Privacy Policy
Effective May 4, 2026. This policy explains how TaxFlow collects, uses, shares, and protects information when you use our app and website.
What We Collect
Account information such as your phone number, profile details, notification settings, and authentication status.
Tax and expense information you add or review in the app, including categories, notes, manual income or expense entries, receipt images, exports, and accountant sharing choices.
Financial account information from Plaid when you choose to connect an account, including account metadata and transaction history needed to help identify potential write-offs.
Subscription and app usage information from Apple, StoreKit, and Superwall, including purchase status, trial status, device/app diagnostics, and paywall events.
Technical information needed to secure and operate the app, such as Firebase authentication records, app check signals, push notification tokens, logs, crash diagnostics, and device metadata.
Plaid and Connected Accounts
TaxFlow uses Plaid to let you securely connect financial accounts. Plaid may collect credentials, account identifiers, balances, account details, and transaction data depending on the institution and permissions you approve in Plaid Link.
We use Plaid data to show connected accounts, import transactions, help you classify business expenses, remove transfers from tax totals where possible, and prepare records for review or export.
You can disconnect a connected account in the app. You can also manage Plaid connections and data through Plaid where available.
Biometric Lock
If you enable Face ID, Touch ID, or another biometric lock, authentication is handled by Apple's LocalAuthentication framework on your device.
TaxFlow does not receive, store, or process biometric templates, face scans, fingerprints, or raw biometric identifiers. We only receive whether the device authentication succeeded.
How We Use Information
We use information to authenticate you, operate TaxFlow, connect accounts, review potential deductions, send reminders you enable, create exports, support accountant access, process subscriptions, prevent abuse, debug issues, and improve reliability.
TaxFlow helps organize tax records, but it does not replace tax, legal, or accounting advice. You should review classifications and consult a qualified professional for advice specific to your situation.
Processors and Subprocessors
We use Firebase and Google Cloud for authentication, database, cloud functions, storage, push notifications, App Check, and infrastructure.
We use Plaid for bank linking and financial account data access.
We use Apple App Store, StoreKit, and TestFlight for app distribution, in-app purchases, subscriptions, and related purchase records.
We use Superwall for paywall presentation, subscription orchestration, and purchase state handling.
We may use HubSpot or Breadcounter for optional CPA scheduling flows you choose to open.
We use Vercel or similar hosting providers for this website and related public web infrastructure.
Sharing
We do not sell your personal information. We share information with service providers only as needed to run TaxFlow, comply with law, protect users and the service, or complete actions you request.
If you invite or grant access to an accountant, CPA, or advisor, we share the tax and account records you choose to make available through that feature.
Security
We use TLS for data in transit. Data is stored using managed cloud services with access controls and encryption at rest. Plaid access tokens are stored server-side and protected separately from the mobile app.
No system is perfect, so we also limit access, monitor for abuse, and recommend keeping your device, Apple ID, and TaxFlow account protected.
Retention and Deletion
We keep information while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, protect the service, and maintain backups.
You can request account deletion from inside the app. Deletion is designed to remove your TaxFlow account data, disconnect Plaid items, remove stored files where applicable, and revoke accountant access, subject to limited legal, security, and backup retention.
You can also contact us at taxflowjack@gmail.com for deletion or privacy requests if you cannot access the app.
Your Choices
You can manage notification permissions in iOS Settings and inside TaxFlow where settings are available.
You can disable biometric lock in the app or through your device settings.
You can manage subscriptions through your Apple ID App Store subscription settings.
You can contact us at taxflowjack@gmail.com to request access, correction, deletion, or other privacy help.
Children
TaxFlow is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
Changes
We may update this policy as TaxFlow changes. If changes are material, we will update the effective date and provide notice where required.
Contact
For privacy requests or questions, contact taxflowjack@gmail.com.