Privacy Policy

1. About Finzest

At Alpha Noodle (dba Finzest), we care about your personal information. This Privacy Policy explains how Alpha Noodle, LLC (“Alpha Noodle”, “Finzest”, “we”, or “us”) collects, uses, and shares your personal information collected on finzest.app (the “Site”) and mobile applications, and related services (collectively, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

This Privacy Policy applies to:

• Alpha Noodle LLC and its affiliates;
• our online properties, including the finzest.app website, our apps, and our social media pages; and
• our products, services, and sales or marketing activities, whether offered on the Site or offline.

Collectively, the properties, products, and services above are our “Services.”

This Policy does not apply to third-party websites, apps, or services (like Stripe) that may link to or from the Services. Review those parties’ own privacy policies to learn about their practices.

2. Your agreement

This Privacy Policy is subject to our Terms of Service at finzest.app/legal/terms. Each time you access, register for, or use the Services, you signify that you have read, understand, and agree to this Policy and those Terms, unless otherwise prohibited by law.

You acknowledge that our Terms of Service contain a binding arbitration provision and a class-action waiver that apply to certain disputes, including disputes relating to this Policy.

3. Information we collect

Account information

When you sign up for the Services, you become a “Member” and our authentication provider (Firebase Authentication) provides us with your email address, display name, and a user identifier, depending on how you sign in. If you sign up with a password, that password is set with and held by Firebase; it is never visible to us and we do not store it.

Onboarding and profile

Answers you give during onboarding, such as your goals and self-rated experience.

Learning activity

Your progress, including lessons completed, answers, XP points, streaks, gems, and coins.

Content you upload

Financial information you choose to provide for tools such as the budget builder, for example, a bank-statement CSV.

Payment information

Payments are handled by our processor Stripe, and, if you subscribe through a mobile app store, Apple or Google. We receive limited details such as subscription status and the last four digits of a card; we do not store full card numbers.

Usage and device data

When you interact with the Services, we and providers working on our behalf may collect your IP address, device and browser identifiers, details about your web browser and operating system, the pages and features you use, referral URLs, access times, and web traffic logs. We use this information to operate, secure, and improve the Services and to understand how they are used.

4. Cookies and similar technologies

Cookies are small data files placed on your device when you visit a website. Similar technologies, such as browser local storage and pixels, work in comparable ways. Session cookies last until you close your browser; persistent cookies and local storage remain between visits so returning tasks like staying signed in are easier.

Cookies set by Finzest are “first-party”; cookies set by others are “third-party.” The first time you visit, you can manage your cookie choices, and you can change them at any time using the “Your Privacy Choices” control found in our site footer.

The following describes the specific types of first- and third-party cookies served through our Services, the purposes they perform, and, if applicable, your ability to opt out of such use.

Essential (always on)

These cookies are essential for operation of the Services. They are used to sign you in, keep your session secure, help with site security, and prevent fraud. Certain Services would not function correctly without them.

Who serves these cookies?

• Firebase Authentication (Google) — a secure, HTTP-only session cookie that keeps you signed in.
• Browser local storage — remembers your cookie choices and your on-device learning progress.

How to refuse: because these cookies are strictly necessary to deliver the Service to you, you cannot refuse them.

Performance

These cookies collect information about how users interact with the site for the purpose of measuring site performance. This information is aggregated and does not directly tie to or identify you.

Who serves these cookies? We currently do not serve any Performance cookies, and Finzest runs no analytics or site-performance tooling of any kind.

How to refuse: there is nothing here to refuse, because we serve no Performance cookies. If we add any, we will update this Policy and offer a choice before they run.

Functional

These cookies help provide more personalized features by remembering choices you make. Disabling them may affect the availability and functionality of these features.

Who serves these cookies? We currently do not serve any Functional cookies. The preference-style data we keep, meaning your cookie choice and your learning progress, lives in browser local storage on your own device and is listed under Essential above.

How to refuse: as with Performance, there is nothing here to refuse, because we serve no Functional cookies. If we add any, we will update this Policy and offer a choice before they run.

Targeted Advertising

These cookies and pixels are used by us and third-party providers to serve and measure advertisements for the Site. They help attribute your visit to the site to the specific advertisement you responded to that brought you to the site.

Who serves these cookies? Meta Platforms, Inc. (“Meta”) — the Meta Pixel (facebook.com/business/tools/meta-pixel), used to track conversions and Site visits from our advertisements. It sets two cookies, _fbp and _fbc, and it is on by default: it runs unless and until you turn it off. We serve no Google Advertising tag and no other advertising pixel.

How to refuse: open “Manage Settings” in our cookie banner, or “Your Privacy Choices” in our site footer, switch Targeted Advertising off, and choose “Save settings.” You can do this the first time you visit or at any point afterwards. That stops the pixel loading and deletes any _fbp and _fbc cookies already set. If you refuse, we will be unable to connect your Site visit to the ads you saw. This limits our ability to measure our marketing performance and may result in you seeing repetitive or generic ads for our services. You can also manage advertising preferences in your own Meta account settings.

Optional analytics

We do not currently run third-party analytics cookies on the Service — no Google Analytics, no Vercel Analytics or Speed Insights, and no third-party product analytics. If we enable optional analytics in the future, we will only use them in line with the cookie choice you make in the banner, and we will update this Policy first.

