Privacy
Web and iPhone services
Manual planning works without an account. Profiles, goals and scenarios stay on your device unless you export them. Optional financial account connections require an Extrafund sign-in. We store your email address, a one-way password hash, recovery-code hash, session identifiers, institution and account names, account types, masked account numbers, balances, transaction dates, amounts, merchant names and categories, investment holdings, and retrieval times. Provider access tokens, email addresses account snapshots, transaction history and holdings are encrypted on our server, hosted by Railway. You authenticate with Plaid or your financial institution; Extrafund does not receive your bank password. Plaid processes the data you authorize under its own privacy policy. We use connected data only to display your accounts and provide the financial analysis and calculations you choose. Financial analysis uses deterministic calculations on our server; connected financial records are not sent to an AI service. We do not sell it or use it for advertising. Disconnecting revokes provider access and removes that institution’s stored details. Deleting your Extrafund account revokes all connections and removes your sign-in and connected data. If revocation cannot complete, the app reports the error and lets you retry. Values previously copied into a local plan or exported backup remain until you remove them. Hosting services process network and security logs to operate the service. Contact contact@edgecase.works for privacy requests.
Android app · updated October 11, 2026
The current Android app is a manual planning tool. It has no Internet permission, sign-in, account connection, Plaid flow, analytics, or server sync. Profile values, goals, and saved scenarios are encrypted in private app storage on the device; the encryption key is held by Android Keystore. Android backup is disabled. The app does not upload these plan values to Extrafund. This Android build does not provide plan export or import. Its Accounts tab explains that connected accounts are unavailable in this build.
The account-connection, Plaid, and SMS disclosures on this page apply to the web and iPhone services where those features are available; they do not describe the current Android app.
Financial analysis
Updated September 29, 2026. When you run a financial deep dive, Extrafund retrieves authorized transaction history and investment holdings through Plaid. We encrypt stored transaction dates, amounts, merchant names, categories, holdings, and sync state on our Railway server. Analysis requires your sign-in and does not send financial records to an AI service. Disconnecting an institution removes its stored analysis data along with its connection. Authorized service operators can decrypt data to operate the service. Extrafund supports optional authenticator-app or SMS two-factor authentication with single-use backup codes. If you choose SMS, we encrypt your verified phone number and send it, along with the verification message, to Textbelt for delivery. We do not send Textbelt your financial records. You can remove SMS in account security settings. Action-plan review progress is encrypted on the server and deleted with your account. Recommendations use rules applied to your connected data; they are educational suggestions, not a guarantee of affordability or investment results. Use a unique password and keep your recovery code private.
Edge Case LLC CA