Privacy Policy

StackFunds Ltd provides educational money management tools that help users plan budgets, build buffers, and automate deposits to defined goals. We do not provide investment, legal, or tax advice. For privacy matters, StackFunds Ltd acts as the data controller for personal data processed in connection with our website and services. Company address: 40 Gracechurch Street, London EC3V 0BT, United Kingdom. You can contact us at [email protected] or by phone at +44 20 4529 8765.

Effective date: 24 February 2026

We collect information you provide directly, such as account details, contact information, goals, rules you set for automated deposits, and feedback sent to support. We also collect limited usage data, like device type, pages viewed, time on page, and interactions with features. Payment information is handled by our payment partners and is not stored on our servers. If you connect third party accounts to import transactions or balances, we receive access tokens and necessary metadata from regulated providers to deliver the feature.

• Identity and contact: name, email, phone
• Account and settings: goals, rules, budgets
• Technical data: IP address, device, approximate location

We use personal data to operate and improve our services, provide support, secure accounts, and communicate important updates. Typical uses include creating and managing your workspace, calculating projections, sending weekly review reminders, preventing misuse, and measuring product performance. If you opt in to receive marketing emails, we use your contact details to share product updates and educational content. You can unsubscribe at any time using the link in those messages.

• Provide and personalize features you request
• Respond to support and troubleshoot issues
• Protect security, prevent fraud, and ensure compliance

Under UK GDPR, we rely on several lawful bases depending on the context. Contract is used to create and maintain your account and deliver requested features. Legitimate interests apply to product improvement, security, and analytics that help us understand broad usage patterns. Consent applies to optional cookies, marketing communications, and any data sharing that is not necessary for the core service. When we use legitimate interests, we balance our interests against your rights and reasonable expectations and provide controls where possible.

We use essential cookies to keep you signed in and to provide core site functions. With your consent, we use analytics cookies to measure performance and improve features. You can accept or reject optional cookies in the cookie panel on our site or adjust your browser settings to block or delete cookies. Your choices apply to the device and browser you are using and may need to be repeated if you clear cookies or switch devices.

You can revisit choices at any time using the cookie panel. See also our Terms/.

We share personal data with trusted service providers to operate our product, such as hosting, email delivery, customer support, analytics, and payment processing. These providers are bound by contracts that require appropriate safeguards and prohibit use of your data for their own purposes. If you connect third party accounts, we share the minimum necessary data to deliver that integration. We may disclose information if required by law, to protect our legal rights, or in connection with a corporate transaction. We do not sell personal data.

Your information may be processed outside the UK. When we transfer personal data internationally, we use lawful mechanisms such as adequacy regulations, the UK Addendum to Standard Contractual Clauses, and additional safeguards where appropriate. We assess vendor practices and monitor changes in law to help ensure continued protection.

We keep personal data only as long as needed for the purposes described in this policy, to meet legal obligations, and to resolve disputes. Account content is retained while your account is active. If you delete your account, we delete or anonymize personal data within a reasonable period, subject to backups and legal requirements. Support tickets and transactional records may be kept for a longer period where required by law.

Under UK data protection law, you have rights that include access, rectification, erasure, restriction, portability, and objection. Where processing is based on consent, you may withdraw that consent at any time. To exercise a right, contact us using the details below and we will respond within one month or explain if more time is needed. You can also complain to the Information Commissioner’s Office. We encourage you to contact us first so we can address your concerns quickly.

• Access a copy of your personal data
• Request correction or deletion
• Object to or restrict certain processing

ICO website: ico.org.uk | Helpline: 0303 123 1113

We use technical and organizational measures to protect personal data, including encryption in transit and at rest, role based access, logging, and regular reviews. No system is perfectly secure, but we work to prevent unauthorised access and reduce risk through layered controls, staff training, and vendor diligence. If we become aware of a data incident that affects you, we will investigate and notify you and relevant authorities as required by law.

StackFunds is intended for individuals who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to remove the information.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will post an updated version here and update the effective date. If changes significantly affect your rights, we will provide additional notice through the service or by email.

If you have questions about this policy or our data practices, contact us using the details below. For faster handling, include the email associated with your account and the topic “Privacy”.