FINLAB

Privacy Policy

Last updated: July 14, 2026

1. Who we are

FinLab is a finance interview preparation app for iOS, operated by Evan Bourkoff (United States). Questions about this policy or your data: ejbourkoff@gmail.com.

2. What FinLab does

FinLab helps candidates prepare for investment banking and private equity interviews with practice questions, lessons, progress tracking, an estimated Interview Readiness Score, and an optional AI tutor. Practice content in FinLab is original and AI-authored; FinLab is not affiliated with, or endorsed by, any bank, fund, or credential body, and nothing in FinLab is investment advice.

3. Information we collect

What we do NOT collect

No advertising or cross-app tracking SDKs
No third-party analytics SDKs
No location data
No contacts, photos, or files from your device
No credit card numbers (payments are handled entirely by Apple)

Account information

If you create an account, we collect your name (optional), email address, and a unique account identifier. Sign-in is provided through Sign in with Apple, Google Sign-In, or email and password. Email accounts are managed by Supabase; passwords are hashed and are never visible to us in plain text. You can also use FinLab without an account.

Study activity

Your practice results, answer history, streaks, goals, path progress, and readiness scores are stored on your device. They are not uploaded to our servers today. Deleting the app (or using "Reset all data" in Profile) removes them.

AI tutoring content

When you use the AI tutor ("Tutor" chat, "Tutor me on this," lesson deep-dives, or the daily plan note), the content needed to answer — your message, the practice question involved, and a summary of your study stats (accuracy by topic, readiness target, days until your interview) — is sent over an encrypted connection to our server, which forwards it to Anthropic's Claude API and returns the response. We do not store your tutoring messages after the response is delivered.

Usage counters and device identifier

To enforce daily AI usage limits fairly, our server stores a daily counter keyed to your subscription transaction identifier (for Pro users) or your device's identifier-for-vendor (for free users). This identifier does not contain your name or email.

Purchases

FinLab Pro subscriptions are processed by Apple. We receive subscription status (an Apple-signed transaction confirming an active subscription), never your payment details.

4. How we use information

Provide the service: sign-in, AI tutoring, subscription entitlements, usage limits
Send account emails: verification and password-reset messages
Protect the service: prevent abuse of AI usage limits and unauthorized access
Comply with law

We do not sell or share your personal information for advertising. We do not send marketing email.

5. AI disclosure

Model: AI tutoring is powered by Claude, provided by Anthropic, via Anthropic's API.
No training on your data: under Anthropic's API terms, content sent through the API is not used to train Anthropic's models. We do not use your data to train models either.
Accuracy: AI output is probabilistic and can be wrong. Tutoring explanations, study plans, and readiness scores are educational aids and estimates — not guarantees, and not investment advice.
Practice content: questions and lessons are original, AI-authored material in the style of real finance interview technicals — not material from any bank or interview guide.

6. Service providers

Provider	Purpose	Privacy policy
Anthropic	AI tutoring (Claude API)	anthropic.com/legal/privacy
Supabase	Account authentication	supabase.com/privacy
Railway	Server hosting	railway.com/legal/privacy
Apple	Sign in with Apple, App Store payments	apple.com/legal/privacy
Google	Google Sign-In	policies.google.com/privacy

Lessons may link to YouTube for study videos. Those links open outside the app, and Google's terms and privacy policy apply there.

7. Data retention

Study data on your device: until you delete the app or reset your data
AI tutoring messages: not stored after the response is delivered
AI usage counters: daily counts keyed to an opaque identifier
Account data: until you delete your account (see Your rights)
Server logs: retained briefly by our hosting provider for security and debugging

8. Your rights

You can access, correct, or delete your personal information. Email ejbourkoff@gmail.com from your account email and we will act within 30 days, including full account deletion.

EEA/UK (GDPR): we process account data to perform our contract with you, and usage data for our legitimate interest in operating the service securely. You also have rights to restriction, portability, objection, and to complain to your supervisory authority.
California (CCPA/CPRA): you have the right to know, delete, and correct. FinLab does not sell or share personal information as defined by the CCPA.

9. International transfers

Our servers are located in the United States. If you use FinLab from outside the US, your information is processed in the US.

10. Children

FinLab is designed for students and professionals preparing for finance interviews and is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it. For users under 18, a parent or guardian should review this policy.

11. Security

All network traffic uses TLS (HTTPS)
Passwords are hashed by Supabase; we never see or store them in plain text
AI API keys live on our servers, never in the app
We store no payment card data

12. Changes

We will post any material changes here with a new "Last updated" date. Significant changes will also be highlighted in the app.

13. Contact

ejbourkoff@gmail.com — we respond within 30 days.