Legal

Privacy Policy

Last updated: March 2026

1. Introduction

Outland ("we," "our," or "us") is a personal finance platform that helps you track transactions, manage budgets, monitor net worth, and understand your finances across multiple currencies. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. What Data We Collect

Account information: When you sign up, we collect your email address and password. Passwords are hashed and never stored in plain text.

Financial data via Plaid: When you connect a bank account, we use Plaid Inc. — our sole bank data provider — to securely access your financial data. Depending on what you authorize, this may include transaction history, account balances, account names and types, and institution names. We do not receive or store your bank login credentials — Plaid handles authentication directly. Outland has read-only access to your financial data and cannot move money in or out of your accounts.

Household data: If you use the household feature, we store member names, display preferences, and the email addresses of invited members.

User preferences: We store your settings such as home currency, date format, number format, and default date range.

Usage data: We collect basic server logs (timestamps, request types, error codes) through our hosting infrastructure. We do not use third-party analytics, tracking tools, or advertising pixels.

3. How We Use Your Data

We use your data solely to provide and improve the Outland service:

  • Display your transactions, balances, budgets, and net worth
  • Categorize transactions automatically using rule-based matching
  • Convert amounts between currencies using cached exchange rates
  • Enable household sharing between members you invite
  • Detect and prevent duplicate transaction imports

We do not use your data for advertising, profiling, or any purpose unrelated to the service.

4. How We Protect Your Data

  • All data is encrypted at rest using AES-256
  • All data in transit is encrypted using TLS 1.2 or higher
  • Bank connection credentials are stored with additional application-layer encryption and are never stored in plain text
  • API keys and secrets are stored in server-side environment variables and are never exposed to your browser
  • Access to production systems is restricted and protected with two-factor authentication
  • Row Level Security at the database level ensures you can only access data belonging to your household
  • All infrastructure providers are SOC 2 Type II certified

5. Third-Party Services

Plaid Inc. — Our sole bank data provider. Connects your bank accounts and retrieves financial data with your explicit authorization. Plaid has its own privacy practices described in their End User Privacy Policy.

Infrastructure providers — We use industry-standard, SOC 2 Type II certified cloud services for hosting, database, and authentication. These providers process data solely on our behalf and in accordance with our instructions.

We do not sell, rent, or share your financial data with any other third party.

6. Cookies and Tracking

Outland does not use tracking cookies, third-party analytics, advertising pixels, or any form of cross-site tracking. We use only essential cookies required for authentication and session management. We do not participate in any advertising networks or data broker programs.

7. Data Retention

We retain your data for as long as you maintain an active Outland account. When you disconnect a bank account, the associated Plaid connection is removed and the encrypted access token is deleted. When you delete your account, all your data is permanently removed from our systems, including transactions, account records, preferences, and any Plaid connections.

8. Your Rights

You have the right to:

  • Access your data at any time through the Outland application
  • Export your transaction data via CSV export
  • Disconnect any bank account at any time, which removes the Plaid connection
  • Delete your account and all associated data by contacting us at hello@outlandfinance.com
  • Revoke Plaid access independently through Plaid's portal at my.plaid.com

9. Legal Disclosure

We may disclose your information if required to do so by law, regulation, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Outland, our users, or the public.

10. Children's Privacy

Outland is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors. If we learn that we have collected personal information from an individual under 18, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice within the application. The "Last Updated" date at the top reflects the most recent revision.

12. Contact

If you have questions about this Privacy Policy or want to exercise any of your rights, contact us at hello@outlandfinance.com.