--- title: Security & your data — what Allocate sees, keeps and never touches | Allocate AI description: How Allocate AI handles your data: bank login never seen (Plaid), no money movement, no ads or tracking, AWS in the US, KMS-encrypted tokens, Allo-Bot on Bedrock with no training, in-app deletion. canonical: https://allocateai.io/security site: Allocate AI — https://allocateai.io --- # What we see, what we keep, and what we never touch. Allocate is a personal-finance app, not a bank. This page says plainly how your data is handled — the short version of our [privacy policy](https://app.allocateai.io/privacy), written to be checked against the code. ## Four things Allocate never does - **Never sees your bank login.** You sign in to your bank inside Plaid's window. Your username and password go to Plaid; Allocate receives account and transaction data through Plaid's API and nothing else. - **Never holds or moves money.** The connection is read-only. Allocate cannot transfer, pay, withdraw or trade. It proposes; you act in your own bank. - **Never sells your data, shows ads, or runs tracking SDKs.** There are no third-party analytics or advertising libraries in the web app or the iPhone app. - **Never changes your plan on its own.** Allo-Bot stages every change and waits for your approval. Nothing is applied until you say yes. ## What Allocate stores Only what a personal-finance app needs to work: - **Your account.** Email, display name, time zone, an optional profile picture, and — if you use the retirement features — your birth year. Your password is held by Amazon Cognito; we never see it. - **Bank data you connect.** Institution name, account names and types, the last digits of account numbers, balances, and transactions (date, amount, merchant, category), plus investment transactions. We use Plaid's Transactions product only, so we do not request full account or routing numbers, identity details, or your credentials. - **What you enter.** Income and pay schedule, bills, savings goals, budgets, manually added assets and liabilities, equity grants, and your written plan. - **Your Allo-Bot conversations**, so you can return to them. - **Billing references.** If you subscribe on the web, Stripe handles the payment; we keep a customer reference and your plan status, never your card number. ## Where it lives and how it's protected - **All of it is in Amazon Web Services, in the United States** — sign-in (Cognito), the database, file storage and the AI models (Bedrock) run inside one AWS environment we control. - **The database has no public address.** It sits in a private subnet with no route to the internet; only the API can reach it. Backups are kept for 7 days and then expire on their own. - **Plaid access tokens are encrypted with AWS Key Management Service** before they are stored, with automatic key rotation. Only the API's own role can decrypt them. - **Everything travels over TLS.** The API sits behind AWS WAF with managed rule sets and per-IP rate limits, plus its own request rate limit. - **Sign-in sessions expire.** Access tokens last one hour and refresh tokens fourteen days; on iPhone the session is kept in the device Keychain. Passwords must be at least 12 characters. - **Very few people can reach production.** Access is limited to the people who operate the service, and that is a short list. ## How Allo-Bot uses your data Allo-Bot runs on Anthropic's Claude models through Amazon Bedrock, inside our own AWS environment. To answer you, the relevant pieces of your financial data are included in the request. Amazon Bedrock does not store prompts or responses, does not share them with Anthropic, and does not use them to train models — and neither do we. Allo-Bot can propose changes to your plan; every change is staged for your approval. It is not a financial adviser and does not give personalized investment advice. ## Deleting your data - **Delete your account from inside the app** — Settings on the web, Profile on iPhone. It removes your account record, your financial data, your conversations and your plan from our database, and tells Plaid to disconnect your institutions. Backups expire on their own within 7 days. - **Disconnect one institution at any time.** Its data is removed from your account and Plaid is told to end the connection. - **Ask for a copy.** Email [privacy@allocateai.io](mailto:privacy@allocateai.io) for a copy of your data, a correction, or a deletion. We answer every request ourselves, without charge. ## Found a security problem? Email [support@allocateai.io](mailto:support@allocateai.io?subject=Security%20report) with "Security" in the subject. A person reads it, and we'll reply to confirm what we found and what we changed. Please give us a reasonable window to fix it before publishing. > Every statement on this page describes how Allocate works as of the date below and mirrors the code that runs it. The [privacy policy](https://app.allocateai.io/privacy) is the binding document; if the two ever disagree, the policy wins and we fix this page. Last checked: September 29, 2026. ## Related - [Privacy policy](https://app.allocateai.io/privacy) — The binding version of everything above - [Allo-Bot](https://allocateai.io/allo-bot) — What it reads, how it proposes, what it will not do - [Allo-Bot, defined](https://allocateai.io/glossary/allo-bot) — The assistant, in the glossary - [Pricing](https://allocateai.io/pricing) — One price, everything included **Plan in plain language.** Link your accounts, say what you want, and Allocate writes the plan and stages every change for your yes. [Get started](https://app.allocateai.io/signup) --- Allocate AI is a budgeting and financial-planning app: link your accounts, say what you want in plain words, and it writes the plan and stages every change for your approval. Read more at https://allocateai.io or see all pages in https://allocateai.io/llms.txt.