Privacy Policy

Who we are

Storied is operated by Mouliom Holdings LLC ("Storied", "we", "us"). This policy covers the Storied app at app.storiedmoney.com and the emails it sends. Questions go to privacy@storiedmoney.com.

What we collect

Your account. Your name, email address, and how you sign in (a password, which we never see in plain text, or Google). If you sign in with Google, Google shares your name, email address and profile picture with us, and nothing else.

Bank data you choose to connect. When you connect a bank, it shares, through Plaid, the names and types of your accounts, the last four digits of each account number, balances and credit limits, and your transactions: dates, amounts, descriptions, merchant names and categories. We never receive your bank username or password, and we never receive full account numbers.

What you add. Things you enter in Storied, like notes, categories, bills, goals, income and settings.

Security records. When you sign in or change something important, like your sign-in methods, a bank connection, or closing your account, we record what happened, when, and the IP address and device used. We use these to keep your account safe and to show you the devices signed in.

Technical data. Our hosting provider keeps short-lived server logs, which include IP addresses, to run and protect the service.

We do not use advertising or tracking tools, and we do not collect what you buy for any purpose other than showing it to you.

How we use it

To run Storied for you: show your balances, activity and plans, keep them up to date, sign you in and keep your account secure, send the emails the service needs (like sign-in codes and security notices), answer you when you write to us, and meet our legal obligations. We do not sell or rent your personal information, and we do not share it for advertising.

Read-only, always

Storied asks banks only for permission to read. There is no feature, setting or plan that lets Storied, or anyone at Storied, move, send or spend your money.

Who helps us run Storied

We use a small number of service providers. Each one only gets what it needs to do its job for us, under its own security and privacy commitments.

Plaid connects your bank and sends us your account data. By connecting a bank you also agree to Plaid's End User Privacy Policy.

Clerk runs sign-in and stores your name, email, sign-in methods and devices.

Google, only if you choose to sign in with Google.

Neon hosts our database, in the United States.

Vercel hosts the app.

Postmark sends our emails.

Inngest runs background jobs, like refreshing your banks.

We may also share information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy keeps applying to your data.

How we protect it

Data is encrypted on the way to us and while stored. Bank access keys are encrypted again with keys only our servers hold. Staff access is limited to what is needed to run and support the service. No system is perfectly secure, and if a breach ever affects your data, we will tell you as the law requires.

Your choices

See and take your data. Settings, Data and privacy, Export everything gives you one file with all of it, anytime.

Correct it. Change your name, email and anything you added in the app, or write to us.

Close your account. Settings, Data and privacy, Close account. Bank connections end right away. Everything else is kept for 30 days in case you change your mind, then deleted for good. Our database provider keeps short-term recovery copies that expire on their own soon after. We keep security records of what happened to the account, without your financial data, as long as we need them for security and legal reasons.

Your rights. Depending on where you live, including California, you may have the right to know, access, correct and delete your personal information, and to not be treated differently for using those rights. Storied does not sell or share personal information as those laws define it. To use any of these rights, write to privacy@storiedmoney.com. We will confirm it is you before acting.

Cookies and storage

We use cookies only to keep you signed in and secure. Your display choices, like theme and text size, are saved in your browser. We do not use advertising cookies.

Children

Storied is for people 18 and older. We do not knowingly collect information from children. If you think a child has given us information, write to privacy@storiedmoney.com and we will delete it.

Where your data lives

Storied is offered in the United States, and your data is stored and processed in the United States.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top shows the latest version. See also our Terms.