Trust and security

Name, email, age range, and what they want to learn about. That's it.

What we never collect: Social Security numbers, account numbers, bank logins, or balances. There is nothing in our database that could be used to move a dollar of anyone's money.

Families can set goals and write notes inside the app. Those are private to the member. An advisor can see that a family member checked in this week; they cannot see what was written.

• An advisor sees only the families assigned to them. At a multi-advisor firm, one advisor cannot see another advisor's families.
• A firm's data belongs to the firm. We do not sell it, share it, or use one firm's activity to help another.
• We do not send our own marketing to families invited by an advisory firm. Families receive product notifications about the lessons and features they signed up for, and nothing else.

• A member can delete their own account from inside the app, at any time. It is immediate, and it takes their learning history, goals, notes, AI tutor conversations, sessions and device tokens with it. Any active subscription is cancelled at the end of the period already paid for.
• A firm can ask us to delete a family's data when a client leaves. Email the address below, and we complete it within 30 days, usually the same week. We confirm in writing when it is done.
• What survives, and why. Records other people depend on, such as who sent a firm announcement or who assigned a member, keep the record and drop the link to the deleted person. Nothing personal to the deleted member remains.
• Backups roll off on their own schedule, so deleted data can persist in a backup for up to seven days before it ages out.

• Data is encrypted in transit and at rest.
• Data is stored in the United States (US East, Ohio) on Supabase infrastructure.
• Our infrastructure runs on Supabase, which maintains a SOC 2 Type II audit. That is their audit, not ours. We do not hold a SOC 2 report of our own, and we will say so to any compliance team that asks.
• The database is backed up daily, on our hosting provider's Pro plan, with seven days of retention.
• Access to production data is limited to the people who operate the platform.
• Passwords must be at least 8 characters. Members can also sign in with Google or Apple, in which case we never see a password at all.

Every lesson, course and handout is educational. The platform does not recommend products, allocate assets, or tell a member what to do with their money. Our AI tutor is bound by the same rule: it explains how things work and hands anything that needs judgment back to the family's advisor, by name.

If a member writes something that suggests a crisis, the tutor stops teaching and points them to real help.

• Messaging and community features are off by default for advisory firms. Messages between firm staff and families are stored in the platform and are not currently sent to third-party archiving services such as Smarsh or Global Relay. Firms with communications recordkeeping obligations should either leave messaging off or confirm with their compliance team how those records will be retained.
• We are not a broker-dealer, an investment adviser, or an insurance producer. We are a software vendor.
• Anything can be turned off. Market commentary, community features, partner content and messaging are firm-level switches, set during onboarding.
• We will hand your compliance team a demo account to review the platform themselves, along with a written overview of everything on this page.

Our client-facing material is reviewed for accuracy before it reaches a firm, and reviewed again on a schedule.

My Money Vision is listed in the Kitces AdvisorTech Map, the industry directory of technology built for financial advisors. A listing records that a product exists and what it does. It is not an endorsement, a review, or a due diligence opinion about this platform.

Compliance questions go to info@mymoneyvision.com, and we answer within one business day. Deletion requests go to the same address.

Found a security problem? Our vulnerability disclosure page explains how to report it and what happens next.

If your firm needs a document we have not published, ask and we will write it.