Privacy Policy

Portage — personal finance application. Last updated: August 26, 2026.

What this application is

Portage is a personal budgeting application operated by an individual developer for personal and household use. It is not offered as a commercial service and has no third-party users.

Data collected

The application stores financial transaction data (dates, amounts, merchant names, account references) belonging to the account owner, imported via bank alert emails and via Plaid, a regulated financial data network, when the account owner connects a bank account through Plaid Link. Bank login credentials are entered only with Plaid and are never seen or stored by this application.

How data is used

Data is used solely to display the account owner's own finances back to them: transaction categorization, budgeting, and cash-flow forecasting. Data is never sold, shared, rented, or disclosed to any third party, and is not used for advertising, profiling, or any purpose beyond the application's function.

Security

All traffic is encrypted in transit with TLS. Bank access tokens are encrypted at rest with AES-256-GCM, with encryption keys stored separately from the database. Access to the application requires multi-factor authentication. The database enforces row-level security.

Retention and deletion

Data is retained while the application is in active use. Disconnecting a bank inside the application immediately revokes the connection with Plaid. Any or all stored data can be deleted on request by the account owner at any time, including full account deletion. This policy is reviewed when the application materially changes.

Consent

Bank connections are established only through Plaid Link, which presents Plaid's own consent flow before any data is shared. The account owner may revoke consent at any time by disconnecting the bank or via my.plaid.com.

Contact

Privacy and security contact: Matt Topic — [email protected]