Legal

Privacy Policy

Effective February 9, 2026. Withdraw Guard is a lifestyle banking app — locks, bill locks, streaks and a city map. This policy explains, in plain English, what we collect (including the address you save for the Map), why we collect it, and every way you can turn it off or take it back.

The 60-second version
  • We do not sell your personal information. Not for money, not for barter.
  • We collect only what we need to run a savings account: your name, email, password (hashed), and the bank details our regulated bank partner requires by law.
  • Your money sits in FDIC-backed custodian accounts at our bank partner — not on our servers.
  • You can export your data or delete your account any time by emailing support@withdrawguard.com. We answer within 7 days.

1. Who we are

"Withdraw Guard," "we," "our," and "us" refer to the operators of the Withdraw Guard app and website. We are a US-based fintech that helps people save money by adding intentional friction to withdrawals.

Withdraw Guard is not a bank. Deposits are held in FDIC-backed custodian accounts through our regulated bank partner. When you deposit or withdraw, we are acting as your instruction-passer to that bank — the money never sits on our servers.

2. What we collect and why

Account basics
Name, email address, hashed password (bcrypt), date of birth, and — if you enable it — a 2-factor authentication secret. Used to create your account, sign you in, and verify you are old enough to open a US financial account.
Financial identity
For US law compliance (Bank Secrecy Act and Know-Your-Customer rules), our bank partner requires legal name, address, date of birth, and Social Security Number. We collect these on the bank partner's behalf and pass them straight through. We never sell, display, or use this data for advertising.
Money movement
Deposits, withdrawals, vault transfers, budget categories, and scheduled auto-commitments. Used to run the product you paid for and to generate your statements and tax documents.
Uploaded documents
If you use the Emergency Job Loss Vault, you upload proof of unemployment. We send these documents to a third-party AI verification service (see §4) and delete the raw file from our servers within 90 days of a successful or failed verification.
Support
When you email us or submit a ticket, we keep the message so we can help you. We delete support tickets 24 months after the last reply.
Map address
The street address you enter on the Map page, its coordinates, and the city/state we resolve from it. Used only to centre your map and find nearby places; sent to OpenStreetMap's Nominatim geocoder without your name or account details. Delete it any time with "Forget my address" on the Map.
Life-choice quiz
Your answers to the optional Level-Up quiz (income, housing, transport, goals) and the advice generated from them by our AI provider. Used only to personalise your suggestions; never shared with advertisers or the bank partner.
Device & log data
IP address, browser/device type, page timing, and errors. Used to fight fraud, debug outages, and stop abuse. Kept 30 days.
Cookies
We use a first-party cookie (or localStorage key) to keep you signed in. We do not run advertising, analytics-based retargeting, or "share this token with everyone" trackers.

3. How we use your information

  • To run the account you asked us to run — moving money, sending you statements, honoring cooling-off periods.
  • To comply with US financial regulations (KYC, AML, tax reporting).
  • To protect you and other users from fraud, unauthorized access, and abuse.
  • To send you transactional email (receipts, security alerts, statements). We do not send promotional email without your explicit opt-in.
  • To improve the product — but only in aggregated, deidentified form. We do not train AI on your personal data.

We will never use your data to underwrite loans, sell insurance, profile you for advertisers, or run credit checks that you did not explicitly request.

4. Third parties we share with

We only share data with vendors who need it to run the service. Each of these has a signed data-protection agreement that requires them to protect your data at least as strictly as we do.

Our bank partner
A US-regulated, FDIC-member bank. Holds all customer funds in custodian accounts, issues debit cards, and executes ACH transfers. Receives your legal identity + financial account details.
Stripe & PayPal
Process one-time lifetime-access payments. We do not store your full card number — Stripe and PayPal do, under PCI-DSS. Receives your name, email, and billing amount.
Resend
Sends transactional email (receipts, statements, security alerts). Receives the email address and message body only.
Anthropic (Claude)
Reviews unemployment-verification documents you upload to the Job Loss Vault. Anthropic does not train on customer data by policy and deletes inputs within 30 days.
Hosting provider
Runs our servers and database. Encrypted at rest and in transit.

Selling data: We do not sell your personal information, and we have not in the last 12 months. We will not start.

5. How long we keep it

  • Account records — while your account is open, plus 7 years after closure (required by US federal financial recordkeeping law).
  • Transaction history — 7 years, same reason.
  • Uploaded verification documents — 90 days after the verification decision.
  • Support tickets — 24 months after the last reply.
  • Server logs — 30 days.

6. Your rights

No matter where you live, you can:

  • See a copy of the personal data we hold on you.
  • Correct anything that's wrong.
  • Download your statements and tax documents as CSV, any time, from inside the app.
  • Delete your account. We will close the account and delete data that isn't required by law to keep (see §5). Legally-required records stay locked and access-restricted until their retention period ends.
  • Turn off marketing email — the unsubscribe link is in every message. Transactional email (receipts, security alerts) can't be turned off while your account is active.

To exercise any of these rights, email support@withdrawguard.com. We respond within 7 days and complete the request within 30 days, or 45 days for complex cases (California/GDPR limits).

California residents (CCPA/CPRA)

You have the additional right to know exactly which categories of personal information we've collected in the past 12 months, and to direct us not to sell or share your data. We do not sell or share for cross-context advertising. Contact us at the email above to exercise any CCPA right; we will not discriminate against you for doing so.

EU / UK residents (GDPR / UK-GDPR)

Our legal basis for processing is (a) performance of the account contract you signed up for, (b) compliance with US financial legal obligations, and (c) our legitimate interest in preventing fraud. You have the right to lodge a complaint with your local Data Protection Authority if you believe we've mishandled your data. We do not currently offer a service tailored to EU/UK residents; if you signed up from these regions, contact us and we will delete your account and any associated personal data.

7. How we protect it

  • Passwords are hashed with bcrypt — we never see or store your actual password.
  • Data in transit is protected with TLS 1.2+; data at rest is encrypted on our hosting provider.
  • Two-factor authentication is available on every account (Profile → Security).
  • Destructive administrative actions require a separate admin PIN and are audit-logged.
  • We do not store full card numbers, full SSNs (they pass through to the bank partner), or biometric data.

No online service is 100% secure. If we ever detect unauthorized access to your data, we will notify you within 72 hours of confirming the incident, per US state breach-notification laws.

8. Children

Withdraw Guard is not for children under 18. We do not knowingly collect data from anyone under 18. If we learn we've collected data from a minor, we delete it immediately. If you are a parent and believe your child has created an account, email us at support@withdrawguard.com.

9. International transfers

Withdraw Guard is operated from the United States. If you sign up from outside the US, your data will be transferred to and processed in the US, which may have different data-protection rules than your home country. By signing up you consent to this transfer.

10. Changes to this policy

If we materially change this policy, we will email every active user at least 30 days before the change takes effect. Minor wording, formatting, or typo fixes are made silently — the "effective" date at the top always reflects the latest edit.

11. How to reach us

The fastest way to reach a real human is email:

support@withdrawguard.com

Postal mail: available on request via the email above (we do not publish the address to reduce spam).

Withdraw Guard
Terms
© Withdraw Guard · Updated February 9, 2026