Privacy Policy

A. Information You Provide Directly

We may collect information that you provide directly to Booster, including:

• Your name
• Your email address
• Account registration and authentication information
• Profile details and account preferences
• Payday schedules, pay frequency, anchor-payday selections, and time-zone settings
• Financial goals and budgeting preferences
• Transaction-category and subcategory corrections
• Communications with Booster
• Customer-support requests
• Survey responses
• Beta-testing feedback
• Bug reports
• Any other information you voluntarily submit through the Service

When you register or sign in through Apple or Google, we may receive information that you authorize those services to provide, such as your name, email address, and a unique authentication identifier.

B. Information From Connected Financial Accounts

When you choose to connect a financial account through Plaid, Booster may receive read-only financial information made available by your financial institution and authorized by you.

This information may include:

• Financial-institution name
• Account name
• Account type and subtype
• Masked account identifiers
• Current and available balances
• Transaction dates
• Transaction amounts
• Transaction descriptions
• Merchant names
• Transaction locations
• Transaction categories and subcategories
• Pending and posted transaction status
• Income and direct-deposit information
• Recurring-transaction indicators
• Account-ownership information, when supported and authorized
• Other financial information supported by the account connection you approve

The exact information available may vary depending on your financial institution, the accounts you connect, and the permissions you grant.

Plaid provides technology that allows users to connect financial accounts and share authorized data with applications such as Booster. Plaid maintains its own privacy notices and account-management tools.

Depending on the connection method used by your financial institution, you may provide authentication information directly to your financial institution or to Plaid. Booster does not intend to receive or store your online-banking username or password.

C. Information Collected Automatically

When you use Booster, we may automatically collect technical and usage information, including:

• Device type
• Mobile operating system
• Browser type
• App version
• Internet Protocol address
• Device or application identifiers
• Login dates and times
• Features accessed
• Screens viewed
• Interaction and navigation data
• Crash reports
• Error logs
• Diagnostic information
• Performance information
• General location inferred from an IP address, such as city, state, or country

We may use cookies, local storage, software development kits, or similar technologies on our website or application to:

• Maintain user sessions
• Authenticate users
• Remember preferences
• Measure performance
• Diagnose technical issues
• Protect the Service
• Understand how users interact with Booster

We may use the information we collect to:

• Create and maintain your Booster account
• Authenticate your identity
• Connect financial accounts that you authorize
• Retrieve and display authorized financial information
• Organize transactions through Booster’s Debt, Essentials, Savings, and Living framework
• Provide transaction-category and subcategory breakdowns
• Calculate and display current pay periods based on the schedule you configure
• Generate personalized financial insights
• Identify significant spending changes
• Identify major spending categories and subcategory drivers
• Analyze income distribution
• Identify meaningful changes in transaction frequency
• Display supporting transactions and evidence behind an insight
• Allow users to review and correct classifications
• Preserve original classifications and correction history
• Improve future personalization
• Provide budgeting and financial-planning functionality
• Develop adaptive budgeting based on user-selected goals, preferences, and habits
• Maintain the functionality and security of the Service
• Diagnose bugs and technical problems
• Monitor performance
• Detect fraud, abuse, unauthorized access, or security incidents
• Respond to customer-support requests
• Communicate about Booster, beta access, product updates, security matters, and administrative issues
• Conduct research and analytics
• Develop and improve Booster’s features
• Enforce our agreements
• Comply with applicable laws and lawful requests

We may use aggregated or deidentified information for analytics, research, product improvement, security, and business planning when the information cannot reasonably be linked to a particular person.

Booster does not use connected financial information to make decisions concerning your eligibility for:

• Credit
• Employment
• Housing
• Insurance
• Government benefits

Booster may classify transactions using its Debt, Essentials, Savings, and Living framework, referred to as the DESL system.

Transactions may also be assigned categories and subcategories based on data received from financial-data providers, Booster’s classification systems, user input, or a combination of these sources.

When you correct a transaction category or subcategory:

• Booster may retain the original classification
• Booster may retain the corrected classification
• Booster may record the date and nature of the correction
• Booster may maintain an immutable correction history
• Booster may use the correction to improve future personalization and classification accuracy

Preserving both the original and corrected information helps Booster explain how classifications changed and maintain consistency over time.

Booster may generate personalized financial insights based on validated financial information and predetermined eligibility rules.

