings account: your name, email, password (hashed), and the bank details our regulated bank partner requires by law.
- Your money sits in FDIC-backed custodian accounts at our bank partner — not on our servers.
- You can export your data or delete your account any time by emailing support@withdrawguard.com. We answer within 7 days.
1. Who we are
"Withdraw Guard," "we," "our," and "us" refer to the operators of the Withdraw Guard app and website. We are a US-based fintech that helps people save money by adding intentional friction to withdrawals.
Withdraw Guard is not a bank. Deposits are held in FDIC-backed custodian accounts through our regulated bank partner. When you deposit or withdraw, we are acting as your instruction-passer to that bank — the money never sits on our servers.
2. What we collect and why
3. How we use your information
- To run the account you asked us to run — moving money, sending you statements, honoring cooling-off periods.
- To comply with US financial regulations (KYC, AML, tax reporting).
- To protect you and other users from fraud, unauthorized access, and abuse.
- To send you transactional email (receipts, security alerts, statements). We do not send promotional email without your explicit opt-in.
- To improve the product — but only in aggregated, deidentified form. We do not train AI on your personal data.
We will never use your data to underwrite loans, sell insurance, profile you for advertisers, or run credit checks that you did not explicitly request.
4. Third parties we share with
We only share data with vendors who need it to run the service. Each of these has a signed data-protection agreement that requires them to protect your data at least as strictly as we do.
Selling data: We do not sell your personal information, and we have not in the last 12 months. We will not start.
5. How long we keep it
- Account records — while your account is open, plus 7 years after closure (required by US federal financial recordkeeping law).
- Transaction history — 7 years, same reason.
- Uploaded verification documents — 90 days after the verification decision.
- Support tickets — 24 months after the last reply.
- Server logs — 30 days.
6. Your rights
No matter where you live, you can:
- See a copy of the personal data we hold on you.
- Correct anything that's wrong.
- Download your statements and tax documents as CSV, any time, from inside the app.
- Delete your account. We will close the account and delete data that isn't required by law to keep (see §5). Legally-required records stay locked and access-restricted until their retention period ends.
- Turn off marketing email — the unsubscribe link is in every message. Transactional email (receipts, security alerts) can't be turned off while your account is active.
To exercise any of these rights, email support@withdrawguard.com. We respond within 7 days and complete the request within 30 days, or 45 days for complex cases (California/GDPR limits).
California residents (CCPA/CPRA)
You have the additional right to know exactly which categories of personal information we've collected in the past 12 months, and to direct us not to sell or share your data. We do not sell or share for cross-context advertising. Contact us at the email above to exercise any CCPA right; we will not discriminate against you for doing so.
EU / UK residents (GDPR / UK-GDPR)
Our legal basis for processing is (a) performance of the account contract you signed up for, (b) compliance with US financial legal obligations, and (c) our legitimate interest in preventing fraud. You have the right to lodge a complaint with your local Data Protection Authority if you believe we've mishandled your data. We do not currently offer a service tailored to EU/UK residents; if you signed up from these regions, contact us and we will delete your account and any associated personal data.
7. How we protect it
- Passwords are hashed with bcrypt — we never see or store your actual password.
- Data in transit is protected with TLS 1.2+; data at rest is encrypted on our hosting provider.
- Two-factor authentication is available on every account (Profile → Security).
- Destructive administrative actions require a separate admin PIN and are audit-logged.
- We do not store full card numbers, full SSNs (they pass through to the bank partner), or biometric data.
No online service is 100% secure. If we ever detect unauthorized access to your data, we will notify you within 72 hours of confirming the incident, per US state breach-notification laws.
8. Children
Withdraw Guard is not for children under 18. We do not knowingly collect data from anyone under 18. If we learn we've collected data from a minor, we delete it immediately. If you are a parent and believe your child has created an account, email us at support@withdrawguard.com.
9. International transfers
Withdraw Guard is operated from the United States. If you sign up from outside the US, your data will be transferred to and processed in the US, which may have different data-protection rules than your home country. By signing up you consent to this transfer.
10. Changes to this policy
If we materially change this policy, we will email every active user at least 30 days before the change takes effect. Minor wording, formatting, or typo fixes are made silently — the "effective" date at the top always reflects the latest edit.
11. How to reach us
The fastest way to reach a real human is email:
support@withdrawguard.comPostal mail: available on request via the email above (we do not publish the address to reduce spam).