Privacy Policy
Last updated: August 15, 2026
FIREmodeling LLC (“FIREmodeling,” “we,” or “us”) built a tool that only works if you tell it real numbers about your life. This policy explains what we collect, why we hold it, who else touches it, and what you can ask us to do with it. It covers firemodeling.com and the application behind it (the “Service”), and it forms part of our Terms of Service.
The short version
- We never ask for your bank or brokerage credentials, and we do not link to your financial accounts. You type in what you want to model.
- We do not sell or share your personal information, and we do not use it for targeted advertising.
- We run no third-party analytics or advertising trackers. The only cookies we set are the ones needed to keep you signed in.
- Your plan data is used to run your projections and support you. It is not used to build products for anyone else, except as anonymous aggregate counts.
- You can export or delete your data at any time.
The rest of this page is the detail behind those five statements.
1. What we collect
We collect only what the Service needs to work. We do not buy personal information from data brokers, and we do not collect information about you from social media or other public sources.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Email address, and a hashed password if you sign up with one. If you use Google sign-in, Google gives us your email address, name, and profile image; we never receive your Google password. | You, or Google if you use Google sign-in |
| Profile data | Your name, date of birth, and US state, which the engine uses to model taxes and age-based milestones. | You, during onboarding |
| Plan data | Everything you enter to build a projection: account balances, income and expense streams, debts, real assets, milestones, assumptions, and the progress figures you journal over time. | You |
| Billing data | Subscription status, plan, billing period, and payment history. Stripe processes the payment and holds your card details; we receive a customer identifier and the status of your subscription, never your full card number. | You, via Stripe |
| Technical data | IP address, browser and device type, and server logs generated when you use the Service, retained for security, debugging, and abuse prevention. | Automatically, as you use the Service |
A note on sensitive information. Your plan data is detailed financial information, and your profile includes your date of birth. We treat both as sensitive and use them only to operate the Service for you, never to profile you for advertising or to infer characteristics about you for any other purpose. Please do not enter government identifiers such as Social Security numbers, or account numbers — the engine does not need them.
Information about other people. If you model a spouse, partner, or dependent, you are entering information about someone else. Enter only what you are permitted to, and only what the projection needs.
2. Why we hold it
| Purpose | Categories used |
|---|---|
| Create and secure your account, and keep you signed in | Account data, Technical data |
| Run the simulation and show you your projections | Profile data, Plan data |
| Process your subscription, renewals, and refunds | Account data, Billing data |
| Answer your support requests | Account data, and whatever you tell us |
| Send service messages: receipts, renewal and trial reminders, security and account notices | Account data, Billing data |
| Diagnose errors, prevent fraud and abuse, and keep the Service secure | Technical data, Account data |
| Understand which features are used so we can improve them | Technical data, aggregated usage |
| Meet legal, tax, and accounting obligations | Account data, Billing data |
Where the GDPR or similar laws apply to you, our legal bases are: performing our contract with you (running the Service, billing you); our legitimate interests in securing and improving the Service, provided those interests do not override your rights; complying with legal obligations; and your consent, where we ask for it.
New purposes. If we ever want to use your information for a purpose not described here, we will update this policy and, where the law requires it, ask your permission first.
If you withhold information. Most of what we collect is information you choose to enter. Leaving fields out is fine, but the projection will be less accurate, and some features will not work without the figures they depend on.
3. Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising — including under the specific meanings those terms have in the California Consumer Privacy Act and similar state laws. We have no advertising partners, no data brokers, and no sponsors.
We disclose information only in these situations:
- Service providers who run the Service for us — our hosting and database provider (Supabase), our payment processor (Stripe), and our identity provider if you use Google sign-in. They may use your information only to provide their service to us, under contract, and not for their own purposes.
- Professional advisors — our accountants and lawyers, where they need it to advise us.
- Legal and safety reasons — when we are required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect our rights, investigate fraud or security incidents, or protect the safety of any person. We will notify you where we are legally permitted to.
- A business transfer — if we are acquired, merged, or sell assets, your information may transfer as part of that. If that happens, we will notify you, and the acquirer remains bound by this policy until it gives you notice of any change.
- With your direction — when you ask us to share something, or export it yourself.
