Responsible operator
ZHONGYI JIA, the mainland China individual identified in the Operator Disclosure, is responsible for RetireStride's handling of personal information. Privacy requests may be sent to [email protected].
Information processed without an account
When you run a projection, the assumptions visible in the calculator are sent to the RetireStride API so it can return a result. The calculation endpoint does not create a plan or write those assumptions to the business database. Your editable draft is kept in browser storage on your device until you clear it or reset the calculator.
Founding tester applications
A tester application stores your email address and fixed-choice answers about your retirement timeline, preferred manual or Plaid testing mode, feedback availability, primary planning goal, and bounded referral source. It does not request balances, account numbers, institution credentials, tax identifiers, or a free-form financial history. Applying does not create a product account or subscription.
RetireStride uses this information only to confirm your email, select a balanced testing cohort, send an invitation, and coordinate product feedback. Unconfirmed applications expire after seven days. Confirmed applications expire after 180 days unless invited sooner. The confirmation email includes a private link that deletes the application immediately. Confirmation and management tokens are stored only as one-way hashes.
Information processed with an account
Account data includes your email address, optional display name, password hash, verification and security state, session information, and the versions of the Terms and Privacy Notice acknowledged at registration. If you choose to save information, RetireStride also stores your households, plans, assumptions, calculation history, manual balances, and statement-summary metadata.
Optional Plaid connected accounts
If you choose to connect an institution, Plaid and the institution process the login and consent flow. RetireStride receives an Item identifier and access token. The token is encrypted at rest with a versioned application key and is never returned to the browser, included in exports, or written to logs.
After you acknowledge the connected-data notice and complete Plaid Link, RetireStride stores a normalized history for supported USD bank and credit-card accounts. Stored fields can include provider account and transaction identifiers, account labels and masked suffixes, account type, balances, transaction and authorization dates, amounts, currencies, pending state, merchant and transaction descriptions, payment channel, location fields returned for a transaction, counterparties, Plaid categories, and later provider corrections or removals.
RetireStride uses this history to provide spending summaries, cash-flow trends, retirement-planning inputs you choose to apply, categorization, and requested care alerts. It does not store arbitrary raw Plaid responses and does not use connected financial data for advertising, credit or insurance eligibility, sale or rental, or generalized model training. Investment, liability, Identity, and Auth products are not collected without a separately enabled feature and authorization.
Connected data remains while your account and the relevant feature are active. Disconnecting requests provider-side Item removal, clears the encrypted token, and by default deletes the local accounts, transactions, balances, and summaries for that connection. Account deletion attempts to revoke active Items before all local records are deleted. Plaid may retain information under its own policies and legal duties.
Membership and payment processing
Dodo Payments acts as merchant of record for paid memberships. Dodo processes checkout identity, billing address, payment method, charge, tax, invoice, refund, and dispute information under its own privacy terms. RetireStride sends the account email, display name, internal user reference, selected tier, and billing period. RetireStride stores only provider customer and subscription identifiers, tier, billing period, lifecycle status, renewal or end dates, test-mode status, and sanitized webhook evidence. It does not receive or store complete card or bank-payment credentials.
Optional Google sign-in
If you choose Continue with Google, Google's identity script and services process the request under Google's own terms and privacy practices. RetireStride receives an ID token and verifies it on the server. It stores Google's stable account identifier, the email and name returned for the account, authentication timestamps, and the link to your RetireStride user record. RetireStride does not receive your Google password and does not request access to Gmail, Drive, contacts, payments, or financial accounts.
A Google identity is not silently attached to an existing password account merely because the email addresses match. Contact support if you need help with a possible duplicate account.
Review the Google Privacy Policy and Google Terms of Service before choosing this optional sign-in method.
Cookies and browser storage
RetireStride uses same-origin session and CSRF cookies that are necessary for account authentication and request security. The anonymous calculator may keep an editable draft in browser storage on your device. RetireStride v1 does not currently use advertising cookies or cross-context behavioral advertising. If you load optional Google sign-in, Google may use cookies or similar technologies under its own policies.
