Nolan helps you securely connect your bank and investment accounts, understand your spending, and receive personalized financial insights — all with your privacy at the center.
Features
Nolan is a personal finance app that brings together your financial accounts in one place and uses AI to surface the insights that matter most to you.
Securely link checking, savings, and investment accounts through Plaid's encrypted connection flow.
Automatically categorize transactions and visualize where your money goes each month.
Receive AI-generated observations about your balances, trends, and opportunities to save.
Nolan never stores your bank login credentials. Your data is used solely to power the app's features.
Plaid API Usage
Nolan uses the Plaid API to facilitate secure bank account connections. Plaid is an independent third-party service; Nolan is not affiliated with, endorsed by, or officially partnered with Plaid Technologies, Inc.
The user taps "Connect Account" within Nolan. No financial data is accessed until the user explicitly consents.
Nolan launches Plaid Link, a secure, Plaid-hosted UI. Nolan never sees, handles, or stores the user's bank username or password at any point.
The user authenticates directly with their financial institution inside Plaid Link. Multi-factor authentication (MFA), if required by the bank, is handled entirely within Plaid Link.
Upon successful authentication, Plaid returns a short-lived public_token to Nolan's mobile client. This token has no value on its own and cannot be used to access account data directly.
Nolan's mobile app sends the public_token to Nolan's backend API over HTTPS/TLS. The backend exchanges it for an access_token using the Plaid API. The access_token is stored securely server-side and is never exposed to the client or user.
Nolan's backend retrieves transaction, balance, and account data from Plaid on the user's behalf. This data is then processed to generate spending summaries and financial insights displayed within the app.
Security
Nolan is built with security as a foundational requirement, not an afterthought. Below are the specific measures in place to protect user data.
Nolan never collects, stores, or transmits your bank username or password. Authentication is handled entirely by Plaid Link and your financial institution.
All data transmitted between the Nolan app, Nolan's backend, and the Plaid API is encrypted using HTTPS/TLS.
Plaid API credentials (client ID and secret) are stored exclusively on Nolan's backend server. They are never embedded in the mobile app or exposed to end users.
No financial data is accessed without a clear, explicit user action. Users must actively choose to connect an account, and must separately grant permission on a dedicated in-app screen before any data is shared with our AI provider.
Nolan requests only the Plaid API products and account data necessary to provide the app's core features. No unnecessary data is collected.
All Plaid API calls that require credentials are made server-side. The mobile app communicates with Nolan's backend, which acts as a secure intermediary.
Legal
Effective date: July 7, 2026 · Owner: Husein Mokbel
When you connect a bank or investment account, Nolan — via Plaid — retrieves account and transaction data (account names, balances, transaction descriptions, amounts, and dates) that you have authorized us to access. We do not collect your bank login credentials at any time.
Nolan does not require an account, login, or email address. During onboarding you may enter profile details (first name, age, province or state, income, expenses, savings, debt, and goals); this information is stored locally on your device and used to personalize the app. Our backend keeps standard, short-lived technical logs for debugging and abuse prevention. We also count anonymous product events (such as "app opened" or "message sent"), keyed by a random install identifier, to understand overall usage; these counts never include your name, your finances, or anything you type.
Your financial data is used exclusively to provide Nolan's core functionality: categorizing transactions, calculating balances, and generating personalized financial insights within the app. We do not sell your data, share it with advertisers, or use it for any purpose unrelated to delivering the service.
Nolan uses Plaid Technologies, Inc. to facilitate bank account connections. By connecting an account, you also agree to Plaid's End User Privacy Policy. Plaid's privacy practices are independent of Nolan's.
Nolan's assistant is powered by AI from Anthropic, PBC, a company based in the United States. Before any of your personal data is sent to Anthropic, Nolan asks for your explicit permission on a consent screen inside the app during setup. Nothing is shared with Anthropic until you agree, and you can withdraw this permission at any time in the app's Settings, which stops all sharing. When you chat with Nolan, your message, any image or file you attach (for example a photo of a receipt or a PDF bank statement), recent conversation history, and a summary of your financial data (such as account balances, spending totals, and transaction descriptions and categories) are transmitted over an encrypted connection to our backend and then to Anthropic to generate the response. Your bank login credentials are never part of this data. Under Anthropic's commercial terms, this data is not used to train AI models, and Anthropic provides protection for your data equivalent to what this policy describes. For questions about current topics such as rates or market news, the AI provider may perform a web search to ground the answer; your account numbers and balances are not included in search queries. AI-generated responses are informational and may contain mistakes; always verify important figures against your bank. See Anthropic's privacy policy at anthropic.com/legal/privacy.
Your profile and chat history are stored locally on your device and are removed when you delete your data or the app. To personalize the in-chat insight shortcuts, Nolan also keeps a small on-device record of the topics you ask about; it never leaves your device and is erased with your data. If you enable iCloud backup in Settings (on by default), a small copy of your profile, the assistant's memory notes, and your bank connection reference is stored in your own private iCloud, controlled by your Apple ID; Nolan's servers never receive it, and turning the toggle off or deleting your data erases it. Plaid access tokens are stored on Nolan's secured backend server and are revoked when you disconnect a bank or delete your data. Subscription payments are processed entirely by Apple; Nolan never sees or stores your payment card details.
Our service providers (Plaid, Anthropic, and our hosting provider) process data on servers located in the United States. By using Nolan you consent to your information being transferred to and processed in the United States, where privacy laws may differ from those in your country of residence.
We do not sell, rent, or trade your personal or financial information to third parties. Data may be shared only with the service providers necessary to operate Nolan: Plaid (bank connectivity), Anthropic, PBC (AI responses, only after you grant permission as described in section 4), Apple (subscriptions and payments), and our cloud hosting provider. Each receives only what it needs, only to the extent required to provide the service, and each is bound by its own terms and privacy policy that provide protection for your data equivalent to what this policy describes.
The Nolan website (this page) does not use cookies, tracking pixels, or any third-party analytics scripts. No personal data is collected through this website.
We implement industry-standard security measures including HTTPS/TLS encryption in transit and secure, access-controlled storage for sensitive data. Plaid API secrets are stored server-side only and are never exposed to client applications or end users.
Nolan is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
Depending on where you live (including under Canada's PIPEDA, the EU GDPR, and the California CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to withdraw consent. You can exercise the most important of these directly in the app: Settings → "Delete all my data" permanently revokes Nolan's bank access at Plaid and erases your profile, chat history, and stored data. For any other request, contact mokbel.huss@gmail.com and we will respond within 30 days.
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or by updating the effective date above. Continued use of Nolan after changes take effect constitutes acceptance of the updated policy.
Data Retention & Disposal Policy
Effective Date: March 15, 2026 · Organization: Husein Mokbel (Founder / Developer)
This Data Retention and Disposal Policy defines how consumer data is collected, stored, retained, and securely deleted in compliance with applicable data privacy laws and industry best practices. The goal is to ensure that data is retained only as long as necessary and disposed of securely when no longer required.
This policy applies to all consumer data processed by Nolan, including data retrieved via the Plaid API, as well as any associated metadata stored in backend systems.
Legal
These terms are a binding agreement between you and Husein Mokbel, operating the Nolan app as a sole proprietorship ("Nolan," "we," "us"). By downloading, accessing, or using the app you agree to them, including the sections on no professional advice, disclaimers, limitation of liability, indemnification, and governing law. If you do not agree, do not use the app. Last updated July 7, 2026.
Get in Touch
Questions about your data, this privacy policy, or Nolan in general? Reach out directly.
mokbel.huss@gmail.comOwner & Developer: Husein Mokbel