Privacy Policy
Effective September 25, 2026 · Version 2026-09-25
The Abundance App is operated by Molluso Holdings, LLC, doing business as MollusoAI (“we,” “us”). This notice describes the information handled by this application. Contact scott@molluso.ai with privacy questions or requests.
Information we collect
- Account information: your Google sign-in identifier, name, email and profile image, along with your household membership and authentication session.
- Financial information: the accounts, balances, transactions, card and debt details, bills, income, goals and settings you enter, import or authorize us to retrieve. Bank connections currently use BankSync and Plaid.
- Practice information: journal entries and progress saved in your browser. A private cloud copy is stored only when you choose the backup feature.
- Privacy and technical records: permission choices, policy version, deletion requests and operational information necessary for authentication, troubleshooting and security, such as request metadata handled by hosting providers.
How we use information
We use this information to authenticate you, maintain your household plan, display financial records, calculate planning estimates, provide the features you request, and protect and support the service. The current application does not sell your financial information, use it for targeted advertising, or send your financial records or journals to an AI chatbot. Its learning guidance is authored content.
Bank connections and permission
You choose whether to permit bank-data processing and which accounts to authorize through the provider’s connection flow. Bank sign-in takes place through BankSync, Plaid or your bank; the app does not ask you to give us your banking password. Review Plaid’s privacy notice and the notices presented by BankSync and your bank. Their services have their own data practices.
You can withdraw the app’s bank-data permission above. This blocks new bank reads through your login. It does not automatically erase previously saved data, revoke the provider connection, or withdraw another household member’s separate authorization. Use the disconnection request option for provider cleanup. You may also manage supported connections through Plaid Portal or your bank.
Who can access information
Members of your household can access its shared financial records. Your private practice backup is scoped to your own account. We use Supabase for authentication and database storage, Vercel for hosting, Google for sign-in, and BankSync and Plaid for bank connectivity. These providers process information required for their roles. Authorized administrators may access information to operate the service, investigate issues or fulfill requests. We may disclose information where required by law or necessary to protect legal rights and security.
Storage and security
Managed application data is encrypted in transit and at rest by our hosting and database providers. Access controls restrict records by household or user. No security measure eliminates all risk. Authentication sessions and local practice entries are stored in your browser. Downloads are ordinary JSON files; keep them on storage you trust.
Retention and deletion
We retain active account and household records to provide the service until they are removed or a verified deletion request is fulfilled. The current service does not automatically purge records after a fixed inactivity period. You can immediately delete your active private cloud practice backup using the controls above.
Account deletion, shared household deletion and provider disconnection requests are recorded for manual review. We verify identity and authority, coordinate provider cleanup, and explain any information that must remain for another household member or a legal obligation. A request marked “received” is not a completed deletion. Contact us to follow up using its reference number.
Deleted active records may remain in restricted provider backups until those backups expire; we do not promise immediate removal from backup copies. Local journals, downloaded files and copies retained independently by your bank or other providers are not erased by deleting an app record. We retain minimal request and permission evidence as needed to process requests, resolve issues and meet applicable obligations.
Your choices and rights
You can review and edit household records in Money, download household data there, and download your cloud practice backup from Account. You can request access, correction, deletion or withdrawal of permission through the controls above or by emailing us. Applicable rights depend on where you live. We may ask for information needed to verify your request. We do not require bank passwords to process a privacy request.
Children and changes
This application is intended for adults and is not directed to children under 13. Contact us if a child has provided personal information. We will update this page when our practices change and request renewed permission when the bank-data permission version changes.