Privacy Policy

Effective February 14, 2026

Operator: Apps4Households (a sole proprietorship)

1. Scope

This Privacy Policy explains how Apps4Households ("Apps4Households," "we," "our," or "us") collects, uses, discloses, and protects information when you use the Vylo application and related services (collectively, the "Services").

Vylo is a product operated by Apps4Households.

This Policy applies to information collected through:

• the Vylo web and mobile experiences;
• support interactions; and
• related Services.

2. Information We Collect

We may collect the following categories of information.

A. Account and Profile Information

• Name
• Email address
• Authentication and account security metadata

B. Financial and Transaction Information

When you choose to connect financial accounts through our integration partners, including Plaid, Quiltt, and Mastercard connectivity services, we may receive:

• linked account metadata (for example, account type, mask, institution details);
• transaction history;
• balances;
• categories and budgeting data; and
• notes and categorization preferences.

Important: Vylo does not receive or store your bank login credentials when you connect accounts through provider-hosted connection flows.

Financial Connectivity Providers

Vylo uses financial connectivity providers, including Plaid, Quiltt, and Mastercard connectivity services, to gather data from financial institutions at your direction. By using our Services to connect a financial account, you authorize Apps4Households and the applicable provider to access and transmit your financial data so Vylo can provide the Services.

Your use of those providers may be subject to their own terms and privacy policies. Plaid's legal terms are available at: https://plaid.com/legal

We share only the data necessary to provide the Vylo Services and do not sell your financial data.

C. Billing and Purchase Information

If you subscribe or start a trial, we may process billing status, subscription identifiers, purchase state, trial status, renewal status, cancellation status, payment method metadata, invoice metadata, and related support details.

Web billing is processed through Stripe. If Vylo offers in-app purchases or App Store subscriptions, they are processed by Apple. Vylo does not store full card numbers or bank payment credentials.

D. Household and Collaboration Data

• Household membership details
• Invitations and role/access information

E. Device and Usage Information

• Log and event data (for example, IP address, browser/device type, timestamps);
• diagnostic and security telemetry; and
• cookie and session data necessary to operate and secure the Services.

If you enable notifications, we may process device identifiers, push tokens, notification preferences, and delivery status so we can send account, security, import, and product notifications.

F. Communications

Information you provide when contacting support or submitting feedback.

3. Sources of Information

We collect information:

• directly from you;
• automatically through your use of the Services; and
• from authorized third-party integrations when you choose to connect external accounts, subscribe, receive notifications, or contact support.

4. How We Use Information

We use personal data to:

• provide, operate, and improve the Services;
• synchronize account and transaction data;
• power budgeting, categorization, and insights features;
• secure accounts and detect fraud or abuse;
• communicate with you about account, product, and security matters;
• comply with legal obligations; and
• enforce our Terms.

Vylo uses automated rules and may use AI/model services to help categorize transactions, detect patterns, and generate insights. To support these features, Vylo may process limited transaction, merchant, category, account-type, budget, and structured financial snapshot data with an AI/model provider. AI-generated outputs support the Services and are not financial, investment, tax, legal, or accounting advice.

5. Legal Bases / Permission Model

Where applicable, we process personal data based on:

• your consent (for example, when connecting financial accounts);
• performance of our contract with you;
• legitimate interests (including security, reliability, and product improvement); and
• legal compliance obligations.

6. How We Share Information

We do not sell your financial data.

We may share information with:

• service providers who process data on our behalf, including hosting, database infrastructure, diagnostics, analytics where enabled, AI/model processing, communications, and email delivery;
• financial connectivity providers, including Plaid, Quiltt, and Mastercard connectivity services, at your direction;
• payment and subscription processors, including Stripe and Apple, when you subscribe, restore a purchase, or manage billing;
• push notification services, including Apple Push Notification service, if you enable notifications;
• household collaborators you explicitly authorize;
• legal or regulatory authorities when required by law; and
• a successor entity in connection with a merger, acquisition, financing, or asset sale, subject to appropriate safeguards.

7. Data Security

We implement administrative, technical, and organizational safeguards designed to protect personal data, including:

• encryption in transit;
• access controls;
• monitoring and logging; and
• secure credential and token handling practices.

However, no method of transmission or storage is completely secure.

8. Data Retention

We retain personal data only as long as reasonably necessary to:

• provide the Services;
• comply with legal, regulatory, tax, or accounting requirements;
• resolve disputes; and
• enforce agreements.

When data is no longer needed, we delete or de-identify it in accordance with our retention practices.

If you request account deletion, Vylo disables app access and begins deletion of your account data. Some provider cleanup, billing records, security logs, or legally required records may be retained for a limited period where needed to complete deletion, prevent fraud, resolve disputes, meet legal obligations, or maintain audit integrity.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion of your data; and
• receive a portable copy where applicable.

You may also close your account at any time.

Vylo provides account export and account deletion controls in the Services where available. Export files are prepared for your access and download access expires after a limited period. Deletion disconnects or revokes connected providers where supported and removes or de-identifies account data except where retention is required or permitted by law.

To submit a privacy request, contact: support@myvylo.com

10. Cookies and Similar Technologies

We use cookies and similar technologies for:

• authentication;
• session management;
• security; and
• product performance and analytics.

You can manage cookies through your browser settings, but disabling certain cookies may affect functionality.

11. Children

Vylo is not intended for individuals under 18, and we do not knowingly collect personal data from children under 18.

If we learn such data has been collected, we will take steps to delete it as required by law.

12. International Transfers

Where personal data is transferred across borders, we apply reasonable safeguards consistent with applicable legal requirements.

13. Changes to This Policy

We may update this Privacy Policy periodically.

If changes are material, we will provide notice through the Services and/or by email where appropriate.

Continued use after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

Apps4Households
support@myvylo.com