Last updated: March 4, 2026
Don is operated by vector.dev LLC ("Company," "we," "us," or "our"), a California limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our personal finance application available at don.financial and through our mobile applications on the Apple App Store (collectively, the "Service").
When you create an account, we collect your email address or phone number for authentication via one-time passcode (OTP) sent by email or SMS.
When you connect your bank accounts through Plaid, we receive access to your account balances, transaction history, and account metadata. This data is used to power your personal finance dashboard, spending insights, and transaction categorization.
When you use Don's AI features (the conversational assistant), your transaction data and chat messages are processed by Anthropic's AI models via their API. We send only the data necessary to fulfill your request. Anthropic does not use data submitted via their API to train their AI models.
We automatically collect information about how you interact with the Service, including pages visited, features used, and device information such as browser type, operating system, and device model. On mobile apps, this may include app version, OS version, and crash reports collected by Apple or Google. We do not use session replay or screen recording technology.
The web application uses a session cookie to keep you signed in. We do not use third-party tracking cookies, advertising cookies, or analytics pixels. The mobile application uses secure on-device storage (Keychain on iOS) to store your authentication token.
We use your information to:
Don may use AI to categorize transactions, generate spending insights, or respond to your questions, but these functions supplement your own financial decisions. We do not make automated decisions that affect your legal rights or financial standing.
We use the following third-party services to operate Don:
We do not sell your personal or financial data. We do not share your financial data with third parties for their marketing purposes. Your data is only shared with the third-party services listed above as necessary to operate the Service.
We may create aggregated, de-identified data from your usage for product improvement and analytics. This data cannot be used to identify you and is not considered personal information.
We retain your data for as long as your account is active. If you delete your account, your financial data (transactions, bank connections, categories, budgets, and goals) is permanently deleted immediately. We retain your email address and subscription record to prevent trial abuse and to allow you to re-register in the future. Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention, billing records). Non-financial data such as usage analytics and server logs are retained for up to 12 months after account deletion, after which they are permanently deleted.
We implement industry-standard and above security measures to protect your data, including:
However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
In the event of a data breach that compromises your personal or financial data, we will notify affected users via email within 72 hours of becoming aware of the breach. We will also notify any applicable regulatory authorities as required by law.
If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) to:
To exercise these rights, contact us at hello@don.financial. We will respond to verifiable requests within 45 days.
We recognize and honor Global Privacy Control (GPC) opt-out preference signals sent by your browser.
If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), or another US state with an active consumer privacy law, you may have rights including:
To exercise these rights, contact us at hello@don.financial. We will respond within the timeframe required by your state's law.
If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
We process your data based on the following legal grounds:
Your data is stored and processed in the United States. If you are located outside the United States, your data is transferred to the US where our servers and third-party service providers are located. We rely on Standard Contractual Clauses (SCCs) and other approved transfer mechanisms to ensure your data is protected in accordance with applicable data protection laws.
To exercise your GDPR rights, contact us at hello@don.financial. You also have the right to lodge a complaint with your local data protection authority.
The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us at hello@don.financial and we will promptly delete it.
We may update this Privacy Policy from time to time. For material changes, we will notify you via email at least 30 days before the changes take effect. We will also post the updated policy on this page and update the "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, your data, or wish to exercise any of your privacy rights, contact us at:
vector.dev LLC
Email: hello@don.financial