Last updated October 15, 2026

Privacy, in plain language.

This policy covers the Frwrd website, early-access list, and the current private household pilot.

Who we are

Frwrd is an independent household-finance project at frwrd.club. A separate business is being established for its public subscription service. The website currently accepts early-access interest, not paid subscriptions. You can reach the project operator through our contact form, including for privacy requests. We will identify the contracting company and update this notice before opening paid registration.

Information we collect

• Early access: your email address, selected region, plan preference, consent version and signup time.
• Contact requests: your email address, selected topic, message and submission time. Please do not send passwords, bank details, identity documents or statements.
• Private pilot: account identity and password hashes, household membership, financial records you import or authorize, planning settings, and connection credentials needed to provide the service. Public visitors cannot access pilot records.
• Security: technical request information needed to serve the website and prevent abuse. The signup service rate-limits using a daily keyed digest of a network address, not a stored raw address.

Why we use it

We use early-access details to contact you about availability and understand which launch features people need. We use contact messages to respond and handle requests. Pilot data supports the household features requested by its members. We do not sell personal information or use it for targeted advertising. Joining the early-access list does not authorize unrelated newsletters or third-party marketing.

Cookies and optional analytics

Essential first-party cookies remember your privacy choice and, after a signup, let that browser remove its own entries. They last up to six months. Signed-in application sessions use separate essential authentication cookies.

Only if you select “Allow analytics,” the marketing site sends a small set of events such as a page view, early-access button click or completed signup. The analytics database stores aggregate daily counts by page and event. It does not store your email, account records, browsing history, advertising ID or a persistent visitor identifier. It cannot count unique people. You can withdraw this choice using “Cookie preferences” in the footer. Global Privacy Control and Do Not Track prevent optional events.

Providers and sharing

Our website is hosted on DigitalOcean infrastructure in the United States. Domain and DNS services use Cloudflare. We share information with service providers only as needed to run the website and respond to requests, or when required by law. Email delivery may involve the email provider used to contact you.

In the private pilot, users who choose to link an account authorize Plaid to provide financial data. Plaid’s processing is described in its End User Privacy Policy. Supported institution coverage and history vary. Household sharing makes shared records visible to the household’s members. Agent connections require a separate grant; joining the early-access list never grants access to financial data.

How long we keep it

Early-access entries are removed when you leave the list or after twelve months without renewal of your interest. Contact requests are retained for up to twelve months unless needed to resolve an ongoing request or meet a legal duty. Abuse-control counters expire within 48 hours. Optional aggregate analytics are kept for thirteen months. Infrastructure security logs may contain network addresses and are retained under the server’s limited log-rotation schedule.

Pilot records remain while the household uses the service, subject to deletion requests and any lawful retention needs. Encrypted recovery backups may retain deleted pilot records until the backup rotation completes, currently approximately 30 days.

Your choices and requests

Use Leave the early-access list on the browser you used to join, or send a privacy request to access, correct or delete your details. We may ask you to verify control of the relevant email address before acting. Depending on applicable law, you may have additional rights, including objecting to processing, withdrawing consent or complaining to a competent data-protection authority.

Security and international use

We use HTTPS, limited service access and server-side handling of credentials. Pilot connection tokens are encrypted on the server; we do not claim that every database field is encrypted or that any system is risk-free. Information may be processed in the United States even if you access Frwrd from Colombia or another country.

Children and changes

Frwrd is intended for adults aged 18 or older. Please do not submit children’s personal information. We will update this page when practices change and obtain new permission where required for a new use of previously collected information.