Reviewed & Trusted Distribution
Loftd reaches your phone through the official App Store and Google Play. Both require code signing, identity verification, and app review before anything ships—so the build you install is the build we wrote.
Subprocessors
The Partners That Power Loftd.
We chose every vendor in our stack the same way you would choose your accountant or your bank: carefully, transparently, and with the safety of your information at the center of the decision. Here are the four that matter most—and exactly what each one does for you.
Plaid
Apple & Google
Anthropic
Supabase
Bank Connections
Powered By Plaid
When you link a bank to Loftd, you authenticate directly with your bank inside Plaid’s secure flow—the same secure layer trusted by thousands of finance apps and millions of users every day. Your bank credentials never reach Loftd.
- Your login stays with your bank. Plaid handles the secure handoff—we only receive what you authorize.
- 12,000+ institutions across the U.S., Canada, the UK, and Europe.
- Read-only by design. Loftd cannot move, transfer, or modify your accounts—period.
- Revoke anytime. Disconnect any institution from Settings, or revoke directly at my.plaid.com.
Plaid privacy: plaid.com/legal/privacy-statement
Distribution & Payments
Apple & Google
Your phone is the front door to Loftd. Apple and Google handle three things that we trust them with—because they do them better than almost anyone in the world.
Subscription Payments
Your subscription is processed by Apple or Google in their own secure environment. We never see or store your card number, billing address, or CVV. They handle billing; you control the subscription from your phone’s account settings.
Face ID & Touch ID
Loftd locks behind your phone’s biometrics. Your face or fingerprint never leaves your device—iOS and Android keep the biometric data in a dedicated secure enclave we cannot read.
Apple privacy: apple.com/legal/privacy · Google privacy: policies.google.com/privacy
AI Accountant
Anthropic Powers Chief
Chief is your accountant in your pocket—categorizing transactions, surfacing what matters, and answering questions you used to put off. The intelligence behind that comes from Anthropic, an AI safety company we chose specifically for their data-handling posture.
- Transaction data may be in prompts. When you use AI-powered features, your financial data including transaction history can be included in prompts to Anthropic so it can give you a useful answer. We send only what the specific request needs—not your complete financial history every time.
- Never used to train models. Your data is not used to train Anthropic’s AI.
- Auto-deleted within 30 days. Anthropic retains processed data for no more than 30 days, then deletes it.
- Contractually walled off. Anthropic processes your data solely to provide the feature you are using, under confidentiality obligations.
Anthropic privacy: anthropic.com/privacy · Full detail in our Privacy Policy.
Infrastructure
Supabase Hosts Our Database
Your account data and the categorizations our AI builds for you live on Supabase—a managed Postgres platform with enterprise-grade security baked in. Supabase runs on top of major cloud infrastructure and is independently audited.
- Row-level security at the database. Each user’s information is fully isolated from every other user’s—not by application logic, but by the database itself.
- Encrypted at rest with AES-256 and in transit with TLS 1.2+.
- SOC 2 Type II certified, with continuous compliance monitoring.
Always Up To Date
We refresh this page whenever we add or change a material subprocessor. For material changes we will also notify you per our Privacy Policy.
Questions about how any of our partners handle your data? Email privacy@loftd.app—we will get you an answer.