Privacy Policy

We collect your portfolio data because scoring it is the entire product.

We never sell your personal or financial data. No ads, no data brokers.

We never see your brokerage password. Account linking goes through Plaid.

We never see your full card number. Payments go through Stripe.

You can delete your account and its data yourself, anytime, in Settings under Security.

Account basics. Your email address and password. Passwords are handled by our authentication provider and stored only in hashed form, so we never see them.

Portfolio data. The holdings you share with us: brokerage statements you upload, positions from accounts you link through Plaid, or entries you type in yourself. This includes tickers, share counts, values, and account details like institution name and account type.

Profile details you choose to share. Things like your age, retirement plans, risk comfort, and financial goals. These are optional and are used to tailor your assessment.

Payment details. If you buy a plan, Stripe processes the payment. We store your Stripe customer reference and subscription status, never your full card number.

Technical basics. Standard logs and privacy-respecting usage analytics that help us keep the service fast and working, such as which pages are visited and when errors happen.

We use your data to run the service: scoring your portfolio, writing your report, showing your history, sending emails you've asked for (like check-ins and score-change alerts, which you can turn off in Settings), and providing support when you contact us.

Part of your report is written with the help of AI language models. To generate it, we send the relevant portfolio details to an AI provider through a gateway. We send what's needed to write your report, and we do not permit these providers to use your data to train their models.

We may look at aggregated, de-identified patterns (for example, the average fee level across portfolios) to improve the product. That analysis never identifies you.

We do not sell your personal or financial data, and we don't share it with advertisers. The only companies that touch your data are the service providers we need to run Am I Ok?, and only to do their job for us:

Supabase for authentication and our database. Vercel for hosting and the AI gateway. Plaid for brokerage account linking. Stripe for payments. Resend for sending email. AI model providers for writing your report. Market data providers receive fund tickers to look up prices and fees, but nothing that identifies you.

When you link an account through Plaid, you enter your brokerage credentials with Plaid directly. We never see or store them; we receive only the account and holdings data you authorize. Plaid's own privacy policy governs that connection.

Beyond that, we would disclose data only if the law requires it, or as part of a company transaction like a merger, in which case this policy would continue to protect it.

Your data is encrypted in transit and at rest, and access inside the company is limited to what's needed to run and support the service. No system is perfectly secure, but we treat your financial data with the care we'd want for our own.

We keep your data while your account is active so your assessment history works. If you delete your account, we delete your profile, portfolios, holdings, uploaded statements, and assessments, disconnect any Plaid links, and cancel any active subscription. Some records may persist briefly in encrypted backups before rolling off, and we may retain minimal billing records where the law requires it.

You can view and edit your profile and portfolio data in the app, and delete your account yourself in Settings under Security. If you'd like a copy of your data, want something corrected, or have any privacy question, email hello@amiok.co and we'll help. Depending on where you live, these may also be legal rights; we honor them for everyone regardless.

Am I Ok? is for adults. We don't knowingly collect data from anyone under 18, and we'll delete it if we learn we have.

If we change this policy in a meaningful way, we'll update the effective date and let you know, for example by email or a notice in the app.