Navledgr

Privacy

Last updated 23 October 2026

What Navledgr collects

Only what the application needs to do its job:

• Account and transaction data from financial institutions you explicitly connect — balances, transactions, and, where you connect a loan or card, its balance and terms.
• Your email address and name, given at registration.
• Data you enter yourself, such as bills, their due dates and amounts, debts, and goals.
• Session records — the devices signed in to your account, so you can see and revoke them.

What Navledgr never sees

Your banking credentials. Connections are established through Plaid, which presents your bank's own sign-in. Your username and password go to Plaid and your bank, never to Navledgr. Navledgr receives only an access token.

How it is stored

• Data is held in a private PostgreSQL database that is not publicly reachable.
• Plaid access tokens are encrypted at rest using Fernet symmetric encryption, with the key held outside the database.
• Passwords are stored only as salted hashes and cannot be recovered, only reset.
• Accounts can be protected with time-based two-factor authentication and single-use recovery codes.

Who it is shared with

Nobody. Your financial data is not sold, rented, shared, published or used to train anything. There is no advertising, no analytics vendor and no data broker in the path.

Navledgr relies on exactly two third parties, both as processors:

• Plaid — establishes the bank connection and supplies account and transaction data. Governed by Plaid's end-user privacy policy.
• Resend — delivers transactional email such as password resets and the reports you have switched on. It receives your email address and the contents of those messages.

Data may also be disclosed where the law requires it. Given the nature of this application, that is not anticipated.

Automated decisions

Navledgr produces forecasts and written summaries about your spending. These are generated for you and shown only to you. They are guidance, not advice, and nothing in Navledgr takes a financial action on your behalf — it cannot move money, open accounts or make payments.

How long it is kept

As long as your account exists. Disconnecting an institution removes its access token, ending further data collection. Deleting your account removes your records, including connected institutions, transactions, bills and sessions.

Your choices

• Disconnect an institution at any time from the Accounts page, and from your bank's own app, which can revoke Plaid's access independently.
• See and revoke sessions from the Security page.
• Delete your account from the Security page. This cannot be undone.
• Ask for a copy of your data, or for it to be erased, by email.

Contact

Questions about any of the above go to privacy@navledgr.com.