FutureFlow
Contact
Legal

Privacy Policy

Effective Date: July 17, 2026  |  Last Updated: July 17, 2026

We never sell your data
We never show you ads
Read-only bank access
You can delete everything anytime

NXT Financial Group LLC, doing business as FutureFlow ("FutureFlow," "we," "us," or "our") provides a personal-finance application and related website and services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the FutureFlow mobile apps (iOS and Android) and to joinfutureflow.com.

This policy is written to be consistent with the privacy disclosures we make on the Apple App Store (App Privacy) and in the Google Play Data safety section. If you use the Service, you agree to the practices described here and in our Terms of Service.

1. Who We Are

FutureFlow is a personal-finance operating system. We help you link your bank accounts (on a read-only basis), track transactions, set budgets and savings goals, detect recurring subscriptions, and receive optional AI-powered insights (see Section 3.5).

FutureFlow is not a bank, broker-dealer, money transmitter, lender, or registered investment adviser. We do not hold your money and cannot move funds on your behalf.

You can submit any privacy question or request through the contact channels above.

2. Our Privacy Commitments

  • We never sell your personal or financial data.
  • We never show you ads, and we do not share your data with advertising networks or data brokers.
  • Bank access is read-only. We can see your accounts and transactions to power the Service; we can never move money.
  • You can delete everything, anytime, directly from within the app.

3. Information We Collect

We collect only the data we need to provide the Service. We do not collect your Social Security number, date of birth, government ID, or the contents of your email inbox or your accounts on third-party messaging services.

3.1 Information you provide

  • Account information: your name, email address, and (if you add one) phone number. Authentication is handled through Firebase Authentication, and you may sign in with Google, Sign in with Apple, or a passkey. We store an authentication identifier for your account; we do not store your Google or Apple password.
  • Support communications: messages, feedback, and attachments you send us.
  • AI assistant conversations: if you enable the optional AI assistant, the messages you type and the resulting conversation history. See Section 3.5.

3.2 Financial information (via Plaid — read-only)

When you connect a financial institution, you do so through Plaid Inc., our bank-connectivity provider. You enter your banking credentials directly with Plaid — FutureFlow never sees or stores your banking username or password. We store only an encrypted access token that lets us retrieve your data on a read-only basis. Through Plaid we receive:

  • Account information (account name, account "mask"/last four digits, account type and subtype, and the connected institution's name);
  • Account balances;
  • Transaction history (amount, date, merchant/description, and category); and
  • Recurring transaction streams, which we use to detect subscriptions.

We do not use Plaid to initiate payments, transfers, or any movement of funds. Your relationship with Plaid is also governed by Plaid's End User Privacy Policy.

3.3 Subscription and purchase information

Paid FutureFlow subscriptions are sold and billed through the Apple App Store or Google Play, and managed with RevenueCat, Inc. We receive your subscription and entitlement status (for example, which plan you have and whether it is active). Your payment-card details are handled directly by Apple or Google — FutureFlow does not receive or store your full payment-card number.

3.4 Information collected automatically

  • Device and app information: device model, operating system version, app version, and language settings.
  • Usage data: in-app interactions and feature usage, used to operate and improve the Service.
  • Approximate location: general location derived from your IP address (for security and fraud prevention). We do not collect precise GPS location.
  • Diagnostics: crash reports and performance logs.

3.5 AI features and Google Cloud Vertex AI

FutureFlow offers optional AI-powered features: an in-app chat assistant, AI-generated spending insights, and automatic transaction categorization. These features are powered by Gemini models that we host on Google Cloud Vertex AI.

These features are off until you turn them on. Before any of your data is sent to Vertex AI, we show you an in-app disclosure describing what is shared and with whom, and we ask for your explicit agreement. The AI features do not operate until you agree, and you can turn them off at any time in Settings. If you do not agree, the rest of the app continues to work normally.

What we send to Vertex AI. When you use these features, we send only the data needed to generate a response, which may include: your first name; your subscription plan; your income, spending, and net totals; your net worth and a breakdown by account type; your budgets, savings goals, and subscriptions; your individual transactions (date, merchant, category, and amount); the messages you type into the chat assistant and the recent conversation; and, for categorization, merchant names and category hints.

What we do NOT send. We do not send your account numbers, your bank or institution names, your banking access credentials, your email address, or your last name to Vertex AI.

How Vertex AI protects your data. Google Cloud Vertex AI processes this data as our service provider (processor) under Google Cloud's enterprise terms and data processing terms, which provide protections equivalent to those described in this Privacy Policy. Under those terms, Google does not use your data to train its AI models or for any purpose other than providing the service to us. Data sent to Vertex AI for these features is processed in the United States.

Your control. You can withdraw your consent to AI features at any time in Settings. Withdrawing consent stops any further sharing of your data with Vertex AI. If we materially change what we share or how these features work, we will ask for your agreement again.

