Privacy Policy

How Warm Technologies LLC collects, uses, and protects information for the Warm service.

Last updated: October 4, 2026

1. Who we are

Warm Technologies LLC ("we") runs Warm from Pacifica, California. This policy covers https://warm.io, https://app.warm.io, and the iOS app. Data is processed in the United States.

  • Read-only. We cannot move your money. We do not store bank passwords.
  • We do not sell financial data. We do not use it for ads.
  • Warm is paid by subscriptions, not ads in the product.

2. What we collect

  • Account: email, login ids (including Apple or Google sign-in), settings.
  • Money data: balances, holdings, and transactions from Plaid, plus what you enter or import. Plaid holds bank passwords. Connections are read-only.
  • Billing: plan and refund status from Stripe, Apple, and RevenueCat.
  • Support: messages you send, including to support@warm.io.
  • Household: email and access for people you add.
  • AI: if you turn on AI features, your Warm Chat conversations, your saved daily briefs and weekly reviews, what the AI received for each brief, and any feedback you give on brief items. We also keep usage records for each AI request (model, token counts, cost, timing), not the content.
  • Diagnostics: crashes, named product events (sign-in, onboarding, dashboard, bank link, billing clicks, AI brief opens and clicks), and a user id, sent to PostHog. Not used for ads.

3. How we use it

To run, secure, and improve Warm; show your picture; bill you; send account email; answer support; and follow the law. Insights and AI do not change your account on their own. Unsubscribe from marketing mail. You still get sign-in, billing, and security mail.

4. Who else sees it

Only as needed to run Warm. Plaid, Stripe, Apple, and RevenueCat also follow their own terms. Supabase, Cloudflare, Resend, Fastmail, and PostHog act as our service providers. For AI features, Cloudflare (Workers AI, for daily briefs and weekly reviews), OpenAI (for daily public-news research, which includes no user data), and OpenAI or Google (for Warm Chat) also act as our service providers, as described in section 5. Household members you add can see shared data. If you connect an AI or MCP tool, that tool's terms apply. We may share if the law requires it, to protect users, or in a sale of Warm (this policy follows the buyer). We may use de-identified totals that cannot reasonably identify you.

For Apple refunds, we may tell Apple if the purchase was delivered and if a trial was used. Apple decides the refund.

Policies: Plaid, Stripe, Apple, RevenueCat.

5. AI features

AI features, including Warm Chat, daily briefs, and weekly reviews, are off until you turn them on. You can turn them off in Settings at any time.

  • What the AI receives: the financial information needed for the task, such as amounts, dates, categories, account labels like "Checking A", and sometimes merchant or institution names. Before sending your Warm data, Warm replaces account names with labels and removes your display name, contact details, account numbers, and identifiers it can detect. A mix of merchants, amounts, and dates can still point to you, so we do not call this anonymous. If you share a household, turning on AI features can send shared household data to the AI.
  • What you type in Warm Chat: sent after we try to remove personal details. Please do not type names, contact details, or account numbers.
  • Daily briefs and weekly reviews: processed with Cloudflare Workers AI. Cloudflare states that Workers AI does not store this content or use it to train models, and we keep AI Gateway logging off. Warm writes every sentence about your money from fixed templates; the AI only chooses and orders them. Each brief shows what the AI received.
  • News in briefs: once a day Warm researches public news without any user data, then matches stories to your accounts inside Warm. News sentences are written by that research step from cited public sources.
  • Warm Chat: processed by OpenAI or Google as our service providers under their business API terms. Requests pass through Cloudflare AI Gateway with logging off, and we ask OpenAI not to store responses. The provider may keep requests briefly under its terms.
  • Keeping and deleting: saved briefs stay while you are subscribed, are hidden if your subscription ends, and are deleted 30 days later. Delete them at any time with "Delete AI history" in Settings, which also turns AI off. Briefs are included in your data export. Warm Chat conversations are saved until you delete them in Warm Chat; "Delete AI history" does not delete them. All AI data is deleted with your account.
  • AI never moves money or changes your accounts. Briefs are not financial, tax, or investment advice.

6. Security and deletion

We encrypt data in transit and at rest. No system is perfectly safe. Keep your login secret.

Data stays while the account is active. my.plaid.com stops new Plaid data. Disconnect in Warm stops sync and may remove that connection's records. Delete the account in Settings to remove remaining personal data from live systems, except legal, tax, billing, or security records, and backups that expire on their cycle.

7. Your rights

Access, correct, export, or delete in the app, or email support@warm.io. We may confirm it is you. We honor California know, delete, correct, port, and opt-out rights. We do not sell data or share financial data for ads. We will not punish you for using these rights. Age 18+.

8. Changes

We post a new date here. For a material change we also email you when we can. Keep using Warm after that date and you accept it. If not, stop and delete the account.

9. Contact

support@warm.io, Contact, Warm Technologies LLC, Pacifica, California.