What Allocate stores
Only what a personal-finance app needs to work:
- Your account. Email, display name, time zone, an optional profile picture, and — if you use the retirement features — your birth year. Your password is held by Amazon Cognito; we never see it.
- Bank data you connect. Institution name, account names and types, the last digits of account numbers, balances, and transactions (date, amount, merchant, category), plus investment transactions. We use Plaid's Transactions product only, so we do not request full account or routing numbers, identity details, or your credentials.
- What you enter. Income and pay schedule, bills, savings goals, budgets, manually added assets and liabilities, equity grants, and your written plan.
- Your Allo-Bot conversations, so you can return to them.
- Billing references. If you subscribe on the web, Stripe handles the payment; we keep a customer reference and your plan status, never your card number.
Where it lives and how it's protected
- All of it is in Amazon Web Services, in the United States — sign-in (Cognito), the database, file storage and the AI models (Bedrock) run inside one AWS environment we control.
- The database has no public address. It sits in a private subnet with no route to the internet; only the API can reach it. Backups are kept for 7 days and then expire on their own.
- Plaid access tokens are encrypted with AWS Key Management Service before they are stored, with automatic key rotation. Only the API's own role can decrypt them.
- Everything travels over TLS. The API sits behind AWS WAF with managed rule sets and per-IP rate limits, plus its own request rate limit.
- Sign-in sessions expire. Access tokens last one hour and refresh tokens fourteen days; on iPhone the session is kept in the device Keychain. Passwords must be at least 12 characters.
- Very few people can reach production. Access is limited to the people who operate the service, and that is a short list.
How Allo-Bot uses your data
Allo-Bot runs on Anthropic's Claude models through Amazon Bedrock, inside our own AWS environment. To answer you, the relevant pieces of your financial data are included in the request. Amazon Bedrock does not store prompts or responses, does not share them with Anthropic, and does not use them to train models — and neither do we.
Allo-Bot can propose changes to your plan; every change is staged for your approval. It is not a financial adviser and does not give personalized investment advice.
Deleting your data
- Delete your account from inside the app — Settings on the web, Profile on iPhone. It removes your account record, your financial data, your conversations and your plan from our database, and tells Plaid to disconnect your institutions. Backups expire on their own within 7 days.
- Disconnect one institution at any time. Its data is removed from your account and Plaid is told to end the connection.
- Ask for a copy. Email privacy@allocateai.io for a copy of your data, a correction, or a deletion. We answer every request ourselves, without charge.
Found a security problem?
Email support@allocateai.io with "Security" in the subject. A person reads it, and we'll reply to confirm what we found and what we changed. Please give us a reasonable window to fix it before publishing.
Every statement on this page describes how Allocate works as of the date below and mirrors the code that runs it. The privacy policy is the binding document; if the two ever disagree, the policy wins and we fix this page. Last checked: September 29, 2026.