Privacy Policy

Vivid Finance ("Vivid") is a financial wellness platform provided by Kin Workplace Software, Inc. ("Kin," "we," "us," or "our"), an Illinois corporation. This Privacy Policy explains what information we collect when you use Vivid, how we use and protect it, who we share it with, and the choices you have. It applies whether you use Vivid directly or through an employer-sponsored program.

Account and profile information

Your name, email address, and a password (stored only as a secure hash) — or, if you sign in with Google, the name and email Google shares with us. Profile details you choose to provide or confirm — in Settings, during onboarding, or in conversation with the coach — such as your date of birth, salary, home ownership and mortgage terms, retirement targets, and how you describe your own habits.

Financial data, via your connected institutions

When you connect a financial account through our data-access providers (Plaid and Quiltt — see "Service Providers" below), we receive on your behalf:

• Account names, types, masks, and balances
• Transaction history: dates, amounts, merchant names, categories, and where available the merchant's location (city, region, and map coordinates), which we use to recognize travel and out-of-pattern spending
• For investment accounts: holdings and investment transactions
• For credit and loan accounts: balances, rates, and payment information where available

What we never receive or store:the username or password you use at your financial institution. You authenticate directly with your institution through the provider's secure connection flow. We also do not collect your full account or routing numbers.

Content you provide

Messages you send to the Vivid coach, goals you create, and feedback you submit. Remember that coach conversations can include financial details — see "How AI Processing Works" below.

Usage information

We record which features you use (for example, pages viewed and actions taken) tied to your account and a randomly generated session identifier, together with a summary of your financial-health scores at that moment, so we can understand which features help people in different situations. Inside the app we use first-party usage tracking only. On our public website and legal pages we use Vercel Web Analytics, a cookieless, aggregate page-view service that does not identify you. We use no advertising trackers anywhere. Like nearly all online services, our hosting infrastructure processes standard technical logs (such as IP address and browser type) for security and operations.

Before you have an account

If you join our waitlist, we keep your email address, where you heard about us, and any campaign tags from the link you followed, so we can send you occasional updates. Every message has a one-click unsubscribe that also deletes your address from the list. Joining the waitlist does not create an account, and deleting an account later does not remove a separate waitlist entry — use the unsubscribe link for that.

• Show your accounts, transactions, cash flow, debt, and savings in one place
• Compute your financial health measures and track your progress toward goals
• Generate forecasts, detect spending anomalies, and send you relevant alerts
• Personalize educational guidance to your financial situation and habits
• Power the AI coach and its memory of your past conversations
• Operate, secure, and improve the Service, and prevent fraud and abuse
• Communicate with you about the Service

We do not use your information for advertising, and we do not use your financial data to build marketing profiles.

Vivid's coach and insight features are powered by large language models from Anthropic, with supporting text embeddings from OpenAI. To answer your questions usefully, the coach is given relevant context from your account — which can include balances, transactions, goals, and prior conversations — along with the message you send.

• Our AI providers are contractually prohibited from training their models on your data
• Our AI providers do not keep the content of a request once they have responded. Every AI request Vivid sends carries a zero-data-retention requirement, so it only reaches providers that have agreed not to store prompts or responses; a provider that cannot honor that requirement does not receive the request
• AI requests are routed through our hosting provider's gateway (Vercel AI Gateway), which does not retain request content either. Depending on availability, a request to Anthropic's models may be served by Anthropic directly or from Anthropic's models hosted on Amazon Web Services or Google Cloud, under the same no-retention, no-training terms; the embeddings model is OpenAI's, served through Microsoft Azure
• Vivid itself does store your coach conversations, in your account, so the coach can remember context across sessions. They are deleted when you delete your account — see "Data Retention and Deletion"
• The coach is an AI system, not a human, and its responses can be inaccurate — verify important information independently

We share your information only with service providers that process it on our behalf to run Vivid, under contracts that restrict their use of it:

When you connect an account, Plaid and Quiltt also process your data under their own end-user policies: Plaid End User Privacy Policy · Quiltt Privacy Policy.

Beyond service providers, we disclose personal information only: to comply with law or valid legal process; to protect the rights, safety, or property of you, Kin, or others; or as part of a merger, acquisition, or sale of assets (in which case this Policy continues to apply to your data and we will notify you of any change in ownership).

