Last updated: October 20, 2026
Tovari is a personal budgeting app, and Tovari is a product of Tovari Financial — the assumed name (DBA) of Ewing Technology Partners, LLC ("we," "our," "us"), a Texas limited liability company. We present the product to you as "Tovari" in most places and as "Tovari Financial" in others; both names mean the same product from the same company, and this policy covers it under either name.
When we say the "Services," we mean Tovari together with everything we provide around it: our website at www.tovarifinancial.com (including our help documentation at www.tovarifinancial.com/docs), the Tovari web application at app.tovarifinancial.com, and our mobile apps — whether used in a web browser or on a mobile device. The Services are offered only in the United States.
This policy applies to visitors to our websites, people who join a waitlist or contact us, and account holders who use the Services. It describes our own handling of your information. Ewing Technology Partners, LLC (DBA Tovari Financial) is the business responsible for — the controller of — the personal information described here. Your use of the Services is also governed by our Terms of Use.
Our guiding principle is to collect only what we need to run the Services. Here is everything we collect, grouped by type, with where it comes from.
When you create an account we collect your name, email address and password. If you sign in with Google or Apple instead, we receive the basic profile that provider shares — your name and email address (Apple may give us a private relay address instead). We also record whether you have turned on two-factor authentication, and your time zone. Sign-in is handled by Amazon Cognito; we never store your password ourselves.
If you invite someone to share your household, we collect the email address you give us and send them an invitation that includes your name and your household's name. We keep track of who belongs to each household and who administers it.
When you link a bank, card, loan or investment account, we receive through Plaid:
We never receive or store your bank username or password. Plaid does not give us your full account numbers, and we don't keep the location information Plaid includes with transactions.
Transactions you enter by hand, files you import (CSV, OFX or QFX), and everything you set up in Tovari — categories, budgets, bills, goals, payees, notes and preferences. Files you import may contain your account and transaction details.
Your plan and billing interval, your trial and subscription status and dates, and the identifiers our payment providers use for your household. When you pay on the web, you enter your card and billing address into a secure form provided by Stripe; we never receive or store your full card number (Stripe shows us your card's brand, last four digits and expiry date so we can display them in your billing settings). When you subscribe through the Apple App Store or Google Play, Apple or Google handles the payment, and we receive your subscription status from them through RevenueCat; we never receive your Apple or Google payment details.
When you email us, report a problem in the app, or use the help assistant, we collect what you send us. In-app problem reports also include the screen you were on, your browser or device type, and the app version, along with your name and email address so we can reply. See AI features for the help assistant.
When you use the Services we automatically collect:
We don't use this information to follow you across other websites or apps.
If you join a waitlist or contact us through our website, we collect your email address and anything else you choose to share (such as your name or the budgeting apps you use), along with your IP address, browser type and the time you sent it.
Our marketing website uses HeyCatch analytics. When you visit one of its pages, HeyCatch records the pages you view, the links and buttons you click, how you arrived (such as the website or campaign link that sent you), and your IP address, browser and device type, linked to a random visitor ID stored in your browser. We use this only to understand and improve our website; it isn't used for advertising, and nothing is collected when your browser sends a "Do Not Track" signal. Our apps and help documentation don't use analytics. See our Cookie Policy.
We don't collect your bank passwords, your full bank account numbers, your Social Security number, your precise location, your contacts or photos, or advertising identifiers.
We don't use your information for advertising, and we don't use it to build marketing profiles.
We use Plaid Inc. ("Plaid") to connect Tovari to your financial institutions. By linking an account, you authorize us to access and use your financial data through Plaid, and you agree that Plaid may collect, use, and store your information in accordance with the Plaid End User Privacy Policy. Your bank credentials are provided directly to Plaid and are not shared with us. We ask Plaid for your transactions — up to about two years of history when you first connect — and, where you give permission, your investment information.
You can disconnect a linked institution at any time in the app. Disconnecting tells Plaid to stop sharing that connection's data with us; the accounts and transactions already in Tovari stay in your household until you delete them or your account. You can also review the apps connected through Plaid at my.plaid.com.
