1. Who we are
Bivver is a personal finance app operated by Bivver Inc., a corporation incorporated in Ontario, Canada (“we”, “us”, “Bivver”). We are the organisation responsible for the personal information described in this policy.
This policy applies to the Bivver mobile app on iOS and Android and to bivver.app. It does not apply to your bank, to the app stores, or to any other service you reach through a link.
We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.
2. The short version
This summary is here for orientation. The sections that follow are the binding ones.
- We read your transactions and balances so the app can do arithmetic on them. We never receive your banking credentials, and we cannot move your money.
- We do not sell your personal information, and we do not share it for advertising or marketing by anyone else. There is no ad network in Bivver.
- We use a small number of service providers — named in full below — and each one gets only what it needs to do its job.
- You can export everything we hold and delete everything we hold from inside the app, in the Profile tab, without emailing anyone.
3. What we collect
Information you give us
- Account details. Your email address, and — if you sign in with Apple or Google — the identifier and email that provider returns to us. If you use Sign in with Apple’s hide-my-email feature, we only ever see the relay address.
- Answers you give during setup. The small number of things your transaction history genuinely cannot tell us, such as which goals matter to you.
- Goals, plans and corrections. Goals you create, categories you re-assign, transactions you correct, and quests you accept, ease or abandon.
- Messages you send to the companion. What you type in the Chat tab, and the action chips you tap in response.
- Preferences. Notification settings, appearance, and how much detail you want on your lock screen.
Information from your financial institution
When you choose to connect an account, our provider Plaid returns to us, on a read-only basis:
- account names, types, masked account numbers and current balances;
- transaction history — date, amount, description, merchant and category — including a period of history from before you signed up, so the app has something to reason about on day one;
- the name of the institution and the status of the connection.
Information the app derives
Most of what Bivver holds about you is not collected at all — it is calculated. This includes your safe-to-spend figures, pay schedule, recurring bills, spending patterns by category and weekday, goal projections, Momentum and streaks, and the short notes the companion keeps about you (your “memories”). Derived information is personal information too, and everything in this policy applies to it.
Technical information
- Device and app data — app version, operating system, device model, and a push notification token if you enable notifications.
- Product analytics — events describing what happened in the app (a screen opened, a goal created, an export requested), used to find bugs and understand which features earn their place. These events are tied to your account identifier, not to your name, and never include your transaction descriptions or balances.
- Diagnostics — crash and error reports.
If you join the beta waitlist on the website
The waitlist form on bivver.app is the one place this site collects anything. When you submit it we store your email address, the date, the consent wording you agreed to, the country your request came from, and a one-way hash of your IP address. The hash exists only to stop a script flooding the form; it cannot be turned back into an address, and we never store the address itself.
We use it for exactly one thing: emailing you once when the beta opens. It is not a newsletter, it is not shared or sold, and it is not linked to an app account if you later create one. Reply to that email, or write to hey@bivver.app, and we will remove you immediately. The whole list is deleted once the launch email has gone out.
What we never collect
- Your banking username or password. These are entered inside Plaid’s own screen and passed to your bank. They never reach Bivver, and we have no way to retrieve them.
- Your payment card. Subscriptions are billed by Apple or Google. We receive a confirmation that a subscription is active, never a card number.
- Your precise location, contacts, photos or microphone. The app does not request these permissions.
4. Your bank connection
Connecting a bank account is optional, is a separate step from signing in, and can be undone at any time.
What the connection can and cannot do
The connection is provided by Plaid Inc. When you link an account, you interact with Plaid directly, and Plaid’s own End User Privacy Policy governs Plaid’s handling of your information, in addition to this one. We hold an access token that lets us request your data; we do not hold your credentials.
You can disconnect an account from Profile → Accounts, or delete everything, which also revokes our access at the provider. Disconnecting stops new data arriving; it does not by itself erase data already received — use the delete control for that.
5. How we use it
We use personal information only for these purposes:
| Purpose | What it involves |
|---|---|
| Providing the service | Calculating safe-to-spend, plans, projections, streaks and patterns; showing your accounts and activity. |
| Personalising the companion | Keeping the memories and inferences that let the app say something useful rather than generic — all of which you can read and delete. |
| Notifications you asked for | Sending the daily briefing and the rare intervention, at the times and detail level you chose. |
| Billing | Confirming with Apple or Google that your subscription or trial is active. |
| Support | Answering you when you write to us. |
| Improving the app | Aggregate and de-identified analysis of feature usage, plus crash diagnostics. |
| Security and legal obligations | Detecting abuse, protecting accounts, and complying with law. |
We do not sell your personal information, we do not disclose it for anyone else’s marketing, and we do not use your financial data to target advertising. If we ever wanted to use your information for a materially new purpose, we would ask you first.
Our legal basis is your consent. You give it when you create an account and, separately and explicitly, when you connect a financial account. You can withdraw it at any time — see Your rights and controls. Withdrawing consent to the bank connection means the app can no longer calculate most of what it exists to calculate.
