Privacy

Compass is operated by Compass Software (sole proprietorship, eenmanszaak), Sarphatipark 88-2, Amsterdam, the Netherlands. KVK 42084074. BTW NL005438006B23. For privacy questions or data requests: privacy@compassapp.money.

When you sign in with Google, we collect your email and name. When you use the app, we collect what you give us: your income, plan, goals, transactions, and personality answers. We log how you use the app for bug-fixing and product improvement, and we record basic technical information like device type, browser, and IP address for security.

We don’t buy data. We don’t pull from third parties.

Financial data exists in Compass because the app needs it to project when you’ll reach your goals. Account data lets us sign you in. Behavioural data helps us fix bugs and improve the product. Technical data is for security and abuse prevention.

We don’t use any of this for advertising.

We keep your data while your account is active, plus 30 days for backup expiry. Tax-relevant records like invoices and transactions stay for 7 years, per Dutch law. You can ask us to delete sooner. See “Your rights” below.

Compass uses Supabase (Frankfurt) for database and authentication, Resend (Amsterdam) for email, Vercel (Frankfurt) for hosting, and Paddle (London) for billing and tax handling. When you connect a bank account, we use the open-banking providers Salt Edge or Plaid, depending on your region.

When you connect a bank account, your bank credentials are never seen or stored by Compass. They are held by our licensed open-banking provider, which holds an AISP authorisation under PSD2 or equivalent regulation in your region. Compass only receives the read-only transaction data you authorise.

Most of our subprocessors are EU-based. Where data leaves the EU, it is protected by Standard Contractual Clauses.

Under GDPR and equivalent laws in your region, you can ask us to access, correct, delete, restrict, port, or withdraw consent for your data. You can also object to legitimate-interest processing.

For California residents under the CCPA, the same rights apply. You can also opt out of any sale of personal information. Compass does not sell personal information.

For UK residents under UK GDPR, the rights above apply identically.

To exercise any of these, email privacy@compassapp.money. We respond within 30 days.

You can also lodge a complaint with your local data protection authority. In the Netherlands, that is Autoriteit Persoonsgegevens.

Compass uses only essential session cookies for keeping you signed in. No third-party analytics, no advertising trackers.

Compass is not for users under 18.

If we change something material, we update the date above and email everyone with an active account.

9 July 2026.