California Privacy Rights Addendum

Effective Date: September 12, 2025

California Residents: Your Enhanced Privacy Rights
‍
This addendum applies exclusively to California residents and supplements our main Privacy Policy in accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). California residents have additional rights regarding their personal information beyond those provided to all users.
‍
1. Categories of Personal Information We Collect (Last 12 Months)
‍
Under California law, we are required to disclose the categories of personal information we have collected about California residents in the preceding 12 months:

CCPA Category Collected by StewardWise Sources Business Purpose Third Parties Who Receive
A. Identifiers Name, email, username, device IDs, IP addresses Directly from you, automatically from devices Account management, security, analytics Google (analytics), cloud service providers
B. Personal Information (Cal. Civ. Code § 1798.80(e)) Name, email, phone (if provided) Directly from you Account creation, customer service Customer service providers
C. Commercial Information Budget data, transaction records, subscription history, donation records Directly from you, Plaid (bank data), payment processors Service delivery, financial analysis Plaid, Stripe, Apple/Google (subscriptions)
D. Biometric Information Not collected N/A N/A N/A
E. Internet/Network Activity App usage patterns, feature interactions, session data Automatically from app usage App improvement, user experience, security Google Analytics, Firebase
F. Geolocation Data General location via IP (not precise location) Automatically from device Security, fraud prevention Analytics providers
G. Sensory Information Profile images (optional), community post images Directly from you Profile customization, community features Cloud storage providers
H. Professional/Employment Info Not collected N/A N/A N/A
I. Non-Public Education Records Not collected N/A N/A N/A
J. Inferences Budget preferences, financial behavior patterns, app usage preferences Derived from your activity Personalization, service improvement Not shared
K. Sensitive Personal Information Login credentials (encrypted), financial account tokens (Plaid) Directly from you, Plaid (tokenized) Authentication, secure bank syncing Plaid (tokenized access only)

2. Sale or Sharing of Personal Information
‍
WE DO NOT SELL YOUR PERSONAL INFORMATION
‍
StewardWise does not sell personal information for monetary consideration and has not sold personal information in the preceding 12 months.
‍
Sharing for Cross-Context Behavioral Advertising: We may "share" certain information as defined by CPRA through our use of:

  • Google Analytics for usage analysis
  • Social media integrations (Google Sign-In)
  • Third-party service providers

3. Your California Consumer Rights
Right to Know

You have the right to request that we disclose:

  • Categories of personal information we collected about you
  • Categories of sources from which we collected your personal information
  • Business or commercial purpose for collecting or selling your information
  • Categories of third parties with whom we shared your personal information
  • Specific pieces of personal information we collected about you

Right to Delete

You have the right to request deletion of personal information we collected from you, subject to certain exceptions such as:

  • Completing transactions or providing requested services
  • Detecting security incidents or protecting against fraud
  • Complying with legal obligations
  • Internal uses reasonably aligned with your expectations

Right to Correct
‍
You have the right to request correction of inaccurate personal information we maintain about you. We will use commercially reasonable efforts to correct the information.
‍
Right to Opt-Out
‍
You have the right to opt out of the "sale" or "sharing" of your personal information. Since we don't sell information, this primarily applies to sharing for behavioral advertising purposes.
‍
Right to Limit Use of Sensitive Personal Information
‍
You have the right to direct us to limit the use and disclosure of your sensitive personal information to purposes necessary for performing services or providing goods reasonably expected by you.

