Privacy Policy

• Account info: your name, email address, and sign-in method (email or phone code).
• Plan data you enter: current age, target retirement age, monthly income and expenses, and each goal’s category, cost, target age, and funding progress.
• Transactions you log against a goal.
• Basic session data (a secure, encrypted cookie) to keep you signed in.

We never ask for or store bank credentials, card numbers, or brokerage logins.

Solely to run the Service: computing your funding plan, rendering your goals and simulator, and sending you sign-in codes by email. We do not sell your data or use it for advertising.

Your data lives in a MongoDB database used only by Retired. Session cookies are encrypted and httpOnly, so they can’t be read by page scripts.

Sign-in codes are sent through Garage, the identity service Retired uses. When you buy a bond, Garage also handles the wallet payment and holds the investment record. Garage receives only what’s needed to sign you in and complete purchases, not your financial plan.

You can review and edit your data any time from within the app. You can permanently delete your account and every record tied to it — profile, goals, transactions, and plan assumptions — from Profile → Danger zone → Delete account. Deletion is immediate and cannot be undone or recovered by us afterward.

We keep your data only as long as your account is active. One-time sign-in codes expire automatically within minutes and are not retained afterward.

The Service is not directed at anyone under 18, and we do not knowingly collect their data.

If this policy changes materially, we’ll update the date above and, where appropriate, notify you in the app.

Privacy questions or data requests: privacy@retired.app.