lemonope Privacy Policy

Effective date: October 25, 2026

This Privacy Policy explains how Lemonope Inc. ("lemonope", "we", "us" or "our") collects, uses, shares and protects personal information when you use the lemonope website, web app and any lemonope mobile apps (together, the "Service"), and the choices and rights you have.

In short: we use your information to run your budget for you. Your bank login goes to our bank-data partner, never to us. We do not sell your personal information and we do not use it for targeted advertising. You can download your data or delete your account at any time from Settings.

1. Scope of this policy and our role

This policy covers personal information that lemonope collects through the Service, including when you create an account, link a bank or card, use the app, contact us, or receive emails and notifications from us.

Lemonope Inc. decides why and how this information is processed, so we are responsible for it (sometimes called the "controller"). Other companies you deal with through lemonope, such as your bank, our bank-data partner or a card issuer whose site you visit, handle information under their own privacy policies, not this one. Questions about their handling should go to them.

This policy does not cover third-party websites or services that lemonope links to.

2. How lemonope uses your information together

lemonope works by bringing your financial information into one place. When you link an account, the balances and transactions we receive are used together with what you enter yourself (budgets, goals, categories, bills) to power every part of the app: your home screen, budgets, bill and subscription tracking, alerts and card suggestions. We only combine information inside your own lemonope account. We do not combine it with information about you bought from data brokers.

3. Personal information we collect

Information you give us

• Account details: your email address and password. Passwords are stored only as a one-way hash that we cannot read.
• Sign-in with Google or Facebook (if you choose it): your name, email address and an account ID from that provider. We never receive your Google or Facebook password.
• Profile details (all optional): name, photo, phone number, date of birth, street address, city, state, ZIP code, household size, marital status, housing type and monthly housing cost, occupation, employer, employment type, yearly household income range, and a credit score range you choose yourself.
• Income and pay schedule (optional): the monthly income, pay frequency and last payday you confirm in the Get started checklist.
• Security settings: if you turn on 2-step login, the secret for your authenticator app (stored encrypted) and your one-time backup codes (stored hashed).
• What you add to the app: categories, tags, rules, budgets, savings goals, bills and subscriptions, nicknames for your banks, accounts and cards, notes, and cards you enter yourself (such as a credit limit or balance).
• Receipts: photos or PDFs you upload. When you upload a photo, we remove hidden data such as GPS location before saving it.
• Statement uploads: bank or card statement files you upload (CSV, OFX/QFX/QBO or PDF) to import transactions into an account you add by hand. We read the file once and do not keep it; the transactions it contains are kept encrypted for up to 24 hours while you review them, then saved as your transactions (date, description, amount) or deleted if you cancel. You can undo an upload, which deletes the transactions it added.
• Messages to us: what you send when you contact support.

Information from third-party sources

• Your bank and card accounts, through our bank-data partner. When you link an account, our bank-data partner (currently Plaid Inc.; we may also use Teller) connects to your bank with your permission and sends us: the institution's name; your account names, types and last 4 digits; balances and, for credit cards, credit limits; and transactions (date, amount, merchant or description and the bank's category). We never receive or store your bank username or password. The partner gives us an access key for each connection, which we store encrypted.
• Google or Facebook, if you use them to sign in (see above).

Information created from your data

Our software works out things from your own data so the Service can help you: spending categories, recurring bills and subscriptions, price changes, an estimate of your monthly income and paydays, suggested budgets, and "approval odds" for credit cards. These are estimates calculated only from the data in your lemonope account. We do not pull your credit report or credit score from a credit bureau.

Information collected automatically

• Device and log information: IP address, browser and device type, operating system, language setting, pages you visit and the date and time of each request.
• Security records: sign-in attempts (successful and failed) with the email entered, IP address and time; devices you have chosen to trust; and one-time email codes (stored only as a hash).
• Push notifications: if you allow them, your browser or phone gives us a delivery address for your device.
• Clicks on card offers: when you tap "Apply" or "Check pre-approval", we may record which card you clicked and when.

Cookies and similar technologies

We use only the cookies needed to run the Service:

• a session cookie that keeps you signed in (it ends after a period of inactivity, or after up to 30 days if you choose "Remember this device");
• a security cookie that protects forms against forged requests (CSRF);
• a language cookie that remembers your language choice (up to 1 year);
• a trusted-device cookie that lets a device you chose to trust skip the emailed sign-in code (up to 30 days).

