Privacy Policy

Sgt Steward (formerly STEWARD) is a personal and small-business finance app operated by Renard Flowers (“we”, “us”). It helps you budget, track debts and giving, and keep the books for your businesses. Questions about this policy or your data go to rflowers@virtusinvestmentgroup.com.

Account details: your email address and password (stored only as a secure hash by our sign-in provider).

What you enter: spending, income, debts, budgets, goals, business transactions, files you import, and the people you invite.

Bank data, only if you link a bank: account names, the last four digits of account numbers, account types, balances, and transactions (date, amount, merchant and the bank’s category). We do not receive your bank username or password, full account or routing numbers, or your identity details.

Notifications: if you turn on push notifications, a device address your browser gives us so we can send them.

We do not use advertising, tracking or analytics tools. The only cookies are the ones that keep you signed in.

We use Plaid Inc. to connect to your bank. When you choose “Link a bank”, Plaid’s own window opens, you sign in to your bank there, and you choose which accounts to share. Plaid then gives Sgt Steward read-only access to the data above. Sgt Steward cannot move money, make payments, or change anything at your bank.

Plaid’s handling of your information is described in the Plaid End User Privacy Policy. By linking a bank you agree to it and to this policy.

The access token Plaid issues for your connection is encrypted before we store it, and no one using the app, including other members of your household or business, can read it.

Only to run Sgt Steward for you: showing your money, suggesting categories, sending reminders and reports you ask for, and keeping your books.

We do not sell, rent or trade your data, and we do not use it for advertising.

Your Personal space is private to you. A Household space is shared with the household members you invite. A Business space is shared only with the partners or viewers invited to that one business. Members never see each other’s Personal spaces or businesses they were not invited to; the database enforces this.

Bank lines go only to the space you choose for each account. If you send an account to a shared space, the members of that space can see those transactions.

We share data with no one else except the service providers that run Sgt Steward, each under its own security and privacy commitments: Supabase (database and sign-in), Vercel (hosting), Plaid (bank connections), and your browser’s push service if you turn on notifications. We may disclose data if the law requires it.

All traffic is encrypted with HTTPS. The database is encrypted at rest, and bank access tokens are encrypted a second time by Sgt Steward. Every table is protected so each person can reach only the spaces they belong to. Administrative access is limited to the operator.

While your account is open, we keep your data so the app works, including history you can look back on.

Disconnecting a bank (Settings → Bank connections → Disconnect) immediately tells Plaid to end our access and deletes the stored access token and any lines you had not yet reviewed. Transactions you already added stay in your records until you delete them.

Deleting your account: email rflowers@virtusinvestmentgroup.com from the address on your account. Within 30 days we will disconnect any linked banks and permanently delete your account and all data in your Personal space and in any space you alone own. Records in shared spaces that you created may remain for the other members, without your account attached. Deleted data may remain in our providers’ encrypted backups until those backups expire on their normal schedule.

We review this policy at least once a year.

You can see and edit everything you have entered, export your books, disconnect banks at any time, remove members from spaces you own, and ask us for a copy of your data or to delete it by emailing rflowers@virtusinvestmentgroup.com.

If we change this policy we will update the date above, and for significant changes we will tell you in the app.