This Privacy Policy explains how Udabyte LLC (“Udabyte,” “we,” “us”) collects, uses, shares, and protects information across our website (udabyte.com) and our products — Madrich, Mindirus, and FinancialHealth.io (each, a “Service”). Because our products serve different needs, some collect different data; where a product has a supplemental product-specific privacy notice, that notice governs for that product and this policy provides the overall framework.
1. Information we collect
Provided directly by you
- Account & identity: name, email address, and a hashed password or OAuth sign-in.
- Communications: messages you send us and support requests.
- Payment information: handled by our payment processor (Stripe); we receive billing status and the last four digits of a card, not full card numbers.
Product-specific data
| Product | What we collect |
|---|---|
| Madrich | College-admissions inputs you provide — grades, interests, school lists, essays, and application progress. May relate to a prospective student who is a minor (see §5). |
| Mindirus | Learning activity — exam/course selections, quiz answers, study progress, and spaced-repetition performance used to personalize your study plan. |
| FinancialHealth.io | Financial and property data — account balances, transactions, property details, and documents. Bank data is retrieved through Plaid only after you explicitly connect an institution; access tokens are encrypted with AES-256 and never logged. |
Collected automatically
- Usage & device data: pages viewed, actions taken, browser/device type, and approximate location from IP.
- Logs & diagnostics: server access logs (retained ~90 days), security event logs, and error traces with personal data scrubbed before transmission.
2. How we use your information
- To provide, operate, and personalize the Service you signed up for.
- To authenticate you, process payments, and manage subscriptions.
- To generate the guidance, analysis, and learning content each product delivers.
- To secure our systems, prevent fraud and abuse, and debug problems.
- To communicate service updates and respond to your requests.
- To comply with legal, tax, and financial-recordkeeping obligations.
3. AI processing
Our products use artificial intelligence to generate guidance (Madrich), explanations and study plans (Mindirus), and financial insights (FinancialHealth.io). To do this, relevant inputs may be sent to trusted AI service providers under agreements that prohibit them from using your data to train their public models. AI output is generated automatically and may be incomplete or inaccurate — it is informational only and is not professional, financial, legal, or admissions advice. You are responsible for decisions you make.
4. How we share your information
We share personal information only as needed to run the Service:
- Service providers acting on our behalf — e.g., Plaid (bank connectivity), Stripe (payments), cloud hosting, error monitoring, and AI providers — bound by contract to protect it.
- Legal & safety — when required by law or to protect rights, safety, and security.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. Children & students
Our Services are directed to adults. Madrich is designed for use by parents and by students, some of whom may be under 18 (and potentially under 13). Where a user is under 13, we require verifiable parental consent consistent with the Children’s Online Privacy Protection Act (COPPA), and we limit collection to what is needed to provide the guidance requested. Where student education records are involved, we handle them consistent with applicable requirements such as FERPA. Parents may review, request deletion of, or refuse further collection of their child’s information by contacting support@udabyte.com.
6. Data security
We protect data with encryption in transit (TLS) and at rest, application-layer encryption (AES-256) for sensitive secrets such as Plaid tokens, access controls, and continuous monitoring. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of incidents as required by law.
7. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service. After account closure we delete or de-identify personal data within a reasonable period, except where longer retention is required for legal, tax, security, or financial-recordkeeping purposes. Operational logs are kept on short schedules (generally 90 days to 1 year).
8. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights — including under the California Consumer Privacy Act (CCPA/CPRA), other U.S. state privacy laws, and the EU/UK GDPR. To exercise any right, email support@udabyte.com. We will verify your request and respond within the timeframe required by law. You may also disconnect optional integrations (e.g., bank sync) at any time in your account settings.
9. Cookies
We use essential cookies to keep you signed in and secure, and limited analytics cookies to understand and improve usage. You can control non-essential cookies through the consent prompt where shown and through your browser settings.
10. International users
We operate from the United States. If you access a Service from outside the U.S., you understand your information will be processed in the U.S. under this policy. Where required, we rely on appropriate safeguards for cross-border transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version here with a new “Last updated” date and, for material changes, provide additional notice.
12. Contact us
Questions or requests? Email support@udabyte.com. Udabyte LLC also does business as FinancialHealth.io.