Effective date: October 23, 2026
Headroom helps you see what you can spend. To do that, we store the budget you enter, the purchases you add, and, if you choose, transactions from bank accounts you connect through Plaid. We do not sell your data, show ads, or use advertising, tracking or analytics tools.
Headroom ("Headroom", "we", "us") is operated by Jake Dempster, a sole proprietor based in Ontario, Canada. We are responsible for the personal information described in this policy.
Privacy Officer. Our Privacy Officer is responsible for protecting your personal information and can be reached at [email protected]. The Privacy Officer answers privacy questions, handles requests to access or correct your information, and handles complaints.
We collect only what you give us, what your bank shares through Plaid when you ask it to, and the technical records needed to run the service.
| Information | Where it comes from | Why we need it |
|---|---|---|
| Email address | You, at sign-up | To create your account and let you sign in |
| Password | You, at sign-up | To protect your account. It is stored only in hashed form by our sign-in provider; we never see it. |
| Sign-in session | Created when you sign in, stored on your device | To keep you signed in until you log out |
| Budget details (monthly income; fixed expenses with name, amount and group; savings goals with name, contribution, target amount and date; setup progress) | You, during setup and when you edit your budget | To calculate your budget |
| Purchases you add yourself (amount, merchant or description, category, date, optional note) | You | To include spending that is not in a connected bank, or when you have not connected one |
| Bank connection details (bank name, connection status, a Plaid connection ID) | Plaid, when you connect a bank | To show, sync and disconnect your bank connections |
| Bank account details (account name, last few digits, account type, balance) | Your bank, through Plaid | To show your accounts and match transactions to them |
| Bank transactions (merchant, amount, date, category, pending or posted, money in or out) | Your bank, through Plaid | To show your spending against your budget |
| A Plaid access key for each connection | Plaid | To fetch new transactions. It stays on our servers and is never sent to the app. |
| Time zone | Your device settings | To count each purchase on the right day and month, and to calculate your budget for your local date |
| Notification push token (a random identifier for the Headroom app on your phone) | Your device, when you turn on purchase notifications | To send purchase notifications to your phone. It is deleted when you turn notifications off in Headroom. |
| Server error records | Our servers | To find and fix problems. They contain error messages and, in rare cases, your account ID or a Plaid connection ID. They never contain transaction amounts, passwords or access keys. |
| Crash reports (error message, the part of the app's code involved, device model, iOS version, app version) | The app, through Sentry | To find and fix crashes. They never include transaction amounts, merchant names, email addresses or your account ID. |
We do not collect your bank username or password (you enter those with Plaid, not with us), your location (only your time zone setting), contacts, photos, device advertising ID or browsing activity. We do not record your screen or your sessions in the app. Connecting a bank is optional; you can use Headroom with only the budget and purchases you enter.
We use your information only to run Headroom for you:
What we never do: we do not sell or rent your personal information, use it for advertising, share it with data brokers, or track you across other apps and websites. We do not use your information to train artificial intelligence models. If we ever want to use it for a new purpose, we will ask for your consent first.
Consent. By creating an account, you consent to the uses above. Connecting a bank and turning on notifications are separate choices you make yourself. You can withdraw consent at any time by turning off notifications, disconnecting a bank or deleting your account (section 7).