6. How AI is used
Bivver uses a language model to write, not to decide. Money is calculated by deterministic code. Language is generated. The two never swap jobs.
What this means concretely:
- Every dollar figure, projection and recommendation is produced by tested code before any model is involved.
- When you use Chat, we send the model a limited context — the figures already calculated, relevant recent transactions, and your message — so it can phrase an answer. We do not send your name, email, account numbers or credentials.
- Replies are checked before you see them. A dollar amount that was not in the data we supplied is discarded and a calculated answer is shown instead.
- Requests to the model are made from our server, through the provider’s business API, whose terms do not permit your content to be used to train their general models.
- No decision with a legal or similarly significant effect on you is made by automated means.
Our current model provider is named in the table below. If we change provider, we will update this policy.
7. Who else sees it
We share personal information with a short list of service providers who process it on our behalf, under contract, for the purposes described above and no others.
| Provider | What they do | Where |
|---|---|---|
| Plaid Inc. | Connects your bank account and delivers read-only balances and transactions. | United States and Canada |
| Supabase Inc. | Hosts the database and authentication for your account. | Data stored in a Canadian or United States region |
| OpenAI, L.L.C. | Phrases Bivver’s written replies from figures we have already calculated. | United States |
| Expo (650 Industries, Inc.) | Delivers push notifications to your device. | United States |
| Apple Inc. and Google LLC | Process subscription payments and manage renewals. We never see your card. | United States |
Beyond those providers, we disclose personal information only:
- when you ask us to, or direct us to;
- when required by law — a court order, subpoena, or a lawful demand from a regulator or law enforcement. We will tell you unless we are prohibited from doing so;
- to establish or defend a legal claim, or to prevent fraud or serious harm;
- to a successor if the business is sold or reorganised, in which case this policy continues to apply to the information transferred until you are notified otherwise.
8. Processing outside Canada
Some of our service providers store or process personal information in the United States. While it is there, it is subject to the laws of that country, and may be accessible to its courts, law enforcement and national security authorities under those laws. We use providers who commit to appropriate contractual protections, but we cannot exempt them from local legal process.
If you would prefer your information not to be processed outside Canada, the honest answer is that Bivver cannot currently operate on that basis. Please write to hey@bivver.app with any question about this, or delete your account.
9. How long we keep it
- While your account is open — we keep your data for as long as you use Bivver, because the app’s value comes from history.
- When you delete — we erase your profile, accounts, transactions, goals, memories and derived data from our live systems promptly, and from routine encrypted backups within 30 days. Provider access tokens are revoked as part of the same operation.
- Beta waitlist — deleted once the launch email has been sent, or as soon as you ask, whichever comes first.
- Dormant accounts — if you neither sign in nor hold a subscription for 24 months, we will contact you at your registered email and then delete the account.
- What survives deletion — de-identified and aggregated statistics that can no longer be linked to you, and a minimal record of billing and legal matters where we are required to keep one.
10. Your rights and controls
Under Canadian privacy law you have the right to access the personal information we hold about you, to ask that it be corrected, and to withdraw your consent. Most of these are buttons in the app rather than requests to us.
In the app, right now
Profile → Privacy & data — export everything we hold as a file, or delete everything permanently. The delete also revokes access at your financial data provider.
Profile → Memories — read, edit or delete every note the companion keeps about you, one line at a time. Profile → Accounts — disconnect a bank. Profile → Notifications — change or stop them.
You can also write to hey@bivver.app to exercise any of these rights, to ask what we hold and who we have disclosed it to, or to challenge our compliance. We will respond within 30 days. We may ask you to verify your identity before acting, and we will tell you if a request cannot be met in full and why.
11. How we protect it
- Data is encrypted in transit (TLS) and at rest.
- Every row in our database is protected by row-level security policies, so a request can only ever return your own data — the boundary is enforced by the database, not by application code that could forget.
- All third-party secrets live server-side. The app on your phone holds no provider secret and cannot be reverse-engineered into one.
- Access to production data is limited to what is necessary to run and support the service.
No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.
12. Notifications
Push notifications are optional and are off until you turn them on. You control which ones you receive and how much detail appears on your lock screen — including a setting that hides dollar amounts from a locked phone. To send them we share a device push token with our notification provider; the token identifies a device, not a person, and is deleted when you delete your account.
13. Children
Bivver is not intended for anyone under 16, and we do not knowingly collect personal information from them. If you believe a child has created an account, write to hey@bivver.app and we will delete it.
14. Changes to this policy
We will update this policy when what we do changes. The “last updated” date at the top always reflects the current version. If a change is significant — a new category of data, a new purpose, a new class of recipient — we will tell you in the app or by email before it takes effect, and where the law requires it, we will ask for your consent again.
15. Contact and complaints
Questions, requests and complaints about privacy go to our Privacy Officer:
Bivver Inc.
Noa Lea Gorelik, Privacy Officer
Ontario, Canada
hey@bivver.app
If you need a postal address for a formal request, ask at that address and we will provide one.
If you are not satisfied with our response, you may bring a complaint to the Office of the Privacy Commissioner of Canada.