5. Advertising measurement

We measure how well our advertising works using Meta’s Conversions API. This sends Meta a limited set of event data from our servers — a hashed (obscured) version of your email address, a hashed internal account identifier, and whether you registered, started a trial, or paid, along with the amount paid — so we can attribute a sign-up to the ad that led to it. Where you provided them at checkout, it can also include a hashed version of your name, phone number, and billing town, region, postcode and country. We include your IP address and browser user-agent so Meta can match the event to a person who saw an ad.

We also run the Meta Pixel in your browser. It is on by default and runs unless you turn Targeted Advertising off, as described above. While it is on, the Conversions API events above also carry the _fbp and _fbc cookie values it sets. We run no other third-party advertising cookies. Information shared with Meta is handled under Meta’s privacy policy (facebook.com/privacy/policy). Declining advertising cookies stops the pixel; to be excluded from the server-to-server measurement as well, contact hello@alphanoodle.co.

6. Email tracking

Our email provider (Twilio SendGrid) may include small tracking pixels and tagged links in the emails we send, which tell us whether an email was opened or a link was clicked. We use this information only to understand and improve our communications. You can opt out of marketing emails at any time using the unsubscribe link in any such email.

7. How we use your information

We use your information to:

• provide, maintain, and personalize the Service and your learning path, and maintain your progress across devices;
• run the Apply features that act on data you provide;
• process subscriptions and payments;
• communicate with you about your account, including streak alerts, transactional receipts and notices, customer support communications, and product updates;
• send marketing communications, measure the effectiveness of our advertising, and run promotional campaigns;
• improve, secure, and troubleshoot the Service; and
• comply with legal obligations.

8. Financial data and AI processing

To provide Apply features such as the budget builder, content you upload (for example, a bank-statement CSV) is processed by our AI provider, Anthropic, to generate your results. We send only what is needed to produce the output you requested, and we do not sell this data.

We recommend sharing only the data you are comfortable providing, for instance, you may redact account numbers before uploading.

9. How we share information

Alpha Noodle does not sell your personal data in the traditional sense. However, we may share information with service providers that help us run Finzest, only as needed to provide the Services on our behalf. Examples include:

We may also share information with authorities or others where required by law or to protect rights and safety, and with third parties in connection with a proposed or actual merger, acquisition, or sale of assets of our company, which may include a successor in interest and professionals that assist in such process.

We do not share your personal information with third parties for their own direct marketing. For how “sell” and “share” are defined under certain U.S. state privacy laws, and the choices you have, see “Your rights and choices” below.

10. Data retention and your account

We keep user information for as long as needed to provide the Service and for legitimate business or legal purposes. As a Member, you can access, correct, update, and (subject to certain exceptions) delete personal information you have provided by managing your account or by contacting us using the Contact information below.

We may verify your identity before responding, and we may have a lawful reason to decline or limit a request, which we will explain in our response. We may also not delete your information if permitted by applicable law in the jurisdiction in which you reside.

11. Your rights and choices

Depending on where you live and subject to certain exceptions, you may have some or all of the following rights:

• Right to Request Access. You have the right to confirm whether or not we are processing your Personal Information and to obtain a copy of such Personal Information. Depending on where you reside, you may also have the right to receive a list of specific third parties with whom we disclose Personal Information.
• Right to Request Data Portability. You have the right to transfer Personal Information that you previously provided to us to yourself or a third party in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another business without hindrance.
• Right to Know. You have the right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices. That information is disclosed in this Policy.
• Right to Request Correction. You have the right to request that we correct inaccurate Personal Information that we maintain about you.
• Right to Request Deletion. You have the right to request that we delete your Personal Information that we have collected from or about you. However, please note that we may not be able to delete your personal information while you have an active subscription, and that some laws provide exemptions from deletion. To have your information deleted, first cancel your subscription, then submit your request.
• Right to Opt-Out of the Sale of Personal Information, Targeted Advertising, and Profiling. The right to opt out of the sale of Personal Information, the right to opt out of the use of Personal Information for targeted advertising, and, in some jurisdictions, the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. While we do not sell Personal Information for monetary compensation, and we do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, we may “sell” personal information as defined under certain US state laws and we do engage in targeted advertising. You can exercise this right using the “Your Privacy Choices” control in our site footer, and, for our server-to-server advertising measurement, by contacting us.
• Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights.
• Email. You can opt out of marketing emails using the unsubscribe link in any marketing message. We may still send you non-marketing messages, such as security or transactional updates.

To exercise any of the above rights, or if you have questions, use the information in the Contact Us section below.

12. Access from outside the United States

If you access the Site or the Services from outside the United States, please be aware that your information may be collected, transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of information in the United States to be equivalent to that required in other jurisdictions. Our online privacy practices are governed by the laws of the United States, which may differ from privacy laws in your home country. By visiting the Site or using our Services, you understand that your information will be transferred, processed, used, disclosed, and stored in the United States and other jurisdictions as set forth in this Policy.

13. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

14. Children

Finzest is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us using the information under Contact Us below.

15. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice, and the “Last updated” date above will reflect the latest version.

16. Contact Us

Questions about privacy, or wish to exercise any of your privacy rights in Section 11 above? Contact us at hello@alphanoodle.co.