How we handle your data

Last updated 13 October 2026

Your money is personal. Here is, in plain words, what Lyrafolio keeps, what it never keeps, and how you stay in control. The app is still being built and opens to a small group first; these are the rules it is being built to, and this page will change only to give you more control, never less.

You choose how much to share

• Type it in yourself. Tell us where you invest and roughly how it's split. Nothing is connected, and you still get your plan. Approximate numbers are fine.
• Upload a statement. We read the numbers out of it, then delete the file within 3 days.
• Connect your accounts, read-only. The quickest way to a full picture. We can see your investments; we can't move your money.

What we keep

The numbers that make up your picture: accounts, what you hold, past transactions and balances, plus the goals and answers you give us. We keep them because your returns over one, three and five years, and the progress on your habits, can only be shown from history.

What we never keep

• Your brokerage username or password. When you connect an account, you sign in on the connection provider's own secure screen, not ours.
• Full account numbers. Only the last four digits, so you can tell your accounts apart.
• Your statement files, beyond the 3 days it takes to read and check them.

How it's protected

• Encrypted when it travels and when it's stored.
• The keys that let us read a connected account are encrypted again, separately, so a copy of our database alone can't use them.
• Each household's data is walled off at the database level, so one person can never see another's.
• No personal details in our logs.

Who else sees it

• Connection providers (such as Plaid) link your accounts, read-only, when you choose to connect.
• An AI service reads uploaded statements to pull out the numbers, under terms that don't let it use your data to train its models.
• Nobody else. We never sell your data, and there are no ads.

You stay in control

• Download everything we hold about you, any time.
• Disconnect an account any time; the connection is switched off at once.
• Delete your account and everything goes: connections are cut first, then your data is erased for good within 30 days.

Questions? Email hello@lyrafolio.com. For the website itself, see our privacy policy.