We do not use advertising cookies or third-party analytics cookies.

Biometric information

We do not collect biometric information. If you unlock your phone or browser with your face or fingerprint, that stays on your device and is never shared with us.

4. How we use personal information

We use personal information to:

• Provide the Service you asked for: show your accounts, balances and transactions, categorize spending, build budgets, track goals, find bills and subscriptions, store receipts and run the Get started checklist.
• Communicate with you: send the alerts and notices you ask for or need, by email, push notification or in the app, such as budget alerts, bill reminders, price-change alerts, sign-in codes, security alerts and notices about changes to our terms.
• Show credit card information and approval odds: approval odds are a rough label (Excellent, Good, Fair, Low or Not enough data) that we calculate from your own data, such as card balances and limits, fees, deposits, recently opened cards, the age of your accounts and the credit score range you entered.
• Verify your identity and keep accounts safe: sign-in protection, emailed codes for new devices, 2-step login, lockouts after failed attempts, and fraud and abuse prevention.
• Provide support and respond to your requests.
• Run, fix and improve the Service, including by looking at usage in aggregate.
• Comply with the law, respond to lawful requests, and establish or defend legal claims.
• Enforce our Terms of Service and other agreements.

Automated processing. Categorization, bill and subscription detection, income estimates, suggested budgets and approval odds are produced automatically by our software. They are estimates to help you, they do not decide anything with legal or similarly significant effects for you, and you can change or ignore them.

We do not use your transaction data to show you ads from other companies, and we do not let card issuers or advertisers see it.

5. How we share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.

We share personal information only in these situations:

• With service providers that run parts of lemonope for us, under contracts that limit their use of your information to providing services to us:
  • hosting, database and file storage: Render, in the United States;
  • network security and content delivery: Cloudflare;
  • sending email: Resend; our support inbox: Zoho Mail;
  • bank connections: our bank-data partner (currently Plaid; we may also use Teller);
  • push notifications: the push services of your browser or phone maker (for example Apple, Google or Mozilla).
• With our bank-data partner when you link an account, as described above and in the partner's own privacy policy (for Plaid: https://plaid.com/legal/#end-user-privacy-policy). You can remove a linked account at any time; we then tell the partner to end our access to it.
• When you choose to visit a card issuer or partner. If you tap "Apply" or "Check pre-approval", you leave lemonope for the issuer's or partner's site, where their privacy policy applies. An affiliate link may carry a click ID so the partner can tell us whether an application was approved. We do not put your name, email or financial information in these links. See How we make money.
• With Google or Facebook, only if you sign in with them.
• For legal reasons: to comply with a law, court order or valid legal request; to protect the rights, safety or property of our users, the public or lemonope; or to investigate fraud or security problems.
• In a business transfer: if lemonope is merged, sold or reorganized, your information may move to the new owner, who must keep honoring this policy or tell you before anything changes.
• With your permission, in any other case where you ask us to or agree.

We may share information that has been aggregated or de-identified so that it can no longer reasonably identify you. We will not try to re-identify it, and we require anyone who receives it not to try either.

6. Your rights and choices

Your choices

• Notifications: choose which email, push and in-app alerts you get in Settings. Messages about your account, security and legal notices cannot be turned off.
• Linked accounts: remove any linked bank or card at any time.
• Cookies: you can block cookies in your browser, but you will not be able to sign in without the session cookie.

Your rights

• Access and download: download a copy of your data (profile, linked accounts, transactions, budgets, goals, bills and receipts) from Settings > Security > Download or delete my data.
• Correct: edit your profile and most of your data in the app.
• Delete: delete your account from the same Settings page. This disconnects your banks and permanently deletes your account and data. You can also email support@lemonope.com.

Verification

To protect you, we only act on a request when we can confirm it comes from you, for example because you are signed in or you reply from the email address on your account. We may ask for more information if we cannot verify a request.

