Effective: 2026-07-15 · Last updated: 2026-10-06
SwipeWise is a personal tool operated by Cannappy LLC for the sole use of its owner (the "operator"). The operator is currently the only user and the only data subject. This policy describes how the tool handles data. If the tool is ever made available to other users, this policy will be updated and published before any external user is onboarded.
Via Plaid, the tool accesses the operator's own:
Data is retrieved from the operator's own financial institutions through Plaid, an account- aggregation provider, using credentials the operator enters directly into Plaid's secure Link interface. The tool never sees or stores banking login credentials.
Solely to give the operator a consolidated view of their own balances, transactions, and cash flow for personal budgeting and analysis. Data is not used for advertising, profiling of others, or any commercial purpose.
Data is stored in a private Cloudflare D1 database attached to the operator's Cloudflare account, encrypted at rest by Cloudflare. Plaid access tokens are additionally encrypted at the application level with AES-256-GCM before storage. The application is reachable only through Cloudflare Access, which restricts every page and API endpoint to the operator's authenticated identity — with two exceptions. The Plaid webhook endpoint bypasses Access so Plaid can deliver notifications, and is instead protected by cryptographic verification of every request as described below. And the operator's own phone app reaches its part of the API with a device token, issued only to a phone the operator has enrolled from inside the Access-protected dashboard; tokens are stored as hashes and can be revoked there. A copy of the data is kept on that phone, in the app's own storage and excluded from device backups. API secrets are held as Cloudflare Worker secrets and never committed to source control. Data in transit is protected with TLS 1.2+ end to end. Webhook requests from Plaid are cryptographically verified (signed-JWT verification with body-hash checks) before being processed.
Data is not sold or shared with any third party. Plaid is used only as the aggregation provider that supplies the data to the operator. See Plaid's privacy policy at https://plaid.com/legal/ for how Plaid handles data.
Data is retained only as long as useful to the operator and can be deleted at any time by
deleting the stored records and revoking each connection in Plaid (/item/remove), which
invalidates the access token. See the tool's Data Retention & Deletion Policy.
The operator is the sole data subject and consents to the collection, processing, and storage of their own financial data by using the tool.
Cannappy LLC · Sacramento, CA, US Requests regarding this policy can be directed to: amgmpro@gmail.com