Privacy Policy

1. What this policy covers

This policy describes information processed by Salute to Suit on the website and mobile apps. We collect information needed to provide the features you use, operate accounts and purchases, protect the service, and, where enabled, measure product usage. We do not describe identity-linked analytics as anonymous.

2. Information you provide

Account information may include your name, email address, authentication identifiers and acceptance records. Profile inputs may include military branch, rank, specialty, years of service, age, duty or residency information, filing status and dependent information.

Saved financial and planning records may include compensation inputs, scenarios, account names and balances, portfolio positions, budgets, timeline progress and notes. Registered records may synchronize through Firebase. Guest planning records are generally stored on your device. Optional analytics, hosting logs and external links are separate from cloud synchronization; guest mode is not a promise that no network communication occurs.

Do not submit bank credentials, bank account numbers, Social Security numbers, payment card numbers, classified information or controlled government information. Payment providers collect payment details directly. We receive purchase identifiers, status, plan and billing-period information needed to manage access.

3. AI questions and processing

When you request Ask Salute, your selected tool, mode, question and relevant app-computed facts are sent through our server to our AI provider, currently Anthropic. This can include compensation or other financial totals needed for the selected question. Avoid including names or other unnecessary personal information in free-text questions.

We keep operational usage counts and may keep request identifiers, model names, token counts and outcome metadata for credit accounting, abuse prevention, reliability and cost control. Product analytics filters are designed to exclude financial inputs/results and question or response text. We do not promise that our providers have zero retention; their applicable processing terms govern provider records.

4. Analytics, device information and cookies

Firebase Analytics and PostHog can process device/app information, page or screen names, timestamps and product actions such as calculation completion, saves, exports, paywall views and checkout stages. When signed in, an internal account identifier can link permitted events across devices. Device identifiers, IP-derived general location and provider-generated technical metadata may also be processed.

The updated web product offers separate optional analytics and advertising choices. Essential storage supports authentication, security, saved drafts, theme and privacy preferences. Optional analytics is off until enabled; browser Do Not Track and Global Privacy Control signals disable optional web tracking. You can reopen Privacy choices in the website footer. Updated mobile apps provide an optional analytics control in their menu or legal screen. Previously installed versions may have different controls until updated.

The updated web analytics implementation disables DOM autocapture and session replay, strips URL query strings and filters financial values, account names, emails and AI text from custom product events. Native custom analytics uses a bounded metadata filter. These controls reduce collection; historical events and older app versions are not retroactively changed by a software update.

5. Advertising and attribution

The website can use a Reddit conversion pixel when configured and separately enabled in Privacy choices. This may disclose page visits, conversion actions and technical identifiers to Reddit for advertising attribution. It is disabled when advertising permission is off or a supported browser privacy signal is present. Optional attribution stores only bounded source/channel information, not arbitrary search terms or personal query text.

Advertising banners and sponsored links may be configured separately. We do not sell your saved financial records. Advertising measurement can be treated as sharing under some privacy laws; where applicable, use Privacy choices and recognized browser signals to opt out. We do not use your financial records to target advertising.

6. Family sharing and notifications

Linking with a partner makes basic profile information visible to that partner. You separately control supported financial sharing categories. New financial-sharing settings default to off. You can disable a category or unlink. Past downloads and copies cannot be recalled.

If you enable notifications, we may store a Firebase Cloud Messaging device token and notification preferences. Revoke notification permission in your device or app settings. Sign-out and deletion flows attempt to remove associated device tokens.

7. Providers and disclosures

Providers include Google Firebase/Google Cloud for authentication, storage, database, notifications and analytics; Vercel for hosting, web performance and permitted analytics; PostHog for permitted product analytics; Stripe for web billing; Apple and Google for mobile purchases; RevenueCat for purchase and entitlement management; Anthropic for AI responses; and Reddit for separately enabled advertising measurement.

We may also disclose information when required by law, to protect rights and security, or in a business transfer subject to applicable protections. Providers process information under their applicable terms and privacy policies. We do not claim that every provider contract or international-transfer mechanism has been independently audited.

8. Storage, security and transfers

We use authenticated access, service-provider encryption and application security rules to protect stored information. Authorized family sharing is an intentional exception to owner-only access. No online service can guarantee absolute security. Keep credentials private and secure your devices.

Providers may process data in the United States and other countries where they operate. Applicable legal safeguards depend on the provider and your location. If an incident requires notification, we will notify affected people and authorities as required by applicable law; a universal 72-hour notice to every user is not promised.

9. Retention and deletion

Account and saved planning records are generally retained while needed to provide your account. Deletion requests remove associated user records through our account-deletion process, subject to backups and lawful exceptions. Billing providers may independently retain transaction and tax records. Operational usage, fraud-prevention and security records may be kept as needed for those purposes.

Analytics retention depends on configured provider settings. We do not promise a fixed 12-month deletion period unless that setting has been verified. Local storage persists until cleared by you, the app or the browser. Contact support for current retention details or a deletion request.

Deleting a Salute to Suit account does not cancel an Apple, Google or Stripe subscription. Cancel with the purchasing provider separately. Deleting account data does not automatically erase every historical analytics or billing record; contact us for assistance with those requests.

10. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information, restrict processing, object, or opt out of certain sharing. Request help through account controls or support@salutetosuit.com. We may verify identity and apply lawful exceptions. We will respond within applicable deadlines and explain any permitted extension.

Use website Privacy choices for optional analytics and advertising, mobile analytics controls in updated apps, device settings for notifications and unsubscribe links for promotional email. We honor supported browser privacy signals in the updated web implementation. Essential security, billing and account operations may continue when optional analytics is disabled.

11. Children and policy changes

The service is intended for users aged 17 and older. We do not knowingly collect personal information from children under 13. Contact support if you believe a child has provided information so we can investigate and take appropriate action.

We may update this policy as features or practices change. The version date identifies the current text. Material changes will receive an appropriate notice. Publishing an updated policy does not itself activate new billing plans or optional tracking.

12. Contact and provider policies

Contact support@salutetosuit.com for privacy questions and requests. Current policy: https://www.salutetosuit.com/privacy. Terms: https://www.salutetosuit.com/terms.