Data retention

• While your account is open, we keep your information so the Service works, including your transaction history.
• Uploaded statement files are not stored. Transactions waiting for your review are deleted after 24 hours if you don't import them.
• When you delete your account, we revoke your bank connections and delete your account, transactions, budgets, goals, receipts and profile right away. Copies that remain in our hosting provider's backups are deleted when those backups expire.
• Security records (such as sign-in attempts) are kept for up to 1 year.
• Inactive accounts: if you do not sign in for 2 years, we may delete your account after emailing you a warning.
• We may keep some information longer when the law requires it, to resolve disputes, or to prevent fraud and abuse.

Where your information is stored

We store and process information in the United States. lemonope is offered in several languages for convenience, but it is designed for people in the United States. If you use it from another country, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

Security of your personal information

We protect your information with measures that include:

• encrypted connections (HTTPS) for all traffic;
• encryption of bank access keys, 2-step login secrets and sensitive profile fields (such as phone, date of birth, street address, ZIP code, employer, income and housing cost) in our database;
• an emailed code when you sign in from a new device, optional 2-step login for you, and required 2-step login for our staff;
• automatic lockouts after repeated failed sign-ins, and sign-out after a period of inactivity;
• limits on staff access: our admin tools do not show your individual transactions or balances, and staff actions are logged.

No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires. Please use a strong, unique password and turn on 2-step login.

Changes to this policy

We may update this policy. We will change the effective date above and, for important changes, tell you by email or in the app before they take effect. If you keep using lemonope after a change takes effect, the updated policy applies.

Children

lemonope is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18, including children under 13 protected by the Children's Online Privacy Protection Act (COPPA). If we learn that someone under 18 has an account, we will delete it. If you believe a child has given us information, contact support@lemonope.com.

7. How to contact us

Questions or requests about privacy:

• Email: support@lemonope.com
• Mail: Lemonope Inc., Attention: Privacy, 4915 14th Ave, Brooklyn, NY 11219

8. United States: additional information

Gramm-Leach-Bliley Act (GLBA)

Because lemonope receives information about your financial accounts, it may be treated as a "financial institution" under the federal Gramm-Leach-Bliley Act. We do not disclose nonpublic personal information about you to nonaffiliated third parties except as the law permits, for example to service providers that help us run the Service, with your consent, or for legal reasons. We do not share it with other companies for their own marketing, so the law does not require us to offer an opt-out.

California residents

If you live in California, the California Consumer Privacy Act, as amended (CCPA), gives you these rights:

• Right to know what personal information we collect, use and disclose, and to get a copy of it.
• Right to delete your personal information, with some exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of. We also treat Global Privacy Control (GPC) browser signals as an opt-out request.
• Right to limit the use of sensitive personal information. We use sensitive information (such as your account login and financial account details) only to provide the Service and as otherwise allowed by law, so no action is needed.
• Right not to be discriminated against for using these rights.

Categories of personal information we have collected in the last 12 months, all from you, your devices or our bank-data partner, and all used for the purposes in section 4:

• Identifiers (name, email, IP address, account ID): disclosed to service providers.
• Customer records and financial information (bank account details, balances, transactions, income range): disclosed to service providers, including our bank-data partner.
• Characteristics you choose to give (date of birth, marital status): disclosed to our hosting provider only.
• Internet activity (pages visited, sign-in records, device information): disclosed to service providers.
• Geolocation: only approximate location from your IP address and the city, state and ZIP you enter. We remove GPS data from receipt photos.
• Professional information (occupation, employer, employment type): disclosed to our hosting provider only.
• Inferences (spending patterns, income estimate, approval odds): disclosed to our hosting provider only.
• Sensitive personal information (account login, financial account information): used only to provide the Service.

We have not sold or shared personal information in the last 12 months.

How to make a request: email support@lemonope.com from the email on your account, or use the download and delete tools in Settings. We will confirm your request within 10 business days and answer within 45 days (we may extend this once by another 45 days and will tell you if we do). You may use an authorized agent; we will ask for proof of their authority and may ask you to confirm your identity directly.

Shine the Light: we do not share personal information with third parties for their own direct marketing.

Residents of other US states

Residents of many other states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska and Rhode Island, have similar rights under their state laws, such as the rights to access, correct, delete and get a copy of their data, and to opt out of targeted advertising, the sale of data and certain profiling. We offer these rights to all US users wherever they live.

To use them, email support@lemonope.com. If we decline your request, you can appeal by replying to our answer with the word "Appeal". We will respond within the time your state's law requires. If you disagree with the result of your appeal, you may contact your state attorney general.