Privacy Policy

Millennial Help Incorporated · Effective 1 October 2026 · Version 2.1 (updated)

Who we are and what this covers

This Privacy Policy applies to Millennial Help Incorporated (“Company,” “we,” “us”) and governs how we collect and use information. It covers millennialmoneyhelp.com, the Millennial Money Help mobile application, and any related services (together, the “Service”).

The Service is a personal and family management and education application. It gives you an overview of your finances, helps you plan for expenses, and connects you with professionals. By using the Service, you consent to the practices described here.

The Service is for adults aged 18 and over. See §12.

Information we collect from you

We collect the following categories of personal information:

• Identifiers (first and last name, mailing address, email address, phone number, account credentials) — to create and operate your account
• Professional information (employer, job title) — to tailor planning to your circumstances
• Commercial information (subscription tier, purchase history) — to provide and bill for the Service
• Payment information (billing details and card data, handled by Stripe) — to process transactions
• Financial account information (balances, transactions, and account identifiers from accounts you link through Plaid, and documents uploaded) — to organize and display your finances and build scenarios
• Demographic information (age, gender, household income, household liabilities) — to improve scenario models. See the note below
• Biometric information (facial scan or template; voiceprint if you use voice features; fingerprint template if you use fingerprint sign-in) — identity verification, authentication, and fraud prevention. See §8
• Dependent information (a child’s name, date of birth, and UTMA, UGMA, or 529 account data — entered by you) — to plan for that child’s expenses. See §12
• AI conversation content (messages you send to the “Don” assistant) — to generate responses. See §9
• Usage and device data (installation IDs, device and browser type, performance metrics, interaction data) — to operate, secure, and improve the Service

We do not collect personal information unless you provide it, though some information is generated automatically when you use the Service. Certain features require certain information, and we will tell you when that is the case.

How we use your information

• To operate and deliver the Service you have requested
• To provide information, products, or services you ask for
• To send you notices about your account
• To send you notifications with upcoming date reminders
• To carry out our obligations and enforce our rights under any contract between us, including billing and collection
• To notify you about changes to the Service
• To maintain the security of the Service and prevent fraud and misuse
• To comply with applicable laws, regulations, legal process, and governmental requests
• To maintain our internal records and administrative functions
• To inform you about other products or services from us and our affiliates, where you have consented to marketing
• To sell or share certain information for targeted advertising, joint marketing, affiliate marketing, market research, and revenue generation — see §5, which explains exactly what is involved and how to opt out
• For any other purpose we describe when you provide the information, or with your consent
  

Service providers who process your information

We use the following providers. They process personal information on our instructions and under contract, for the purposes described here and no others, subject to the note in §9 about AI model providers:

• Plaid — credentials you enter to link a financial account, and the account and transaction data returned to us
• Stripe — payment and billing information; identity documents and biometric data where you use identity verification
• Google (Firebase) — authentication data, stored account content, files you upload, and device and usage telemetry
• Anthropic — messages you send to the “Don” assistant and the account information needed to answer them
• Microsoft (Microsoft Graph / Azure Entra ID) — recipient email address and the content of transactional and administrative emails we send you (for example, renewal reminders, billing notices, and account confirmations)
• Twelve Data — market data only; no personal information is sent to Twelve Data

We may also disclose personal information to professional advisers, and to a buyer or successor in the event of a merger, acquisition, or sale of assets. We will disclose personal information without notice where required by law or where we believe in good faith that it is necessary to comply with legal process, protect our rights or property, or protect the personal safety of users or the public.

Sale and sharing of personal information

We sell or share certain personal information of our adult account holders with third parties for targeted advertising, joint marketing, affiliate marketing, market research, and revenue generation. Where we do, the categories involved are identifiers, professional information, commercial information, and usage and device data.

The following are never sold or shared, in any circumstances: the personal information of anyone under 18 (including all dependent information — this is a flat rule, regardless of state or consent), biometric information, financial account information obtained through Plaid, payment card data, your conversations with the “Don” assistant, and sensitive personal information of any kind (racial or ethnic origin, precise financial account data, government identifiers, and biometric data — see §6).

You may direct us to stop selling or sharing your personal information at any time, without creating an account or verifying your identity, using the toggle below or by emailing contact@millennialmoneyhelp.com. We will honor an opt-out within 15 business days and will direct recipients who received your information in the preceding 90 days to stop using it. Once you opt out we will not resume unless you later tell us to. Opting out will not result in a lower level of service, different pricing, or any other penalty.

You also have the right to know the categories of personal information we sold or shared in the preceding 12 months and the categories of third parties who received it — contact us to request that disclosure.

