Privacy Notice

Effective date: May 19, 2026

1. About this notice

Gentoo Solutions LLC (“Gentoo”, “we”, “us”) operates Dolla, a personal financial planning application. This Privacy Notice explains how we collect, use, share, and protect your information when you use Dolla.

Dolla is intended solely for users located within the United States. We do not purposefully offer services to individuals in the European Union or other regions outside the US.

Dolla is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such data, we will take steps to delete it immediately.

2. Data we collect

Account information: email address, display name, and authentication provider (Google or email/password).
Financial data: account balances, transactions, and investment positions you enter or import manually.
Planning data: household composition, retirement goals, expense estimates, and scenario inputs you enter directly.
Usage data: pages visited, features used, error reports submitted in-app, and browser information.
Security events: login times, MFA enrollment/use, and password changes (no plaintext credentials are ever stored).

3. How we use your data

To provide and improve Dolla features including net worth tracking, retirement projections, and tax planning.
To maintain account security and detect fraudulent activity.
To communicate important service updates, including changes to this notice or the Beta Participation Agreement.
To analyze aggregate, anonymized usage patterns that help us improve the product.

We do not sell your personal financial data. We do not use your financial data for advertising.

4. Changes to this notice

We reserve the right to modify this Privacy Notice at any time. When we make material changes, we will notify you via the email address on file or through a prominent in-app notification prior to the change taking effect. The updated notice will indicate the new effective date at the top of the page. Your continued use of Dolla after the effective date constitutes your acceptance of the revised notice.

5. Third-party sharing

We share data only with:

Google Firebase: for authentication, secure credential management, and session handling.
Google Analytics: for analyzing aggregate, anonymized usage patterns to improve the product.
Infrastructure providers: cloud hosting and database providers operating under strict data processing agreements.

We disclose data to law enforcement only when legally required.

6. Data protection

All data is encrypted in transit (TLS) and at rest. Financial data is stored in encrypted PostgreSQL databases. Passwords are never stored by Dolla — authentication is delegated to Firebase. IP addresses in security logs are one-way hashed (SHA-256) before storage.

7. Your rights

Access and export: you can download a complete copy of all personal and financial data we hold for your household from Settings → More settings → Download my data.
Correction: you can update your profile and household information at any time.
Deletion: you can delete your account from Settings. We will remove your personal data within 30 days.

Additional rights for California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following additional rights:

Right to know: you may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
Right to non-discrimination: we will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge different prices, or provide a different level of quality because you exercised a right under California law.
Right to limit use of sensitive personal information: to the extent we process sensitive personal information (such as financial account data), you have the right to direct us to limit its use and disclosure to what is necessary to perform the services you requested.

To exercise your rights to access or delete your personal information, you may use the direct data download and account deletion tools located in your Dolla app Settings → More settings. To exercise any other privacy rights, or if you are unable to access the app, please contact us at legal.gentoosolutions@gmail.com. We will respond to verifiable requests within 45 days as required by law.

8. Data retention

We retain your data for as long as your account is active. After account deletion, we retain de-identified and aggregated data indefinitely. Security event logs are retained for 90 days. Deleted financial connection data is purged within 30 days.

9. Beta program

During the beta period, we may collect additional diagnostic information to identify and fix issues. This data is used only for product improvement and is not shared with third parties for commercial purposes. Beta diagnostic data is retained for no longer than 60 days after the conclusion of the beta period.

10. Governing law & dispute resolution

This Privacy Notice is governed by the laws of the State of New York, United States, consistent with our Terms of Use. Any dispute arising from or relating to this notice — including claims about how we collect, use, or protect your personal information — is subject to the binding arbitration agreement and class action waiver set out in Section 9 of the Terms of Use. Disputes not subject to arbitration shall be resolved exclusively in the state or federal courts located in New York County, New York.

11. Contact

Questions about this notice or requests to exercise your privacy rights? Contact us at legal.gentoosolutions@gmail.com.

Data controller — registered address:

Gentoo Solutions LLC
418 Broadway, Ste N
Albany, NY 12207
USA