Booster’s backend systems are responsible for:

• Determining financial facts
• Calculating values and percentages
• Evaluating whether an insight qualifies
• Ranking eligible insights
• Identifying supporting transactions
• Maintaining insight history
• Determining when an insight has materially changed
• Removing outdated insights from the active feed while preserving appropriate history

Booster may use the OpenAI application programming interface to improve the clarity, readability, tone, or presentation of wording associated with validated insights.

Information submitted for this limited purpose may include:

• Transaction categories
• Transaction subcategories
• Transaction amounts
• Relevant time periods
• Spending changes
• Income-distribution observations
• Transaction-frequency observations
• Validated financial conclusions
• Supporting contextual information needed to word the insight

OpenAI is not authorized by Booster to:

• Invent transactions
• Invent financial amounts
• Select which financial signals qualify
• Alter validated financial calculations
• Change Booster’s financial conclusions
• Access bank login credentials
• Move money
• Initiate payments
• Make purchases
• Control a user’s financial account

OpenAI states that data submitted through its API platform is not used to train or improve its models by default.

We may disclose information to vendors, contractors, and service providers that assist us in operating Booster.

These providers may include companies that provide:

• Financial-account connectivity, including Plaid
• Cloud hosting
• Database infrastructure
• Authentication services
• Application development infrastructure
• Artificial-intelligence processing, including OpenAI
• Error reporting
• Application monitoring
• Security services
• Fraud prevention
• Email delivery
• Customer communications
• Analytics
• Customer support
• Payment processing, if paid services are introduced
• Legal, compliance, or professional services

These providers may process information only as necessary to perform services for Booster, subject to applicable contractual obligations and law.

We may also disclose information:

• When required by law
• In response to a subpoena, court order, warrant, or lawful government request
• To investigate suspected fraud or misuse
• To prevent or respond to security incidents
• To protect the rights, safety, security, or property of Booster, our users, or others
• To enforce our agreements or policies
• In connection with a merger, acquisition, financing, restructuring, bankruptcy, sale, or transfer of some or all company assets
• At your direction
• With your consent

Booster does not sell your personal information.

Booster does not sell connected financial-account information.

Booster does not share connected financial information for cross-context behavioral advertising.

Booster does not permit third-party advertisers to use your bank-account or transaction information to target advertising to you.

If Booster’s practices materially change in the future, we will update this Privacy Policy and provide any notice, consent mechanism, or opt-out right required by applicable law before implementing the change.

We retain information for as long as reasonably necessary to:

• Provide the Service
• Maintain your account
• Display transaction history
• Generate and preserve financial insights
• Preserve classification and correction history
• Maintain security records
• Detect fraud or misuse
• Resolve disputes
• Enforce agreements
• Comply with legal, regulatory, accounting, or reporting requirements
• Support legitimate business operations

While your account remains active, Booster may retain:

• Imported transaction information
• Account metadata
• DESL classifications
• Original classifications
• User corrections
• Correction history
• Insight records
• Insight revisions
• Supporting evidence
• Payday settings
• Preferences
• Financial goals
• Account activity and security logs

When information is no longer reasonably necessary, we may delete, aggregate, or deidentify it.

Some information may remain temporarily in encrypted backups, system logs, fraud-prevention records, or disaster-recovery systems until removed through normal retention processes.

You may disconnect a connected financial account through Booster’s available account controls or through account-management tools provided by Plaid.

Plaid Portal allows users to review and manage certain connections made through Plaid.

Disconnecting an account generally stops Booster from receiving new information through that connection.

Disconnecting an account does not necessarily delete information that was previously imported into Booster.

To request deletion of previously imported information, contact us using the information in the Contact Us section below.

You may request deletion of your Booster account and associated personal information by contacting:

admin@boosterfinancialapp.com

Use the subject line:

Booster Privacy Request

Include:

• Your name
• The email associated with your Booster account
• The type of request
• A description of the information you want deleted

Do not include:

• Bank login credentials
• Passwords
• Complete bank-account numbers
• Complete card numbers
• Social Security numbers
• Other highly sensitive authentication information

We may need to verify your identity before completing a deletion request.

Deletion may not be immediate. We may retain limited information when reasonably necessary to:

• Comply with law
• Prevent fraud
• Maintain security
• Resolve disputes
• Enforce agreements
• Complete an active transaction or request
• Maintain legally required business records

Deletion requests submitted directly to Booster do not automatically delete information maintained independently by Plaid or another third-party service provider. Users may need to submit a separate request to the relevant provider. Plaid provides separate tools for managing connections and certain data requests.

Deleting your Booster account does not automatically cancel an active Apple App Store or Google Play subscription. Cancel the subscription in your Apple or Google account settings to prevent future renewal charges. You may still submit an account deletion request before or after canceling the subscription.

Depending on where you live and whether applicable legal thresholds are met, you may have the right to:

• Request access to personal information we maintain about you
• Request information about the categories of personal information we collect
• Request information about the purposes for which information is used
• Request information about categories of third parties to which information is disclosed
• Request correction of inaccurate information
• Request deletion of information
• Request a portable copy of certain information
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Opt out of the sale or sharing of personal information
• Appeal the denial of a privacy request
• Receive service without unlawful discrimination for exercising a privacy right

To submit a privacy request, email:

admin@boosterfinancialapp.com

Use the subject:

Booster Privacy Request

We may request information reasonably necessary to verify your identity and protect your account.

We will respond within the time required by applicable law.

California law provides qualifying consumers with rights concerning access, correction, deletion, and certain uses of personal information. The specific requirements depend partly on whether a business meets applicable statutory thresholds.

Booster does not currently sell personal information or share it for cross-context behavioral advertising.

We use reasonable administrative, technical, and organizational safeguards designed to protect information from:

• Unauthorized access
• Unauthorized disclosure
• Loss
• Misuse
• Alteration
• Destruction
• Fraud
• Security incidents

Our safeguards may include:

• Encryption in transit
• Encryption at rest where appropriate
• Authentication controls
• Role-based access restrictions
• Restricted production access
• Logging
• Monitoring
• Secure cloud infrastructure
• Secret-management systems
• Database-access controls
• Separation of application functions
• Incident-response procedures
• Secure software-development practices
• Vendor-security review
• Data minimization
• Backup and recovery procedures

The FTC recommends that businesses understand what sensitive information they possess, retain only what is needed, protect retained information, dispose of it securely, and plan for security incidents.

No method of electronic transmission or storage is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, lost, or destroyed by an unauthorized party.

Booster is intended for adults and is not directed to individuals under 18 years of age.

We do not knowingly collect personal information from anyone under 18.

If we learn that we collected information from a person under 18, we will take reasonable steps to delete it.

A parent or legal guardian who believes a minor has submitted information to Booster may contact:

admin@boosterfinancialapp.com

Booster may integrate with or provide access to services operated by other companies, including:

• Plaid
• Apple
• Google
• OpenAI
• Financial institutions
• Cloud-service providers
• Authentication providers
• Analytics providers
• Customer-support platforms

These third parties maintain their own privacy notices, terms, data-retention practices, and security procedures.

This Privacy Policy applies to Booster’s handling of information. It does not govern information independently collected or processed by a third party under that party’s own terms or privacy policy.

Booster is currently intended primarily for users located in the United States.

Information may be stored or processed in the United States or in other countries where Booster or its service providers operate.

Privacy and data-protection laws in those countries may differ from the laws in your location.

The current Booster beta is read-only.

Booster is being developed to provide increasingly personalized and adaptive budgeting based on:

• User-selected goals
• Spending habits
• Income patterns
• Debt-repayment priorities
• Savings priorities
• Budgeting preferences
• User-created rules
• Financial-account activity

Future goals may include helping users:

• Pay down significant debt
• Pay down debt while continuing to save
• Build emergency savings
• Save for large expenses
• Establish spending boundaries
• Adapt a budget as circumstances change

If Booster later introduces functionality involving:

• Money movement
• Payment initiation
• Account transfers
• Automated financial actions
• Recurring-obligation management
• Automated budgeting changes
• Other materially different financial services

we will revise this Privacy Policy and provide any legally required notice, disclosure, authorization, or consent before those practices begin.

We may update this Privacy Policy as:

• Booster develops
• Our technology changes
• Our data practices change
• New functionality is introduced
• Legal or regulatory requirements change
• Service providers change
• Security practices evolve

When we make material changes, we may provide notice through:

• The Booster application
• Our website
• Email
• An account notification
• Another reasonable method

The Effective Date at the top of this Privacy Policy indicates when the current version became effective.

Your continued use of Booster after an updated Privacy Policy becomes effective means that the updated policy will apply to your continued use, subject to applicable law.

For questions, concerns, account-deletion requests, data-access requests, or other privacy matters, contact:

Booster Financial Incorporated Doing business as Booster

Email:admin@boosterfinancialapp.com

Website:https://www.boosterfinancialapp.com