Sensitive personal information

Some of what we collect is treated as sensitive under applicable law — financial account information, government identifiers, biometric information, information revealing racial or ethnic origin, and the contents of your messages to the assistant. We use sensitive personal information only to provide the Service you have requested, to verify identity, to prevent fraud, and for other purposes permitted by law. We do not use or disclose sensitive personal information for inferring characteristics about you, and we never sell or share it. You may direct us to limit our use of sensitive personal information by contacting us.

Your privacy rights

Depending on where you live, you may have the following rights. We will not discriminate against you for exercising any of them.

• Know and access — what we collect, why, who we share it with, and a copy of your information (45 days, extendable once by 45 with notice)
• Delete — deletion of your personal information, subject to the exceptions in §11 (45 days, extendable once by 45)
• Correct — correction of inaccurate information (45 days)
• Opt out of sale or sharing — as described in §5 (15 business days)
• Limit use of sensitive information — as described in §6 (15 business days)
• Withdraw consent — for anything you consented to, including marketing and biometrics (immediately)
• Non-discrimination — no penalty for exercising a right (always)

To exercise a right, contact us using the details in §17. We will verify your identity before disclosing or deleting information — the bar is higher here than for most services, because your account may hold linked bank data. An authorized agent may act on your behalf with your written permission.

Biometric information

Where you choose to verify your identity using biometric means, we collect biometric identifiers and biometric information — a facial scan or template, a voiceprint if you use a voice feature, and a fingerprint template if you choose fingerprint sign-in with us.

You can decline — biometric verification is optional; if you decline we will verify your identity by manual review of your identification document instead. We destroy it — we destroy biometric data when the purpose for collecting it has been satisfied, or within three years of your last interaction with us, whichever comes first; in practice we destroy it within 30 days of verification and keep only the outcome. We never sell it. Adults only — we do not collect biometric data from anyone under 18.

Our full written retention schedule and destruction guidelines are published at millennialmoneyhelp.com/biometric-retention, as required by the Illinois Biometric Information Privacy Act. This is different from using your own device’s built-in fingerprint or face unlock — the biometric data stays on your device and never reaches us; we receive only the device’s yes-or-no answer.

Artificial intelligence features

The Service includes AI features, including a chat assistant called “Don.” Don is software, not a person, and we tell you so at the start of every conversation.

Don is our product, and we own it. We may use your conversations with Don to improve Don’s accuracy, features, and performance over time; any resulting improvement belongs to us. When you send a message, your message and the account information needed to answer it go to Anthropic, and in some features to Google, as our service providers, under paid commercial agreements — neither provider uses your conversations to train their own general-purpose models. Please do not enter Social Security numbers, full account numbers, passwords, or other sensitive information into the assistant. AI output may be incomplete, out of date, or wrong — it is not financial, tax, or legal advice, and has not been reviewed by a licensed professional. Don cannot move money, place trades, or change your linked accounts, and the assistant is not available to anyone under 18.

See the Artificial Intelligence Terms of Use for the full terms governing these features.

How long we keep your information

• Account profile and credentials — life of your account, then 30 days
• Financial account data from Plaid — while the link is active, then 30 days
• Documents you upload (pay stubs, statements, and similar records) — 2 years from the date you upload them, or within 30 days of your account being deleted, whichever comes first
• Payment and transaction records — 7 years, for tax and financial recordkeeping
• Biometric data — until the purpose is satisfied, or 3 years from your last interaction, whichever is first
• Identity document images — deleted within 30 days of verification
• Dependent information — while you keep the dependent in your plan, then 30 days
• AI conversation history — 90 days
• Marketing preferences — until you withdraw consent, then 30 days
• Security and access logs — at least 12 months

We do not retain personal information indefinitely. Where a legal obligation requires us to keep something longer, we keep only what that obligation requires.

Deleting your account and your information

You can delete your account from within the app, in account settings, or by emailing contact@millennialmoneyhelp.com. On a verified request we will delete your personal information from our records and direct our service providers to delete it from theirs.

We may be unable to delete some information where necessary to complete a transaction or service you requested, detect security incidents or fraud, debug and repair errors, exercise a right provided by law, comply with the California Electronic Communications Privacy Act, conduct public-interest research with your consent, enable internal uses aligned with your expectations, or comply with a legal obligation.

What we keep after you delete your account, and nothing else: payment and transaction records (7 years, for tax and financial recordkeeping law); the outcome of any identity verification, not the biometric data itself (7 years, financial recordkeeping); a record of the consent or release you gave us (life of account + 5 years, as evidence we had your permission); limited fraud-prevention signals (as long as needed); security and access logs including the record of your deletion (at least 12 months); and a minimal suppression entry — your email address on a do-not-contact list, kept indefinitely so a later data import can’t undo your deletion, and used for nothing else.

We do not retain your profile, your linked account data, your biometric data, your dependent information, or your conversation history. We will confirm in writing what has been retained when your deletion completes.