To save you time, Tovari suggests a payee and category for your transactions. Most suggestions come from rules and a built-in merchant dictionary. When those can't decide, we send the transaction's merchant description (with account-holder names removed where we can detect them), payment-network details such as the type of bank transfer and, in some cases, its amount and whether it is money in or out, to an AI model. We use Anthropic's Claude models through Amazon Bedrock, a service run by Amazon Web Services in the United States. We don't send your name, email address or account names. AWS states that Amazon Bedrock doesn't use this content to train models and doesn't share it with the model's developer. The results are stored for your household only, and you can change any category.
If the AI still can't tell which business a transaction is from, we look the business up. We send only the business name and, where the description includes one, the city or state taken from the merchant description — never your name, amounts or account details — to Amazon Location Service (when the description names a place) and to Amazon's Nova model with web search, both through Amazon Web Services in the United States. AWS states that Nova's web searches stay within AWS and are not sent to the wider internet. We never look up a description that looks like a person's name, or one for a paycheck, a fee or interest charge, a refund or reversal, a transfer between accounts, or a person-to-person payment. Nothing returned by a lookup is kept except the payee and category we choose for you.
The in-app help assistant answers questions about using Tovari, drawing on our help documentation. When you ask it something, we send your question, your recent messages in that conversation, the screen you're on and your type of device to the same AI service. The assistant is not given your accounts, balances or transactions, so please don't paste financial or other sensitive details into it. Its answers are generated by AI and may be wrong. We don't keep transcripts of your conversations; we keep a copy of each answer for up to 90 days so that a repeated request returns the same answer, and we count how often each person uses the assistant to apply plan limits. If you choose to send a problem report the assistant drafts for you, we handle it like any other report.
To make categorization more accurate, authorized members of our team periodically review merchant descriptions our system could not categorize, alongside the categories people chose for them. These reviews use records with household identifiers and amounts removed, and are used only to improve categorization.
We don't use AI or other automated processing to make decisions that have legal or similarly significant effects on you, and we don't use your financial data to train AI models.
We share personal information only in these ways:
We do not sell your personal information, share it for cross-context behavioral or targeted advertising, or give it to third parties for their own marketing.
We may create aggregated or de-identified information that can no longer reasonably be linked to you or your household, and use it to understand and improve the Services. We keep and use such information only in de-identified form, we don't attempt to re-identify it, and we require anyone we share it with to do the same.
We rely on these companies to run the Services. Each receives only what it needs for its task, may use it only to provide its service to us, and is required by contract or its terms of service to protect it in a manner consistent with this policy:
Our support team uses an internal tool to help you and to keep the Services running. It shows who belongs to a household and their email addresses, subscription and bank-connection status, and — for each linked account — its name, institution, the last digits of its number and its balance. It does not show your transactions, payees or budgets.
We look at transaction-level information only when we need to — to investigate a problem you report, to fix an error, to protect the Services and our users, or to comply with the law. Access is limited by role, requires our company single sign-on, and actions taken through our support tools are logged.
Wherever you live, you can ask us to:
We won't charge you differently or give you worse service for exercising these rights.
Email privacy@tovarifinancial.com, or write to us at Ewing Technology Partners, LLC (DBA Tovari Financial), PO Box 63, Bowie, TX 76230, United States. To protect your account, we'll verify your request — usually by asking you to write from the email address on your account or to sign in. You may use an authorized agent; we'll ask for your signed permission and may confirm your identity with you directly. We respond within 45 days, and if we need up to 45 more days we'll tell you why. You never need to accept an updated policy to make a request: if you decline updated terms, you can still email us for a copy of your data or to delete it.
If we decline your request, we'll explain why. You can appeal by replying to our decision with "Appeal" in the subject line, and we'll respond within 45 days. If you're not satisfied with the outcome, you can contact your state's Attorney General.
Information in a shared household belongs to the household. If you're a member rather than an admin, deleting your account in the app sends your request to the household's admins. If you've been removed from a household, your sign-in is disabled and the information you added stays with the household. Either way, you can email us to delete or de-identify your own personal information (such as your name and email address); the household's shared financial records stay with the household unless an admin deletes them.
