Talents Privacy Notice
How we collect, use, disclose, and protect information in the Talents budgeting application.
Please read this notice before creating an account or connecting a financial institution.
1. About this notice
McFarland Financial Coaching LLC operates Talents, a budgeting application. In this notice, “Talents,” “we,” “us,” and “our” refer to McFarland Financial Coaching LLC. This notice applies to information handled through the Talents application, including its web and installable app experiences.
This notice does not cover a financial institution’s own practices or a third-party service operating under its own privacy notice. Talents is currently offered as a private beta. The practices described here reflect the current version of the service and may change as features are added.
2. Information we collect
Account and security information
Account details: your email address, account identifier, account creation date, and invitation status.
Authentication data: a salted password hash, session identifiers, hashed recovery codes, sign-in attempts, and security-event records. Talents does not store your password in readable form.
Passkeys: if you enable Face ID or another passkey, Talents stores a credential identifier, public key, counter, label, and use dates. Your device handles the biometric check. Talents does not receive or store a facial image, fingerprint, or biometric template.
Budgeting and financial information
Budget records: income and expense categories, planned amounts, rollover settings, paycheck schedules and amounts, and household paycheck settings.
Transaction records: dates, merchants or sources, amounts, income or expense type, categories, account labels, pending status, splits, and recurring-transaction settings.
Goals and debts: goal names, targets, deadlines, contributions and notes, plus debt names, balances, annual percentage rates, minimum payments, and due days.
Connected-account details: financial institution account labels, account type, masked account digits, transaction identifiers, and synchronization state.
Imported files: when you upload a comma-separated values file, Talents processes the file to show an import preview and stores the transaction records you confirm for import.
Sharing, support, and technical information
Household sharing: invite codes, the email addresses of connected household members, and records showing whether an account is an owner or guest.
Support communications: information you include when you email us, report a problem, or otherwise contact us.
Technical data: our hosting and security providers may process Internet Protocol address, browser or device type, requested pages, request timestamps, and security signals needed to deliver and protect the service.
3. How we use information
We use information only as reasonably necessary to:
Provide Talents: create and maintain accounts, save budgets, organize transactions, generate reports, track goals and debts, and support recurring and rollover features.
Connect accounts at your direction: establish a Plaid connection, retrieve authorized account and transaction data, and keep that data synchronized when you request a sync.
Enable collaboration: let invited household members view and edit a shared budget.
Protect the service: authenticate users, maintain sessions, rate-limit repeated attempts, investigate suspicious activity, and keep security records.
Support users: respond to questions, troubleshoot problems, and communicate about material service or policy changes.
Maintain and improve Talents: fix errors, evaluate feature performance, preserve reliability, and develop requested features using information appropriate for that purpose.
Meet legal obligations: comply with applicable law, enforce agreements, and protect users, Talents, and others from fraud, abuse, or harm.
4. Bank connections and Plaid
Talents uses Plaid to let you connect a financial institution. Connecting an account is optional. When you open Plaid Link, Plaid and your financial institution handle the credentials and verification information required for the connection. Talents does not receive your bank username or bank password.
If you connect an account, Plaid provides Talents with an access token and the account and transaction information you authorize. Talents stores the access token in encrypted form and uses it to request account and transaction updates. Talents currently requests transaction data, not payment initiation.
By using Plaid through Talents, you authorize Plaid to access and transmit information from the financial institution you select, and you acknowledge that Plaid handles that information under its Terms and Privacy. Review that policy before connecting an account.
You may disconnect a Plaid connection in Talents. Disconnecting removes the stored access token and stops future synchronization through that connection. It does not automatically erase transaction records that were already imported into Talents. Those records remain part of your budget until deleted separately or removed through an account-deletion request.
5. When we disclose information
We disclose information only in the circumstances below. We do not give service providers permission to use your financial data for their own advertising.