Right to Non-Discrimination
‍
We will not discriminate against you for exercising your privacy rights by:

  • Denying goods or services
  • Charging different prices or rates
  • Providing different levels of quality
  • Suggesting you may receive different pricing or services

4. How to Exercise Your California Rights
‍
Email Request
‍
support@stewardwise.co
‍
Subject: "California Privacy Rights Request"
‍
Include: Full name, email address, specific request type
‍
In-App Request
‍
Profile Settings → Data Privacy → California Rights
‍
Follow the guided request process
‍
Automatically verified through your account
‍
Mail Request
‍
StewardWise LLC
‍
Attn: California Privacy Officer
201 E Center St, Ste 112-3319
Anaheim, CA 92805


Verification Requirements:

  • Account Holders: We verify through your existing account credentials
  • Non-Account Holders: We may request additional information to verify identity
  • Authorized Agents: Must provide signed authorization or power of attorney
  • Parent/Guardian: May act on behalf of children under 18 with proof of relationship

Response Timeline
‍
Initial Response: Within 10 business days of receiving your request
‍
Complete Response: Within 45 days (may be extended an additional 45 days for complex requests)
‍
Deletion Requests: Completed within 30 days when technically feasible
‍
5. Global Privacy Control (GPC) Support
‍
Automatic Opt-Out Recognition
‍
StewardWise recognizes and honors Global Privacy Control (GPC) signals from browsers and devices. When we detect a GPC signal from your browser:

  • We automatically treat it as a valid opt-out request
  • We will not share your information for cross-context behavioral advertising
  • We apply the opt-out to your device/browser combination
  • You do not need to take any additional action

Learn more about GPC: https://globalprivacycontrol.org/
‍
6. Sensitive Personal Information Details
‍
Under CPRA, the following types of information we collect are considered "sensitive personal information":
‍
Account Credentials
‍
What We Collect: Username and password (encrypted)
‍
Purpose: Account authentication and security
‍
Sharing: Not shared with third parties
‍
Financial Account Access
‍
What We Collect: Bank account tokens via Plaid
‍
Purpose: Transaction syncing and budget management
‍
Sharing: Tokenized access only through Plaid
‍
Limiting Sensitive Information Use: You can request that we limit our use of sensitive personal information to what is necessary for providing our services. Contact us using the methods above with "Limit Sensitive Information" in your request.
‍
7. Third-Party Information Sharing Details

Third Party Information Shared Purpose Your Control
Plaid Inc. Bank account tokens, transaction data Secure bank syncing service Disconnect bank accounts in app settings
Stripe Inc. Donation transaction records Payment processing for donations Opt out of donation features
Google LLC Usage analytics, device information App analytics and authentication Disable analytics in privacy settings
Apple / Google Subscription transaction data In-app purchase processing Manage through App Store / Play Store

8. Data Retention Schedule (California-Specific)
‍
In accordance with CPRA requirements, here are our specific retention periods for California residents:

  • Account Identifiers: Deleted within 30 days of account closure
  • Financial Transaction Data: 7 years for regulatory compliance (IRS requirements)
  • Community Posts: Immediately upon user deletion or account closure
  • Usage Analytics: 26 months maximum, then permanently deleted
  • Marketing Communications: Immediately upon opt-out or account deletion
  • Support Communications: 3 years, then archived with personal identifiers removed

Legal Retention Exceptions
‍
We may retain certain information longer when required by law, such as:

  • Financial records for tax compliance (7 years)
  • Legal dispute records (until resolution + statute of limitations)
  • Security incident records (for fraud prevention)
  • Regulatory compliance records (as required by applicable law)

9. Updates to This Addendum
‍
This California Privacy Rights Addendum may be updated to reflect changes in California privacy laws or our practices. We will notify California residents of material changes through:

  • Email notification to your registered address
  • In-app notification upon next login
  • Prominent notice on our website and in our app
  • Updated "Effective Date" at the top of this document

10. Contact Our California Privacy Officer
‍
Dedicated California Privacy Officer
‍
Email: support@stewardwise.co
‍
Mail: StewardWise LLC, California Privacy Officer
201 E Center St, Ste 112-3319, Anaheim, CA 92805

Response Commitment: All California privacy inquiries will receive a response within 5 business days
‍
This California Privacy Rights Addendum is effective as of September 12, 2025
and applies specifically to California residents using StewardWise services.
For questions about this addendum, contact our California Privacy Officer using the information above.