Privacy
How Harbor handles the account and financial information you choose to enter.
What Harbor stores
Harbor stores your account email, the financial records you type in, and your timezone preference. Your records are visible only to your household. Harbor runs on Supabase and Vercel, never sells your data, and never asks for your bank login.
Manual records and service providers
Harbor shows the numbers you enter, organized. It doesn't verify them against your bank, and totals are only as complete as what you've entered.
Supabase provides account authentication and data storage. Vercel provides application hosting. Harbor does not connect to your bank in Web v2.0.
Account deletion
You can start a verified deletion request from Settings while signed in. Submission starts a manual verification process; it does not delete the account immediately.
Once verified, processing starts and active access and sessions are handled as part of the owner-run deletion procedure. Harbor normally completes deletion from active systems within seven days and sends completion confirmation through the verified contact path.
After your account data is deleted from Harbor's active systems, encrypted backup copies expire according to the provider's applicable backup-retention schedule. Harbor does not publish an exact backup expiration period until current provider behavior is verified.
Legal or security exceptions are kept only when required, then purged when the requirement ends.
Retention evidence
User financial records remain only while the account exists, subject to deletion processing and lawful exceptions. Minimal deletion evidence contains a request ID, internal user ID, timestamps, and completion status—but no user financial contents—and is retained for 12 months before purge. Minimal security evidence follows the same 12-month rule.
Migration and release evidence contains no user financial data and may be retained indefinitely.
Questions and security concerns
Privacy questions: support@tryharborapp.com.
Security concerns: security@tryharborapp.com. Mailbox operational verification remains a production-launch gate.