In the app. A household admin can delete the household from Settings in the web app or the iPhone or Android app, or from the subscription screen, after confirming. Deletion starts immediately and usually finishes within minutes. It permanently erases your household's accounts, transactions, budgets, bills, goals and settings; deletes the sign-ins of everyone in the household; disconnects your banks at Plaid; and cancels a subscription you pay for on the web. It does not cancel a subscription bought through the Apple App Store or Google Play — cancel that in your Apple Account settings or in Subscriptions in the Google Play Store app. If you want a copy of your data, export it first. If you're a household member rather than an admin, the app sends your request to the admins.
By email. If you can't use the app, email privacy@tovarifinancial.com from the address on your account. We'll verify the request and complete it within 45 days.
What remains after deletion:
We may keep information longer where the law requires it, to resolve disputes, or to enforce our agreements.
All data is encrypted in transit using TLS. Data at rest — our databases, backups and stored files — is encrypted, and the tokens that give us access to your bank connections are encrypted with separately managed keys. Each household's data is isolated from every other household's at the database level (row-level security). You can protect your account with two-factor authentication using an authenticator app. Access by our team is limited by role and logged, and we choose service providers with strong security practices. No method of transmission or storage is 100% secure; if a breach affects your personal information, we'll notify you as the law requires.
We send service emails about your account — for example security alerts, billing notices and receipts, household invitations, and notifications about your money, some of which are on by default (such as bill reminders and a weekly summary of bills, spending and balances). Notification emails can include the names and amounts of your bills and other figures from your household. You can turn most notification emails off in Settings or with the unsubscribe link; security and certain account emails are always sent.
We don't send marketing or promotional emails. If we ever do, we'll ask for your consent first or give you an easy way to opt out, as the law requires.
Our emails don't contain tracking pixels or tracked links, so we don't know whether you open them or click their links. Our email provider tells us only whether a message was delivered, bounced, or was marked as spam, so we can stop sending to addresses that can't receive mail.
Push notifications in our mobile app are optional; you can turn them off in the app or in your device's settings. Some notifications, such as bill reminders, may show a dollar amount on your lock screen.
We don't track you across other websites or apps, and we don't use advertising trackers. Our marketing website uses HeyCatch analytics, described above, to understand how the website is used; our apps, help documentation and emails don't use analytics. Some providers we rely on — Stripe for payments, Google for sign-in and web fonts, and esm.sh, which delivers HeyCatch's code to our website — load code on our pages and receive basic technical information, such as your IP address and browser type, under their own privacy policies; see our Cookie Policy for details.
Our website respects "Do Not Track" browser signals: when your browser sends one, HeyCatch stores nothing and collects nothing about your visit. Our apps don't respond to "Do Not Track" signals, because they don't do the cross-site tracking those signals are meant to stop. Because we don't sell personal information or share it for targeted advertising, there is nothing for a Global Privacy Control signal to switch off; if we ever sell or share personal information or use it for targeted advertising, we'll treat a Global Privacy Control signal as a valid request to opt out.
The Services are operated in the United States. Your information is stored in AWS's US East (N. Virginia) region, and AI processing runs in AWS's U.S. regions. The Services are intended only for people in the United States.
Several U.S. state privacy laws — including California's Consumer Privacy Act, as amended by the California Privacy Rights Act — require specific disclosures. This section provides them for residents of those states. The rights described in Your choices and rights are available to everyone.
The Services are only for adults 18 and older. They are not directed to children, and we don't knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
We may update this policy as the Services or the law change. When we make a material change, we'll tell you in the app — where you'll be asked to review and accept the update before continuing — and may also email you, and we'll update the date at the top of this page. Where the law requires it, we won't apply a material change to information we already hold without your consent.
Questions or requests about privacy: privacy@tovarifinancial.com. Everything else: support@tovarifinancial.com. Ewing Technology Partners, LLC (DBA Tovari Financial) is a Texas limited liability company based in the United States.
By mail:
Ewing Technology Partners, LLC (DBA Tovari Financial)
PO Box 63
Bowie, TX 76230
United States