4. How We Use Your Information

We use the information described above to:

  • Provide, operate, and maintain the Service;
  • Link your accounts and display your balances, transactions, budgets, goals, and detected subscriptions;
  • Generate personalized insights and assistant responses;
  • Provide optional AI features (chat assistant, insights, and transaction categorization) using Google Cloud Vertex AI, when you have enabled them;
  • Process and manage your subscription and billing status;
  • Protect against fraud, abuse, and unauthorized access, and to secure the Service;
  • Provide customer support and respond to your requests; and
  • Comply with our legal, tax, accounting, and regulatory obligations.

Purpose limitation. We use data only for the purposes described in this policy. We do not repurpose data we collected for one purpose for a materially different purpose without giving you notice and, where required, obtaining your consent.

5. How We Share Your Information

We share personal information only in the limited circumstances below, and never for money and never with advertisers or data brokers.

  • Service providers (processors) who help us run the Service, each acting under contract and only on our instructions. These include:
    • Plaid Inc. — bank connectivity (read-only account and transaction data);
    • Google LLC / Firebase — authentication and cloud infrastructure;
    • Apple Inc. — Sign in with Apple and App Store subscription billing;
    • RevenueCat, Inc. — subscription and entitlement management;
    • Google Cloud (Vertex AI) — AI processing for the optional chat assistant, insights, and transaction-categorization features (United States); Google does not use your data to train its models;
    • Google Cloud Platform — hosting and data storage in the United States.
  • Legal and safety — when required by law, subpoena, or legal process, or to protect the rights, property, or safety of FutureFlow, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with notice to you as required by law.

Equal protection requirement. We require every third party with whom we share user data to provide the same or an equal level of protection of that data as described in this Privacy Policy and as required by applicable app-store guidelines. We do not authorize them to use your data for their own unrelated purposes.

No sale of data. We do not sell your personal or sensitive information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws.

6. Third-Party Services

The Service relies on and links to third-party services (including Plaid, Apple, and Google). Your use of those services is also governed by their own privacy policies and terms, which we encourage you to review. We are not responsible for the privacy practices of third parties except with respect to the data we share with them as processors under contract.

7. Data Retention and Deletion

  • We keep your personal information for as long as your account is active and as needed to provide the Service.
  • When you delete your account, we permanently delete or irreversibly anonymize your personal data within 90 days, including your profile, connected-account tokens, and stored transaction data. Deleting your account also deletes your authentication record.
  • Legal-retention exception. We may retain a limited subset of data for longer where we are legally required or permitted to do so — for example, to comply with tax, accounting, anti-fraud, or other legal obligations. Such data is retained for no longer than the applicable legal requirement (up to 7 years) and is not used for any other purpose. We will inform you of any such retention on request.

8. Your Choices and Rights

8.1 Delete your account (in-app and on the web)

  • In the app: open Settings → Delete account. This immediately begins deletion of your entire account and associated personal data (not just a temporary deactivation).
  • On the web: you may also request account and data deletion at joinfutureflow.com/delete-account or by emailing privacy@joinfutureflow.com.

8.2 Withdraw consent and disconnect data

  • Disconnect a bank at any time from within the app to stop further retrieval of that institution's data.
  • Revoke permissions (such as notifications) through your device settings.
  • Withdrawing consent or disconnecting an institution does not affect processing that already took place before you did so.

8.3 Access, correct, export, and opt out

You may request to access, correct, or export your personal data, and to opt out of non-essential communications. To exercise any right, use the in-app controls or contact privacy@joinfutureflow.com. We respond to verified requests within 30 days (extendable where the law allows). We will not discriminate against you for exercising your privacy rights.

9. Data Security

We protect your information using industry-standard safeguards, including:

  • Encryption in transit using modern TLS for data moving between your device, our servers, and our providers;
  • Encryption at rest for sensitive credentials, including your Plaid access tokens;
  • Access controls limiting employee and system access to personal data on a need-to-know basis; and
  • Strong authentication options, including multi-factor authentication and passkeys.

No method of transmission or storage is 100% secure, but we work continuously to protect your information and to review our practices.

10. Children's Privacy

The Service is intended only for users who are 18 years of age or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it promptly. If you believe a minor has provided us information, contact privacy@joinfutureflow.com.

11. U.S. State Privacy Rights

11.1 California (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know / access the categories and specific pieces of personal information we collect, use, and disclose;
  • Delete personal information we hold about you;
  • Correct inaccurate personal information;
  • Opt out of the sale or sharing of personal information — note that we do not sell or share your personal information; and
  • Limit the use of sensitive personal information.

We will not discriminate against you for exercising these rights. You may use an authorized agent to submit a request on your behalf.

11.2 Other U.S. states

If you reside in another U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, or others), you may have similar rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising, sale, and certain profiling. We honor these rights to the extent they apply. Contact privacy@joinfutureflow.com to exercise them.

12. International Users and Data Location

FutureFlow is operated from the United States, and your information is processed and stored in the United States. The Service is currently offered only to residents of the United States and Canada. If you access the Service from outside these regions, you do so on your own initiative and are responsible for compliance with local law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect and will update the "Last Updated" date above. Your continued use of the Service after an update takes effect means you accept the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer: