1. Who we are
Torrealbas (“Torrealbas,” “we,” “us,” or “our”) is a private family finance workspace at torrealbas.com. It helps households organize money, see insights from linked accounts, manage recurring bills and calendars in-app, and (when enabled) receive text alerts. This Privacy Policy explains what we collect, how we use it, and your choices.
Torrealbas is invite-only. We built it for families—not advertising or data resale.
2. Information we collect
Account information: email, name, password (stored as a secure hash by our auth provider), language, timezone, and Settings preferences.
Household information: membership, roles, invites, and names of people you add for family tracking.
Financial information you connect or create: account metadata, balances, transactions, merchants, categories, budgets, recurring bills, funding steps, and finance settings. We do not store your bank login credentials.
Communications: support messages you send us; if you opt in to SMS (in development in Settings), your mobile number and messaging preferences.
Optional household helpers (as we ship them): limited email, calendar, recurring-event, or invitation/RSVP data you choose to connect—only the scopes needed for that feature, handled securely. We do not take unrestricted access to your entire mailbox or calendar.
Device and usage logs needed to operate and secure the service. We do not sell this data.
3. How we use information
We use information to run Torrealbas: sign you in, sync bank data you authorize, show balances and insights, power budgets and recurring views, send email or SMS alerts you enable, run Assist when you ask, prevent abuse, and comply with law.
We do not sell personal information. We do not use your transaction or balance data for third-party ads.
4. Bank connections (Plaid)
When you link a bank, you connect through Plaid Inc. (“Plaid”). Plaid retrieves account and transaction information and provides it to Torrealbas so we can display balances, history, and budgeting features inside the app.
Torrealbas is not your bank. You cannot send payments, move money, or otherwise operate your bank account through Torrealbas. We never receive or store your bank username or password. Plaid access tokens stay on our servers only and are never exposed to the browser.
Plaid’s practices are governed by the Plaid End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy) and terms you accept in Link. Disconnecting an institution in Torrealbas stops future sync for that connection.
5. Assist (AI) and transaction insights
Torrealbas can show insights from your household’s synced transactions and bank history in the app. Assist may temporarily read relevant household finance data (for example balances or recent transactions) only to help answer the question you just asked.
Assist cannot log into your bank, initiate transfers, or change accounts at your financial institution. Tool results and model context used to answer a question are processed for that request and are not kept as a lasting AI copy of your full transaction history. We do not use your financial data to train third-party AI models.
Your household’s transaction history remains stored in Torrealbas so budgets, lists, and recurring tools work for you—that is separate from the short-lived AI request context described above. Chat text you keep in Assist may be stored in your account so you can continue a thread.
6. Text messaging (SMS)
Torrealbas supports optional SMS notifications and alerts: household finance updates (security, bills, service notices) via Settings, and To Do task reminders via a separate opt-in inside the To Do module.
If you provide a mobile number and expressly opt in, you may receive up to 8 finance messages per month. To Do reminders have their own consent in To Do settings; when enabled, reminder frequency follows your tasks (one-time or daily/weekly/monthly) and can exceed the finance message volume. Message and data rates may apply. Reply STOP to cancel and HELP for help. SMS consent is not required to use the web app with email login.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
SMS may be delivered through providers such as Twilio and TextMagic, who process message content and delivery metadata only to send messages on our behalf.
7. Email, calendar, recurring events, and invitations
Torrealbas may use email for login, invites, and service notices. In-app calendars and recurring views help you track bills and household schedules from data you already keep in Torrealbas.
If we add deeper email, calendar, or invitation/RSVP helpers, we will request only limited permissions needed for that job, process data securely, and will not retain sensitive third-party credentials longer than needed to provide the feature. We do not claim full access to all of your external mail or calendars.
8. How we share information
We share information only as needed to run Torrealbas: with contracted providers (hosting, auth, database, bank aggregation, messaging, AI inference for Assist), with household members you invite, or when required by law or to protect the service.
We do not share personal information with data brokers. Providers are not authorized to use your household financial data for their own advertising.
9. Security
We use practices appropriate for a family finance app: HTTPS, authenticated sessions with secure cookies, household-scoped database access controls, hashed passwords via our auth provider, and server-only storage of bank connection tokens.
No system is 100% secure. If you suspect compromise, change your password in Settings and contact us.
10. Retention
We retain account and household finance data while your account is active so the Service works. Assist AI request context used to answer a question is not retained as a separate lasting copy of your full bank history. If you leave a household or request deletion, we remove or de-identify personal data within a reasonable period, except limited records required for security, disputes, or law.
11. Your choices
You can update Settings, disconnect banks, manage household memberships by role, enable or disable SMS when that control ships, and request access or deletion of personal information by contacting us.
Depending on where you live, you may have additional privacy rights. We will not discriminate against you for exercising them.
12. Children
Torrealbas is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Name-only household people are managed by adult account holders.
13. Changes
We may update this Privacy Policy. We will post the new version here and revise the “Last updated” date. Continued use means you acknowledge the updated policy.
14. Contact
Questions about privacy: [email protected]. You can also reach us through your account at torrealbas.com.