4. Cookies and tracking
We use only strictly necessary cookies. They keep you signed in across pages and remember that you have finished onboarding so we do not send you through it twice. We do not run Google Analytics or any other third-party analytics product, and we set no advertising or cross-site tracking cookies.
Because we set no non-essential cookies, there is no consent banner to click through and nothing to opt out of. You can block or clear cookies in your browser, but you will not be able to stay signed in. We do not currently respond to Global Privacy Control or Do Not Track signals differently, because we do not engage in the tracking those signals are designed to stop. If that ever changes, we will honor them and say so here.
5. Email we send you
We send service messages you cannot opt out of while you have an account: receipts, renewal and trial-expiry reminders, security alerts, password resets, and notices about changes to these policies. If we ever send product or marketing email, every message will have an unsubscribe link, and unsubscribing will never affect your account. We do not send marketing SMS.
6. Your rights and how to use them
Depending on where you live — including California, Colorado, Connecticut, Virginia, and other US states with privacy laws, and the UK and EEA — you may have the rights below. We honor all of them for everyone, wherever you live, to the extent we can.
- Know and access — what we hold about you, where it came from, why we have it, and who we disclosed it to.
- Correct — fix anything inaccurate. Most of it you can edit yourself in the app.
- Delete — remove your account and the data in it, subject to the exceptions below.
- Port — get a copy in a structured, machine-readable format, and export your plans yourself at any time.
- Opt out of sale, sharing, or targeted advertising — nothing to do here, since we do none of them.
- Limit use of sensitive information — we already limit it to operating the Service.
- Withdraw consent — where we rely on consent, you can take it back, without affecting what we did lawfully beforehand.
- Non-discrimination — we will never charge you more, give you less, or degrade the Service because you exercised a right.
How to make a request. Email support@firemodeling.com from the address on your account, or delete your account directly in your settings. We will verify the request against your account and respond within 45 days, extending once by another 45 days if it is complex, and telling you before we do. An authorized agent may act for you with written permission we can verify.
When we can say no. We may decline a deletion request where we still need the information to finish a transaction you asked for, to comply with a legal, tax, or accounting obligation, to detect or prosecute fraud and security incidents, or to establish or defend legal claims. If we decline, we will tell you which reason applies. You can ask us to review that decision by replying to us, and if you are in a state with an appeal right, we will explain it in our response.
If you are in the UK or EEA and unsatisfied, you may complain to your local supervisory authority. We would rather hear from you first.
7. How long we keep it
We keep your account and plan data for as long as your account is open, so your projections are there when you come back. When you delete your account, we delete your plan and profile data within 60 days. Encrypted backups are deleted on their normal rotation, typically within 90 days. We keep billing and transaction records for as long as tax and accounting law requires, generally seven years, and we may retain limited records needed to establish or defend legal claims. Server logs are kept for a short period for security and debugging.
8. How we protect it
Your data is encrypted in transit and at rest. Access to the production database is restricted, and rows are scoped to your account so one user’s data cannot be read by another. We never receive or store your card number, and if you use Google sign-in we never see your Google password. No system is perfectly secure, and we cannot guarantee that a breach will never happen. If one occurs that affects your personal information, we will notify you and any regulator we are required to notify, without undue delay.
9. Where your data lives
We operate in the United States, and your information is stored and processed there. If you use the Service from outside the US, you are sending your information to a country whose data protection laws may differ from your own. Where we transfer personal information out of the UK or EEA, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.
10. Children
The Service is for adults. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has given us information, tell us at support@firemodeling.com.
11. Other sites
The Service links out to third-party sites, and Stripe and Google handle parts of checkout and sign-in on their own pages. What you give them is governed by their privacy policies, not this one.
12. Changes to this policy
We will update this policy as the product changes. When we do, we will update the date at the top, and if the change materially affects how we handle your information, we will tell you by email or in the app before it takes effect. Continuing to use the Service after that means you accept the updated policy.
13. Contact us
Questions, complaints, and privacy requests all go to support@firemodeling.com, or by mail to FIREmodeling LLC, [MAILING ADDRESS]. California residents may also contact the Complaint Assistance Unit of the California Department of Consumer Affairs at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or (800) 952-5210.