Privacy Policy

The questionnaire runs in your browser while you answer questions. The server calculates and returns only the intentionally free first move before payment. Complete recommendations, forecasts, and tracker data are returned only to an email-verified account with a valid purchase entitlement. No human reviews your answers as part of generating the estimate.

An account is required before the questionnaire begins. While you answer, the app can keep a temporary draft and payment reference in session storage so the signed-in flow can recover from a refresh or interrupted return. Older persistent drafts are removed when the app next opens. After your authenticated plan is saved, the temporary browser data is removed.

If you copy, bookmark, or email a plan link, that URL may encode the answers needed to recreate the plan. Share links are designed to keep those encoded answers after the URL's # symbol, which is not sent in normal page requests. Anyone with the full link may still be able to reopen the same plan, so share it only with people you trust.

When you purchase an unlock, the server encrypts the plan payload and temporarily stores it in a private Supabase table. Stripe receives only an opaque handoff identifier and non-reversible integrity hashes, not your questionnaire answers. The same-browser handoff expires within 24 hours. An encrypted recovery copy may be retained in the private purchase record for up to 30 days, and both copies are deleted after the plan is saved to your email-verified account. Next Dollar does not create public payment-access or magic links.

On public informational pages, Next Dollar uses Vercel Web Analytics to understand aggregate site usage, such as page views and basic traffic patterns. Analytics scripts do not load on questionnaire, authentication, dashboard, profile, payment-return, or personalized forecast pages. Analytics and hosting providers may process technical information such as browser type, device information, pages visited, timestamps, IP address, and referring pages.

If Google Analytics or Google Ads measurement is configured, public informational pages may also send limited marketing events. Plan answers and dollar-by-dollar recommendations are not sent as analytics event details.

Supabase provides email-and-password authentication and stores your questionnaire, calculated plan, recommendations, tracker entries, forecast settings, lightweight display preferences, and the Stripe Checkout Session reference associated with the purchase. Passwords are handled by Supabase Auth and are not stored in Next Dollar application tables. No name, address, phone number, birth date, or profile photo is requested.

Database row-level security restricts plan and profile rows to the authenticated owner. A separate purchase entitlement is written only from a signed Stripe webhook or when an email-verified account securely matches a completed webhook purchase by a non-reversible email hash. Authentication sessions use secure cookie-based storage recommended for server-rendered Supabase applications.

Next Dollar does not display third-party ads. If paid campaigns are running, the site may load Google conversion measurement to understand whether an ad led to a checkout or purchase. These tools help measure whether advertising is financially sustainable; they are not used to move money, make plan decisions, or sell your calculator answers.

You can explicitly start over to remove the saved plan, clear browser storage for local drafts, and control cookies through browser settings. The Profile page provides self-service password changes, sign-out, and permanent account deletion. Deleting an account removes its saved application data and current entitlement but does not alter payment records Stripe must retain under its own policies or the limited purchase record needed for refunds and verified-email purchase recovery. A later recovery can restore paid access, not deleted plan data.

Next Dollar is not directed to children under 13, and the site is not intended to knowingly collect personal information from children.

This policy may be updated as the site, analytics setup, or legal requirements change. The updated date at the top of this page will reflect the latest version.