Children and dependents

The Service is for adults. You must be at least 18 years old to create an account or use the Service. The Service is not directed to children. If we learn that an account belongs to someone under 18, we will suspend it and delete the information — contact us if you believe a minor has provided us with personal information, and we will delete it.

The Service lets you plan for a dependent child’s expenses. To do that, you may choose to enter your child’s name, date of birth, and details of any UTMA, UGMA, or 529 account held for them. That information comes from you, not your child — your child does not have an account, does not log in, and does not interact with the Service.

We protect that information: we never sell or share it (no dependent information is ever sold, shared, or used for targeted advertising, in any state, with or without your permission — a flat rule), we never send it to advertising or analytics partners, we never use it for biometric processing or as identifying detail with the AI assistant, we keep it only while you need it (while the dependent remains in your plan, then 30 days), and you control it (view, correct, or remove a dependent at any time in the app).

If you are a parent or guardian who does not hold the account and wish to exercise rights over your child’s information, contact us — we will need to verify both your identity and your relationship to the child before we act, and we will not disclose a child’s information to anyone whose relationship we cannot verify.

Marketing and communications

With your consent, we may use your contact information to send you marketing communications. You can opt in or out at any time using the toggle in the app or by clicking unsubscribe in any marketing email. Opting out of marketing does not affect account, service, and security messages, which we need to send you.

You may also opt out of communications from our third-party partners by contacting us. We may receive a notification when you open an email from us or click a link in it, which we use to improve our communications.

Connecting and disconnecting third-party accounts

You can connect your account to third-party accounts. By doing so you consent to the continuous release of information about you in accordance with your privacy settings on those third-party services. If you do not want information shared in this way, do not use the feature. You can disconnect at any time from your account page, or by contacting us.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, disclosure, and use, including encryption in transit and at rest, access controls, multi-factor authentication, and logging. No system is perfectly secure, and we cannot guarantee absolute security.

If a security incident affects your personal information, we will investigate promptly and notify you and the relevant regulators in the manner and within the timeframes required by applicable law. We store data on servers operated by third-party hosting providers with whom we have contracted.

Changes to this Policy

We may change this Policy from time to time — for example when our services change, our data practices change, or the law changes. Where changes are significant we will tell you, by email to the address on your account, by a prominent notice in the app, or both. Your continued use of the Service after a change takes effect means you accept the revised Policy. The effective date appears at the top of this document.

Disclaimer of warranties and limitation of liability

The information, software, products, and services included in or available through the Service may include inaccuracies or typographical errors, and changes are periodically made to the information here — Millennial Help Inc and its suppliers may make improvements and changes at any time.

To the maximum extent permitted by applicable law, all information, software, products, and services and related graphics are provided “as is” without warranty or condition of any kind. Millennial Help Inc and its suppliers disclaim all warranties and conditions, including all implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

To the maximum extent permitted by applicable law, in no event shall Millennial Help Inc or its suppliers be liable for any direct, indirect, punitive, incidental, special, or consequential damages, or any damages whatsoever including without limitation damages for loss of use, data, or profits, arising out of or connected with the use or performance of the Service, the delay or inability to use it, or the provision of or failure to provide services, whether based on contract, tort, negligence, strict liability, or otherwise, even if advised of the possibility of damages.

Without limiting the above, we are not liable for missed payments, overdrawn accounts, or inaccurate investment performance information. Because some jurisdictions do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. If you are dissatisfied with any portion of the Service or with these Terms, your sole and exclusive remedy is to discontinue using the Service.

Alternative dispute resolution

The parties will attempt to resolve any dispute arising out of or relating to this Agreement through friendly negotiations. If not resolved that way, disputes are resolved through this Alternative Dispute Resolution (ADR) procedure: the parties first try in good faith to settle the dispute by mediation under any applicable statutory rules of mediation. If mediation is unavailable or unsuccessful in resolving the entire dispute, any outstanding issues go to final and binding arbitration under the rules of the American Arbitration Association, before a mutually acceptable arbitrator knowledgeable about the subject matter. The arbitrator’s award is final, and any court with proper jurisdiction may enter judgment on it. During any arbitration proceeding the parties continue performing their obligations under this Agreement, and arbitration is the sole remedy for resolving disputes under the Agreement.

Class action waiver

Any mediation or arbitration under these Terms takes place on an individual basis only. Class arbitrations and class, representative, or collective actions — including a private attorney general action — are not permitted. Unless both parties agree otherwise, the arbitrator may not consolidate more than one person’s claims or preside over any form of class proceeding.

How to contact us

We welcome your questions about this Policy. If you believe we have not followed it, please tell us.

Email contact@millennialmoneyhelp.com.

Effective as of 1 October 2026.