Privacy policy
What Diego keeps, and what it does with it.
Diego is a money app. You connect your bank accounts and it reads them. This page says what that means for your information, in plain terms.
Who we are
Diego Money ("Diego", "we") is a one-person company run by Diogo Souza in Toronto, Ontario, Canada. Diogo is responsible for the personal information Diego holds and is its privacy officer. Questions, requests and complaints go to [email protected].
This policy covers the Diego app on iPhone and the web, and this website with its waitlist. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.
The app is not yet publicly available. Before it is, this page will name the AI model provider and the host for the app's servers, with where each one stores data.
This policy is published in English and in French. Both versions are equally authoritative.
Who Diego is for
Diego is for people 18 and over. We do not knowingly collect information from anyone younger. If you think someone under 18 has given us their information, email [email protected] and we will delete it.
What we collect
Your account
- Your email address.
- Your password, stored only as a scrypt hash. We cannot read it.
- Your sign-ins: when each session started and was last used, and the device description your browser or phone sends.
Your bank data, through Plaid
- The accounts you choose to connect: institution, account name, type and the last digits of the number.
- Balances, available amounts and credit limits.
- Transactions: date, amount, and the description your bank gives, which can include a merchant name or an Interac e-Transfer memo.
- Investment holdings and investment transactions, where your institution offers them.
We never see or store your bank username or password. You give those to Plaid, not to us. Diego's access is read-only: it cannot move money, pay bills or change your accounts.
What you add
Categories, rules, budgets, goals, notes, receipts or files you attach to a transaction, and anything you type to Diego in the app's chat.
The waitlist
If you join the waitlist on this site, we store your email address, the country your connection comes from, the page that sent you, and your browser's user agent. We use it only to tell you when Diego opens.
What this site does not do
This site sets no cookies, runs no analytics or advertising scripts, and loads nothing from other companies' servers. The app uses a sign-in token to keep you signed in, and nothing else of that kind.
How we use it
- To show you your accounts, spending, budgets and goals.
- To sort your transactions into categories.
- To answer your questions in the chat, if you use it.
- To keep your account secure and to fix problems.
- To email you about your account, or about launch if you joined the waitlist.
We do not sell your information. We do not rent it, trade it, or use it to show you ads. Diego is paid for by the people who use it.
Plaid
Diego connects to your bank through Plaid Inc. When you link an account, Plaid collects your bank information under its own terms and passes the data above to Diego. Before Plaid opens, the app asks for your consent and records which version of this policy you agreed to and when. Read Plaid's End User Privacy Policy for how Plaid handles your information.
When you disconnect a bank or delete your account, we tell Plaid to revoke Diego's access to that connection.
AI models
Diego sends some of your data to a large language model from an outside provider in two places. Both are optional, and nothing is sent for them unless you use them. The provider processes it to answer the request.
- The chat. When you ask Diego a question, we send your question, the conversation so far, and the parts of your data needed to answer it. That can include:
- totals by category and money in and out over a period;
- individual charges, each with its date, amount and description;
- your goals, with their names, targets, dates and progress;
- the names of your accounts and the money available in them;
- preferences you asked Diego to remember, such as the name you want to be called.
- The lesson tutor. When you ask Diego about a lesson, we send what you type, the conversation so far, the lesson step you are on and the answer you picked. No bank data is sent.
Sorting your transactions into categories does not use an outside model.
We only send your information to an AI provider whose terms for its API forbid using it to train their models. Before the app opens to the public, we will name that provider here; see Who we are.
Where it is stored
Some of these providers process data outside Canada, including in the United States. Information held there is subject to the laws of that country, and its authorities may be able to access it. We assess this before choosing a provider.
How we protect it
- The key Plaid issues for your bank connection, and each account's name and the last digits of its number, are encrypted with AES-256-GCM before they are stored.
- The database limits every request to the signed-in person's own rows, so one account cannot read another's.
- Passwords are hashed, sign-in is rate limited, and deleting your account asks for your password again.
- This site is served over HTTPS. The app's servers are not hosted yet; they will not hold your data until they also use HTTPS and encrypted storage.
- One person, Diogo, has access to production systems, with two-factor authentication on every administrative account.
No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada as soon as we can. Where Quebec law applies and an incident creates a risk of serious injury, we will promptly tell Quebec's Commission d'accès à l'information and the people whose information is involved. We keep a record of every incident, whether or not it had to be reported.
How long we keep it
- Your account and everything in it stay until you delete them. In the iPhone app, Profile, then Delete account, removes the account from our database straight away. Or email [email protected] from the address on your account and we delete it within 30 days. Either way, every bank connection is revoked at Plaid first, and everything goes: accounts, transactions, categories, budgets, goals, chat, attached files and your votes on the shared merchant list.
- A disconnected bank's history stays until you delete it, from that connection in the app, or delete your account. Disconnecting alone keeps it, so your past budgets still add up.
- Sign-in records: each sign-in stops working after 30 days. The record of when and on what device stays with your account and is deleted with it.
- The waitlist: your email stays until you ask us to remove it or the waitlist closes, whichever comes first.
- Backups and server logs are kept no longer than 35 days, so anything deleted leaves them within that time.
We do not delete accounts for being inactive. If you stop using Diego, your account stays until you delete it.
Your rights
You can ask to see the personal information we hold about you, have it corrected or deleted, or withdraw your consent, which may mean closing your account. In Quebec you can also ask for your information in a structured, commonly used format. We answer within 30 days.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d'accès à l'information.
If you live in the United States
Diego is run from Canada by Diogo Souza, and your information is handled as this page describes wherever you live. You have every right listed under Your rights: to see, correct and delete your information and to withdraw your consent, by emailing [email protected]. We will comply with the US federal and state privacy laws that apply to us.
Changes to this policy
When this policy changes, the date at the top changes with it. Before a material change takes effect, we email everyone with an account, and where the law requires it we ask for your consent again. If a change affects how we handle your bank data, the app also asks for your consent again before you link another account.
Contact
Diogo Souza, Founder and privacy officer
[email protected]