Legal
Privacy Policy
Last updated 25 June 2026
01 The short version
Tweed is built to be private by design. We don’t sell your data, we don’t run ads, and we don’t track you around the web. We hold the least we can to run your account, and you can export or delete everything at any time. The detail below explains exactly what we process and why.
02 Who we are
Tweed (“we”, “us”) is an independent personal-finance app at tweed.money, currently in invite-only beta. For the purposes of UK data-protection law, Tweed is the data controller for the personal data described here.
While we’re in beta we’re keeping things lean, so we don’t publish a postal address here — for anything data-related, just email privacy@tweed.money and we’ll respond. As Tweed grows and is formally registered as a company, we’ll update this page with the registered company name, address and ICO registration number.
03 What we collect
You give us
- Account details — your email address and a securely hashed password.
- Financial data you import — the transactions, balances, budgets, accounts, goals and wealth details you add or upload from your bank statements (CSV files). We do not connect to your bank; you bring the file.
- Support & feedback — anything you send us directly.
We collect automatically
- Essential technical data — the cookies needed to keep you signed in, and minimal security and error logs that never contain your financial data or personal identifiers.
We do not buy data about you, and we do not use third-party advertising or analytics trackers. See our Cookie Policy.
04 How we use it
- To provide the app — store, categorise, reconcile and display your finances.
- To run your account, authenticate you, and keep the service secure.
- To process payments if you subscribe (handled by our payment processor — we never see your full card details).
- To respond to your support requests and improve the product.
We never sell your personal data, and we never use the content of your finances to advertise to you or anyone else.
05 The AI features
Some optional features (smarter categorisation and written monthly insights) use a third-party AI provider. When they run, the AI is sent only transaction descriptions and amounts — never your name, email, account numbers, sort codes or dates. These features are off unless you use them, and we don’t use your data to train any third-party model.
06 Legal bases
- Contract — to deliver the service you’ve signed up for.
- Legitimate interests — to keep the service secure, prevent abuse, and improve it, balanced against your rights.
- Consent — for any optional processing; you can withdraw it at any time.
- Legal obligation — where we must retain certain records (e.g. for tax on payments).
07 Who we share with
We share data only with the processors that make the service work, under contract and only as needed: our hosting and database provider, our payment processor, our email provider, and the AI provider described above (descriptions and amounts only). We may disclose data if required by law. We do not share your data with advertisers or data brokers — ever.
08 Storage, security & retention
Your data is encrypted in transit and stored with strict per-account isolation so one account can never see another’s. Passwords are hashed, never stored in plain text. We keep your data for as long as your account is active. If you delete your account, your financial data is permanently removed; we keep only the minimal records we’re legally required to (e.g. payment records).
09 Your rights
Under UK GDPR you can access, correct, export, restrict, object to, or delete your personal data. Tweed builds two of these straight into the app: one-click export of everything you hold, and permanent account deletion, both in Settings. To exercise any other right, email privacy@tweed.money. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).
10 Changes
If we make material changes to this policy we’ll update the date above and, where appropriate, notify you in the app or by email. Continued use after a change means you accept the updated policy.