Privacy Policy

Effective Date: January 23, 2026

DiCarlo Software Solutions LLC ("we," "our," or "us") operates the Prism Wallet mobile application and related services (collectively, the "Services"). We are committed to protecting your privacy and safeguarding your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Services.

1. Information We Collect

We collect the following categories of information:

Personal Information

First name and last name
Email address
Encrypted password
Optional profile image URL

Financial Information

With your explicit consent, we access certain financial data through a third‑party financial data aggregator, Plaid. This may include:

Account balances
Transactions
Investment and asset details

We access this data in read‑only mode. We never receive or store your bank login credentials, and we cannot initiate transactions or move funds on your behalf.

Usage and Device Information

App usage and interaction data
Crash reports and performance metrics
Device identifiers and operating system information

2. How We Use Your Information

We use your information to:

Provide, operate, and improve the Services
Display financial insights, budgeting tools, and analytics
Personalize your experience and deliver relevant content
Send alerts, updates, and service notifications
Monitor performance and diagnose technical issues
Protect against fraud, abuse, and unauthorized access

3. Payments and Card Data

Prism Wallet does not process payments, move funds, or store full debit or credit card numbers.

All subscription billing is handled directly by Apple and Google through the App Store and Google Play. We do not have access to your full payment card information and do not process card transactions on our servers.

We do not sell your personal or financial data.

We may share limited information with trusted service providers who assist us in operating the Services, subject to strict confidentiality and data protection obligations. These providers may only use your data to perform services on our behalf.

We may also disclose information:

To comply with legal obligations or lawful requests
To protect the rights, safety, and security of our users and systems
In connection with a merger, acquisition, or sale of assets (with appropriate notice)

5. Third‑Party Services

We rely on third‑party services to support core functionality, analytics, and infrastructure. These providers may process your data according to their own privacy policies.

Analytics & Monitoring

PostHog – in‑app analytics and feature usage tracking
Sentry – error monitoring and crash reporting (all screen content masked)

Infrastructure & Hosting

Google Cloud Platform (GCP) – backend hosting, managed database services (Cloud SQL), and storage of user‑specific models and application files
Amazon Web Services (AWS S3) – secure object and file storage

Financial Data Integration

Plaid – secure financial account connectivity

Subscriptions & Billing

RevenueCat – subscription management via the App Store and Google Play

Each provider’s use of data is governed by its own privacy policy.

6. Data Security

We implement industry‑standard security measures to protect your information, including:

Encryption in transit using TLS
Encryption at rest for databases and backups
Secure storage of sensitive credentials and financial access tokens
Restricted and monitored access to production systems

We never log bank credentials or full payment card numbers.

7. Data Retention

We retain your personal and financial information only as long as necessary to provide the Services and fulfill legal, accounting, or regulatory obligations.

When you disconnect a financial account, we stop retrieving new data from that institution.

When you delete your account, we permanently remove your personal and financial data from our systems, except where retention is required by law.

8. Your Rights and Choices

You may:

Access and update your profile information
Disconnect linked financial accounts at any time
Request deletion of your account and associated data
Control notification and tracking permissions through your device settings

To exercise these rights, contact us using the information below.

9. Additional Privacy Rights

Depending on your location, you may have additional rights under applicable privacy laws, including the right to request access to, correction of, or deletion of your personal data.

California residents may have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data is collected and the right to request deletion.

To exercise these rights, contact us using the information below.

10. Children’s Privacy

The Services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.

11. Future Features

If we introduce new features that involve additional data collection (such as referrals, social sharing, or payments), we will update this Privacy Policy and notify you before collecting new categories of information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, providing additional notice within the app or by email.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

DiCarlo Software Solutions LLC Email: alyssa@dicarlosoftware.solutions