Service providers: vendors that host, secure, deliver, or support Talents, only as needed to provide their services. Current providers include Cloudflare for hosting, database, content delivery, and security; Plaid when you choose to connect an account; and Google Fonts for app typography.
People you choose: an invited household member can view and change the budget owner’s financial records. The owner can see a guest’s email address, and the guest can see the owner’s email address. Only share an invitation code with someone you trust.
Legal and safety reasons: authorities, courts, advisers, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, property, users, or the service.
Business change: a buyer, successor, or adviser involved in a merger, financing, reorganization, sale, or transfer, subject to appropriate confidentiality and privacy protections.
At your direction: another recipient when you ask us to disclose information or clearly consent to the disclosure.
Provider information:Cloudflare Privacy Policy | Google Fonts privacy information
6. Cookies and device storage
Session cookie: Talents sets a secure, HTTP-only session cookie after sign-in. It is necessary to keep you authenticated and is configured to expire after 30 days unless you sign out or the session is revoked sooner.
Welcome-guide flag: Talents stores a small value in your browser’s local storage to remember that you have seen the welcome guide. It does not contain budget or transaction data.
Third-party resources: the app loads Plaid Link when bank connection tools are available and requests font files through Google Fonts. Those providers may receive ordinary network information such as your Internet Protocol address and browser headers.
The current Talents app does not use advertising cookies or third-party analytics cookies. If that changes, we will update this notice and provide any choice required by law.
7. Data retention and deletion
We retain account and financial information while your Talents account remains active and as needed to provide the service. Security records, support communications, and limited operational records may be kept longer when reasonably necessary for fraud prevention, dispute resolution, legal compliance, service integrity, or backup recovery.
When you request account deletion, we will delete or de-identify personal information associated with the account unless retention is required or permitted by law. Copies may remain temporarily in protected backups until those backups are overwritten through the ordinary backup cycle. Deletion cannot remove information that another person lawfully maintains outside Talents.
8. How we protect information
Talents uses administrative and technical safeguards designed for the sensitivity of budgeting data. Current measures include:
Protected credentials: passwords are salted and hashed; recovery codes are stored as hashes; and Plaid access tokens are encrypted at rest.
Secure access: authenticated sessions use secure, HTTP-only cookies, repeated sign-in attempts are rate-limited, and users can revoke other sessions.
Passkey support: users may enable device-based passkeys for phishing-resistant sign-in while keeping password access as a backup.
Browser protections: security headers restrict framing, content types, referrers, and the outside resources the application may load.
No method of transmission or storage is completely secure. We cannot guarantee absolute security. Use a unique password, protect recovery codes, review household access, and tell us promptly if you believe an account has been compromised.
If we determine that a security incident affecting personal information requires notification under applicable law, we will provide notice as required by law.
9. Your choices and privacy rights
Bank connections: you may choose not to connect a financial institution and may disconnect an existing Plaid connection from Talents.
Household access: budget owners control whom they invite. Guests may leave a shared budget through the app.
Passkeys and sessions: you may remove a passkey, change your password, regenerate a recovery code, or sign out other sessions through the security settings available in Talents.
Record controls: you may add, correct, recategorize, or delete many budget records directly in the app.
Privacy requests: you may ask to access, correct, export, or delete personal information by contacting us at the address below. Because the current app does not include a complete self-service export or account-deletion tool, these requests are handled by email.
Depending on where you live, applicable law may provide additional rights. We may need to verify your identity and authority before completing a request. We will not discriminate against you for exercising a privacy right. Some requests may be limited where an exception applies, including security, fraud prevention, legal compliance, or protection of another person’s rights.
10. Children’s privacy
Talents is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
11. Changes to this notice
We may update this notice to reflect new features, providers, legal requirements, or privacy practices. We will change the effective date when we do. If a change materially affects how we handle information, we will provide a prominent notice in Talents, by email, or through another reasonable method before the change takes effect when required.
12. Contact us
Questions, privacy requests, or security concerns may be sent to:
Effective October 12, 2026