Aggregate template acquisition measurement
When a recognized RetireStride template or campaign link brings you to the site, the browser may keep a bounded source label and template version in session storage for the current tab session. Recognized attribution parameters are removed from the visible URL. RetireStride may increment daily aggregate counters for a fixed set of actions such as opening the template page, starting or completing a Checkup, creating an account, saving a first plan, or starting Planner checkout.
Fixed counters may also record calculation, login, or scenario-save failures; preparing a scenario copy; changing the selected saved versions to compare; and aggregate PDF report-job status. Newly added failure, copy, and comparison counts begin with the release that activates them. Earlier absence is unknown, not zero.
These counters contain only the calendar date, fixed event, fixed source, template version, fixed destination, and total count. They do not contain a visitor ID, user or session ID, IP address, User-Agent, free-form referrer, email, financial value, calculation result, account label, filename, or raw URL. They measure recorded interactions, not unique people or causal attribution.
Statement imports stay local
CSV, OFX, and QFX source files and normalized transaction rows are processed in the browser and are not uploaded to RetireStride. Signed-in users may separately choose to save a summary containing dates, counts, format, currency, and annualized spending. The raw file and transaction descriptions are not part of that API request.
If you explicitly apply a saved summary to a plan, RetireStride uses the saved summary's UUID to replace the selected scenario's annual spending estimate and run a new calculation. Minimal plan history retains that UUID and the statement ending year; it does not add the raw file or transaction rows to the plan.
How information is used
- Provide calculations, saved plans, account security, exports, and deletion.
- Synchronize authorized financial history and provide summaries, trends, and alerts.
- Send verification, recovery, email-change, and security notices.
- Protect the service from abuse and diagnose availability or security failures.
- Maintain encrypted backups and recover the service after an incident.
RetireStride does not sell personal or financial information.
Service providers and infrastructure
Hosting, DNS/CDN protection, email delivery, encrypted backup storage, and monitoring providers may process the minimum information needed to provide those services. The application is designed to keep financial inputs, account-action tokens, raw statement files, and normalized transactions out of logs and monitoring payloads.
RetireStride is designed for infrastructure hosted in a United States region, but authorized service administration and support may occur from other countries. The operator's access from mainland China is a cross-border administration activity. Provider locations, transfer safeguards, and any legally required separate notices or consents must be confirmed in the final professional review before registration opens.
Retention and deletion
Live account and normalized connected financial data remains while the account and relevant feature are active, until you disconnect and choose deletion, delete the account, withdraw an applicable consent, or the service removes it under a retention rule. Account deletion removes linked live business records. Encrypted backups use a rolling retention window of no more than 30 days, and restored accounts remain locked until individually reviewed. Browser storage is controlled from your device and is not cleared by deleting a server account.
Your choices
- Use the calculator without an account.
- Choose whether to save a plan or statement summary.
- Choose whether to authorize, connect, synchronize, apply, or disconnect Plaid data.
- Cancel a paid membership through the billing portal.
- Download a versioned account export after password confirmation.
- Permanently delete the account after password and exact-text confirmation.
- Clear local browser data using your browser controls or calculator reset.
US privacy requests
Depending on where you live and which law applies, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information, and to appeal a denied request. RetireStride does not discriminate for making a privacy request. Send a request from the account email to [email protected]. RetireStride may request information reasonably necessary to verify identity and authority before acting, and may retain information required for security, legal, or permitted internal purposes. Final state-specific procedures and response periods require legal review before registration opens.
Security and limits
RetireStride uses same-origin sessions, CSRF protection, ownership checks, rate limits, encrypted transport, off-host encrypted backups, and restricted production secrets. No system can guarantee absolute security. Do not enter Social Security numbers, account passwords, payment-card details, or information the interface does not request.
Children and changes
RetireStride is intended for adults planning for retirement and is not directed to children under 18. Material changes to this notice will receive a new version and an updated effective date. A new acknowledgment may be required when account use is materially affected.
Contact
Privacy and account-data questions can be sent to [email protected]. See the Contact page for safe reporting guidance. The responsible party is identified in the Operator Disclosure.