We do not, under any circumstances, sell your personal or financial information, and we do not share it for cross-context behavioral advertising. This is both our policy and a contractual commitment we make to our data-access providers.

If your employer or another organization sponsors your access to Vivid, the sponsor learns only that the email address it enrolled has an active account — never your financial data, coach conversations, or activity. If we ever provide usage reporting to a sponsor, it will be aggregated and anonymized, and only for groups large enough that no individual can be identified.

We keep your information while your account is active so the Service can work for you.

When you delete your account (Settings → Delete Account), we:

• Revoke our access to your financial institutions at the data-access providers
• Delete the stored access tokens for those connections
• Delete your personal data — accounts, transactions, goals, coach conversations, and profile

Deletion is scheduled the moment you ask for it. You have 30days to change your mind, after which your data is permanently deleted; you can also choose "Delete permanently now" to skip the waiting period. New bank data stops being retrieved as soon as deletion is scheduled. Residual copies in encrypted backups are purged on a rolling basis shortly afterward. If you subscribed, our payment processor keeps the billing records tax and accounting rules require; we do not keep your card details at any point. We may retain limited records where the law requires it or to resolve disputes and enforce our agreements, and we retain them only as long as needed for those purposes.

What we keep in anonymized form. After deletion, we retain anonymized (de-identified) performance measurements — for example, how accurate our forecasts were and how our coaching features performed. These records contain no transactions, account balances or identifiers, conversation content, or profile information— only forecast-accuracy figures, anomaly flags, and coaching-performance statistics such as response time and which tools the coach used, under a random code that is never linked back to you. We use these measurements to improve the Service and to understand financial outcomes across the Vivid community, and we commit to never attempting to re-identify this data.

Preventing repeated free trials. When a free trial starts, we record a one-way, keyed code derived from the institutions and the last four digits of the accounts you connected — never your full account numbers, and not linked to your name, email, or any account we hold. The code cannot be reversed to reveal which institutions it came from. It survives account deletion, because its only purpose is to tell whether the same set of accounts has started a free trial before, and we keep it only as long as needed for that purpose.

You can also disconnect an individual financial account at any time without deleting your account.

• All data is encrypted in transit (TLS) and at rest
• Bank-connection access tokens are stored in an encrypted vault, separate from application data
• Every request for your data is checked against your signed-in session on our servers, and database row-level security provides a second layer so that direct database access is also scoped to you
• Authentication uses session cookies scoped to our domain and sent only over encrypted connections; we never store your password in the browser
• Access to production systems is restricted to a small number of Kin staff; every read of a bank-connection credential is logged, as is access to your financial data through the app's main screens

We maintain administrative, technical, and physical safeguards designed to protect your information, consistent with the federal Gramm-Leach-Bliley Act safeguards framework. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you as required by law if a breach affects your information.

Your data is stored and processed in the United States.

You can, at any time:

• Access and review your data in the app
• Correct your profile details in the app, or email us to change your email address
• Disconnect any financial account, which stops future data retrieval for it
• Delete your account and data (Settings → Delete Account)
• Request a copy of your data, request deletion, or ask questions by emailing privacy@vividfinance.com

Depending on where you live, state law may give you specific rights over your personal information — including the right to know what we collect, to access it in a portable format, to correct it, to delete it, to opt out of the sale or sharing of personal information and of targeted advertising or certain profiling, and to appeal a decision we make about a rights request. We extend these rights to all Vivid users regardless of state.

• Sale, sharing, targeted advertising, profiling: we do not sell or share your personal information, do not serve targeted advertising, and do not make decisions producing legal or similarly significant effects about you by solely automated means — so there is nothing to opt out of
• To exercise any right: email privacy@vividfinance.com. We will verify your request using your account email and respond within 45 days. You may use an authorized agent with proof of authorization
• Appeals: if we decline a request, you may appeal by replying to our decision; we will respond to appeals within 45 days
• No discrimination: we will not discriminate against you for exercising your rights

We use cookies only for authentication and session management. Your browser's local storage holds settings such as your chosen view and filters, a random session identifier for first-party usage tracking, any campaign tags from the link that brought you to us, and a temporary bank-connection session while you are linking an account. We do not use advertising or cross-site tracking cookies, so there is no ad-tracking to opt out of.

Vivid is for adults. The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it.

We may update this Policy from time to time. If a change is material, we will tell you by email or by a notice when you next sign in, and we will update the "Last updated" date above.

Questions or requests about your privacy: