Privacy policy
Blockscale is a personal finance app operated by Bocastack LLC, a Florida limited liability company (“we”). This policy explains what information Blockscale collects, how we use it, who we share it with, and the choices you have. It covers the Blockscale website, the web app at blockscale.app and the Blockscale iPhone app.
We do not sell your personal information, and we do not use it for advertising.
Information you give us
Account details. When you create an account, we receive your email address and, if you provide them, your name and profile photo. If you sign in with Apple, Google or X, that provider shares your name and email address with us.
Records you add. Assets, debts, subscriptions, budgets, income, notes, category changes and household settings you enter yourself.
Home addresses. If you add a home to track its value, we store the address you enter and the estimate we receive for it.
Household invitations. If you invite someone to your household, we store the email address you invite and the status of the invitation. Blockscale does not email invitations; you share the invitation link yourself.
Support requests. If you email us, we keep the message and our reply so we can help you.
Information from your bank connections
When you connect a bank, card, loan or investment account, you sign in to your institution through Plaid, our connection provider. Blockscale never sees or stores your bank username or password. Connections are view only: Blockscale cannot move money, make payments or place trades.
Depending on the accounts you connect, we receive and store account names, the last digits of account numbers, account types, balances and credit limits, up to 180 days of past transactions and new transactions after that, investment holdings and investment transactions, and loan and credit card details such as interest rates, payment amounts and due dates. We store the connection key Plaid gives us in encrypted form.
Plaid handles your bank sign-in under its own end user privacy policy.
Information collected automatically
Our hosting provider processes technical request information, such as IP address and browser type, to deliver and secure the service. To limit abuse, we keep short-lived request counters linked to a scrambled (hashed) identifier rather than your name or email address.
The public homepage uses Cloudflare Web Analytics to count visits. It does not use advertising cookies, and it does not load when your browser sends a Global Privacy Control or Do Not Track signal. You can also turn it off for your browser by visiting Blockscale with analytics disabled. The web app and the iPhone app do not use analytics or advertising trackers.
Sign-in uses cookies that keep you signed in. The web app also saves display preferences in your browser.
When something goes wrong, we may record an error report to fix it. Error reports remove names, email addresses, account details and amounts before they are sent.
How we use information
We use information to provide Blockscale: to show your accounts, net worth, budgets, transactions and subscriptions; to keep connected accounts up to date; to estimate home values; to run household sharing; to process subscriptions; to answer support requests; to secure the service and prevent abuse; and to meet legal obligations.
Blockscale does not use your financial data to train AI models, and we do not share it with advertisers or data brokers.
If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you (providing the service you sign up for), for our legitimate interests in securing and improving the service, to comply with legal obligations, and with your consent where we ask for it.
Who can see your information
Your household. Everyone in your household can see all of the household’s financial information, including accounts that other members connected, and each member’s name, email address and profile photo. Only invite people you want to see this information.
Service providers. We share information only with providers that help us run Blockscale, and only as needed for their service:
- Cloudflare: hosting, data storage and homepage analytics
- Clerk: sign-in and account management
- Plaid: bank, card, loan and investment connections
- RentCast: home value estimates (receives the home address you enter)
- Stripe: subscriptions purchased on the web
- Apple: subscriptions purchased in the iPhone app, and Sign in with Apple
- Sentry: error reports
When you subscribe on the web, Stripe processes your payment as the seller of record and receives your email address. When you subscribe in the iPhone app, Apple processes your payment. We never receive your full card number.
Legal reasons. We may disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of our business, in which case this policy continues to apply to your information.
International processing
We are based in the United States, and our providers may process information in the United States and other countries. Where the law requires it, we rely on safeguards such as the European Commission’s standard contractual clauses for transfers out of the European Economic Area and the United Kingdom.
How long we keep information
We keep your information while your account is open. If your subscription ends, we keep your data for 30 days so you can subscribe again or export it. After 30 days, we disconnect your banks and delete the data that came from them; records you added yourself, your budgets and your net worth history stay until you delete them or your account.
When you remove a connected bank, we delete the accounts, balances, transactions and holdings that came from it and disconnect it from Plaid. We keep a record that the connection existed, without its key or data.
When you delete your account, we disconnect your banks, cancel any web subscription, and delete your account and, if you are the only member of your household, all of its data. Deleted data may remain in encrypted backups for up to 30 days. Payment providers keep their own records of past payments as the law requires. A subscription bought through Apple must be canceled in your iPhone’s Settings.
Your choices and rights
You can see and edit your information in Blockscale, download a copy of your financial data, remove any connected bank, and delete your account at any time from Settings.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email hello@blockscale.app. We may need to verify your identity first. If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.
Security
Information is encrypted when it travels between your device and Blockscale and when it is stored. Bank connection keys are encrypted separately. No system is perfectly secure, so please use a unique password for your email and sign-in accounts.
Children
Blockscale is for people 18 and older. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
Changes and contact
We will update this page when our practices change and change the date at the top. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.
Questions about this policy? Email Bocastack LLC at hello@blockscale.app.