Privacy Policy

Effective April 13, 2026. Last updated April 13, 2026.

This Privacy Policy explains how Kennedy & Price, Inc. ("Kennedy & Price," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the qifix desktop application and related services (collectively, the "Service"). By installing or using the Service, you agree to this Privacy Policy.

1. Who we are

qifix is operated by Kennedy & Price, Inc., a United States corporation. For privacy inquiries, data access requests, or deletion requests, contact us at privacy@qifix.app.

2. Information we collect

2.1 Information you provide

• Account information. Email address, password hash, and optional profile details you provide when creating an account.
• Support communications. Messages you send us by email or through in-app support channels.
• Beta program responses. Information you voluntarily submit when requesting beta access.

2.2 Financial information via Plaid

The Service uses Plaid Inc. ("Plaid") to connect to financial institutions you select. When you link an account through Plaid Link, Plaid collects information from your financial institution on our behalf, including your account balances, transaction history, account and routing numbers (where supported), and account holder name. This information is covered by Plaid's End User Privacy Policy, which you accept when you authenticate through Plaid Link. We receive this information from Plaid and process it to deliver the Service.

2.3 Information collected automatically

• Device and usage data. Operating system, application version, locale, and crash diagnostics necessary to maintain the Service.
• Log data. IP address, timestamps, and request metadata generated when the Service communicates with our backend.

3. How we use information

• Provide, maintain, and improve the Service, including downloading, categorizing, and exporting your transactions in QIF, OFX, and related formats.
• Authenticate you, protect your account, and enforce our Terms of Service.
• Respond to your support requests and communicate operational changes.
• Detect, investigate, and prevent fraud, security incidents, and abuse.
• Comply with applicable laws and respond to valid legal process.

We do not sell your personal information. We do not use your financial data to serve you targeted advertising, and we do not share it with advertising networks.

4. How we share information

We share information only as described below:

• Service providers. We use trusted vendors to operate the Service, including Plaid (data connectivity), Microsoft Azure (hosting, Key Vault, identity), GitHub (source control and CI), and SendGrid or equivalent (transactional email). These vendors process information on our behalf under written agreements that restrict their use of it.
• Legal and safety. We may disclose information to comply with applicable law, a subpoena or court order, or to protect the rights, property, or safety of Kennedy & Price, our users, or others.
• Business transfers. If Kennedy & Price is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Privacy Policy.

5. How we protect information

We apply administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, or misuse. Key safeguards include TLS 1.2 or higher for data in transit, encryption at rest for databases and backups, Azure Key Vault for secret storage, multi-factor authentication on consumer and internal systems, least-privilege access controls, automated vulnerability scanning, and audit logging. Full details are available in our Security & Compliance program.

6. Data retention and deletion

We retain personal information only for as long as needed to provide the Service, meet our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time by emailing privacy@qifix.app. Upon verification, we will delete or anonymize your data within 30 days, except where retention is required by law (e.g., financial or tax records). See our Data Retention and Deletion Policy for specific retention periods.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, port, restrict, or delete personal information we hold about you, and to object to certain processing. You can exercise these rights by emailing privacy@qifix.app. We will verify your identity before responding and will not discriminate against you for exercising your rights.

California residents (CCPA/CPRA). You have the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under California law.

European Economic Area and United Kingdom. Where GDPR or UK GDPR applies, our lawful bases for processing are (i) performance of a contract with you, (ii) your consent, (iii) our legitimate interests in operating and securing the Service, and (iv) compliance with legal obligations.

8. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact privacy@qifix.app and we will delete it.

9. International transfers

We are based in the United States and our infrastructure is hosted in United States Azure regions. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those in your country.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with a new "Last updated" date and, where the change is material, provide additional notice (for example, by email or in-app).

11. Contact us

Kennedy & Price, Inc.
Attn: Privacy
Email: privacy@qifix.app