Privacy Policy

The questionnaire runs in your browser while you answer questions. The server calculates and returns only the intentionally free first move before payment. Complete recommendations, forecasts, and tracker data are returned only to an email-verified account with a valid purchase entitlement. No human reviews your answers as part of generating the estimate.

You can complete the questionnaire and see the free first move without an account. An email-verified account is required before checkout. While you answer, the app can keep a temporary draft and payment reference in session storage so the flow can recover from a refresh or interrupted return. This draft stays in the current browser tab and is not a saved account plan. Older persistent drafts are removed when the app next opens. After your authenticated plan is saved, the temporary browser data is removed.

During account verification, the original tab can pass your draft directly to a verification tab on this site in the same browser while the original tab remains open. Account-verification links carry a random continuation reference, not your financial answers. Keep the original tab open until verification is complete; drafts are not available automatically on another device.

If you copy, bookmark, or email a plan link, that URL may encode the answers needed to recreate the plan. Share links are designed to keep those encoded answers after the URL's # symbol, which is not sent in normal page requests. Anyone with the full link may still be able to reopen the same plan, so share it only with people you trust.

When you purchase an unlock, the server encrypts the plan payload and temporarily stores it in a private Supabase table. Stripe receives only an opaque handoff identifier and non-reversible integrity hashes, not your questionnaire answers. The same-browser handoff expires within 24 hours. An encrypted recovery copy may be retained in the private purchase record for up to 30 days, and both copies are deleted after the plan is saved to your email-verified account. Next Dollar does not create public payment-access or magic links.

On public informational pages, Next Dollar uses Vercel Web Analytics to understand aggregate site usage, such as page views and basic traffic patterns. Analytics scripts do not load on questionnaire, authentication, dashboard, profile, payment-return, or personalized forecast pages. Analytics and hosting providers may process technical information such as browser type, device information, pages visited, timestamps, IP address, and referring pages.

If Google Analytics or Google Ads measurement is configured, public informational pages may also send limited marketing events. Plan answers and dollar-by-dollar recommendations are not sent as analytics event details.

Supabase provides email-and-password authentication and stores your questionnaire, calculated plan, recommendations, tracker entries, forecast settings, lightweight display preferences, and the Stripe Checkout Session reference associated with the purchase. Passwords are handled by Supabase Auth and are not stored in Next Dollar application tables. No name, address, phone number, birth date, or profile photo is requested.

Database row-level security restricts plan and profile rows to the authenticated owner. A separate purchase entitlement is written only from a signed Stripe webhook or when an email-verified account securely matches a completed webhook purchase by a non-reversible email hash. Authentication sessions use secure cookie-based storage recommended for server-rendered Supabase applications.

Payment and billing details are entered directly in Stripe-hosted Checkout. Next Dollar does not store full card numbers, security codes, or bank credentials in its application database. Stripe provides Next Dollar with transaction identifiers, payment state, amount, currency, receipt link, and refund or dispute status so the app can grant access, show purchase history, and handle refunds.

The contact form collects the reply email, selected reason, message, and originating pathname without URL query parameters or fragments. The hosting infrastructure may process ordinary request metadata such as IP address and browser user agent, but that metadata is not copied into the support email. Messages are delivered through Resend to the private support mailbox and retained as reasonably necessary to respond, resolve refunds or disputes, prevent abuse, and keep required business records.

The app does not automatically attach your questionnaire answers or generated financial plan to a support message. Include only the minimum information needed to explain the issue.

Do not put passwords, authentication codes, full card numbers, Social Security numbers, bank credentials, or other unnecessary sensitive identifiers in a support message.

Next Dollar uses Vercel for hosting, Supabase for authentication and application data, Stripe for payments, Resend for support email, and—only on public informational pages—Vercel Analytics and optional Google measurement. These providers process data under their own terms and retention practices as needed to provide their services.

Next Dollar uses access controls, row-level database security, encrypted transport, restricted server credentials, payment-signature verification, short-lived encrypted handoffs, and tested backups. No internet service can promise absolute security. If you believe your account or data is at risk, change your password, enable authenticator-app protection in Profile, and contact support promptly.

Next Dollar does not display third-party ads. If paid campaigns are running, the site may load Google conversion measurement to understand whether an ad led to a checkout or purchase. These tools help measure whether advertising is financially sustainable; they are not used to move money, make plan decisions, or sell your calculator answers.

You can explicitly start over to remove the saved plan, clear browser storage for local drafts, and control cookies through browser settings. The Profile page provides self-service password changes, sign-out, and permanent account deletion. Deleting an account removes its saved application data and current entitlement but does not alter payment records Stripe must retain under its own policies or the limited purchase record needed for refunds and verified-email purchase recovery. A later recovery can restore paid access, not deleted plan data.

You may use the contact form to ask about, correct, or request deletion of personal information that cannot be managed through Profile. Some payment, fraud-prevention, backup, tax, accounting, dispute, or legal records may need to be retained after an account is deleted.

Next Dollar is not directed to children under 13, and the site is not intended to knowingly collect personal information from children.

This policy may be updated as the site, analytics setup, or legal requirements change. The updated date at the top of this page will reflect the latest version.