Privacy Policy

Last updated: October 21, 2026

Simura is operated by Cubit Vault LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and share information when you visit this website (simuraapp.com), use the Simura app (app.simuraapp.com or our native mobile apps), or otherwise interact with us. It covers the website and the app as a single product.

Information we collect

We collect information in a few different ways, depending on how you use Simura:

  • Waitlist. If you join our waitlist, we collect your email address. If you arrived through a tagged link from one of our partners, a session cookie remembers which campaign sent you, and that campaign tag (nothing that identifies you) is saved with your signup. If you email us, we receive whatever you choose to include in your message.
  • Account information. If you create a Simura account, we collect information needed to set up and secure your account, such as your email address and authentication details.
  • Financial account data. You can enter account information yourself, such as balances, interest rates, and minimum payments, and we store what you enter to provide the service. On the free tier, that's the only way account data gets into Simura. Bank linking is optional and part of Simura Plus. If you choose to link a bank or financial account, we use Plaid to securely retrieve account and transaction data on your behalf. We do not receive or store your bank login credentials — those are handled directly by Plaid.
  • Billing information. If you subscribe to Simura Plus, payment is handled by a third-party processor — Stripe for web-based billing, or Apple's App Store / Google's Play Store for in-app purchases, depending on where you subscribe. We do not receive or store your full payment card details.
  • Usage and analytics data. We use standard web and app analytics to understand how Simura is used — for example, which pages or features are visited, general device/browser information, and aggregate usage patterns. On the mobile app, we also collect crash reports: crash logs, diagnostics, and device/OS/app version information, so we can find and fix bugs. When you're signed in, this data is tagged with your account's random ID, so we can tell which account a crash or event came from; it never includes your name or email. We never send account balances, transaction amounts, or other financial figures to our analytics or crash-reporting tools. We do not use this data for advertising, and we do not sell it.

How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Simura app and website
  • Create and secure your account
  • Process subscriptions and billing
  • Respond to your questions and support requests
  • Let you know when Simura launches, or when pricing or new features are ready, if you've joined our waitlist
  • Send you product updates and marketing emails, which you can unsubscribe from at any time
  • Understand usage patterns so we can improve the product
  • Meet legal and security obligations

Cookies and analytics

On this website, we load Google Analytics only after you accept analytics cookies in the cookie banner; if you decline, we don't load it. Separately, if you arrive through a tagged partner link, we set a session cookie that only remembers which campaign sent you; it's deleted when you close your browser and is used solely to credit that campaign if you join the waitlist. In the mobile app, we use Google Analytics for Firebase and Firebase Crashlytics as described above, to understand app usage and to catch and fix crashes. These are used for product improvement, not advertising, and we do not use third-party advertising trackers.

Who we share information with

We don't sell your personal information. We share information only with the service providers that help us run Simura, including:

  • Supabase — our database, authentication, and backend infrastructure provider
  • Plaid — for securely linking and syncing financial account data
  • Stripe — for processing web-based subscription payments
  • Google (Firebase Analytics and Crashlytics) — for crash reports and diagnostics, basic app-interaction events, a device/app-instance identifier, and your account's random ID from the mobile app. We do not collect your device's advertising ID.
  • Apple and Google — for processing in-app purchase payments, where offered through their respective app stores

Each of these providers only receives the information necessary to perform its function, and is bound by its own privacy and security practices. We may also disclose information if required by law, or to protect the rights, safety, or security of Simura or our users.

Data retention

We retain your information for as long as your account is active or as needed to provide you the service. You can delete your account at any time. Deleting it in the app (Settings → Delete my data) takes effect immediately and permanently removes your account and the data tied to it, including linked bank connections, transactions, budgets, and scenarios. If you can't use the app, you can email us to request deletion, and we'll complete it within 30 days. See how to delete your account for the full steps.

A few things are kept after deletion, briefly or under someone else's policy: if Plaid can't be reached at deletion time, a reference needed to retry revoking your bank connection, removed once revocation succeeds; payment records held by Stripe, Apple, or Google under their own policies and legal requirements; messages you've sent us, kept only as long as needed to handle them; a waitlist email, which is separate from your account and removed on request; and crash and analytics data in Firebase, which is tagged with your account's random ID (not your name or email) and expires under Firebase's retention settings. Once your account is deleted, that ID no longer points to anyone.

Your choices

You can:

  • Access or correct your account information by contacting us or through in-app account settings, where available
  • Delete your account and data, either in the app or by emailing us
  • Unsubscribe from waitlist or marketing emails at any time using the link in those emails, or by contacting us
  • Unlink a connected bank account at any time from within the app

Children's privacy

Simura is not directed at children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we'll remove it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

Contact us

Questions about this Privacy Policy or how we handle your data? Email us at [email protected].