Enough
← Back to Enough

Privacy Policy

Last updated: April 25, 2026

Porfin LTDA (“Enough”, “we”, “our”) operates the website enoughmoney.ai and related services. This policy explains what personal data we collect, why we collect it, and how you can control it.

1. Data we collect

Account information

When you create an account we collect your email address and, if you sign in with Google, your name and profile photo. We do not collect your password — authentication is handled by Firebase Auth (Google).

Financial inputs you provide

Portfolio size, spending, income sources, and city preferences you enter into calculators or your plan. This data is stored in your account and used only to power your personal projections. We do not sell or share it with third parties for advertising purposes.

Usage and analytics

We use PostHog and Microsoft Clarity to understand how the product is used (page views, feature interactions, session recordings). These tools may set cookies. We use this data only to improve Enough — not for advertising.

Payment information

Subscription and one-time payments are processed by Stripe. We store only a Stripe customer ID — we never see or store your full card number, expiry, or CVV.

Email address from free tools

If you share your email through a feature like the Move Check widget, we store it to send you the analysis you requested. You can unsubscribe at any time.

2. How we use your data

  • Provide and personalise the Enough service
  • Process payments and manage your subscription
  • Send transactional emails (receipts, plan summaries, account alerts)
  • Improve the product through aggregated usage analytics
  • Respond to support requests

We do not sell your personal data. We do not use your financial inputs for advertising targeting.

3. Third-party processors

To operate the service we share data with trusted third-party processors in the following categories. Each processor is bound by a data processing agreement and may only use your data for the stated purpose.

  • Authentication provider:Verifies your identity and manages login sessions.
  • Cloud database and hosting:Stores your account data and serves the application.
  • Payment processor:Handles subscription billing and one-time purchases. We never see your full card number.
  • Product analytics:Measures feature usage and performance in aggregate to help us improve the product.
  • Session recording:Records anonymised interaction sessions to identify usability issues.
  • AI inference:Powers AI-generated responses and analysis within the product.
  • Transactional email:Delivers receipts, plan summaries, and account notifications.

All processors are located in the United States or European Economic Area and operate under industry-standard data protection agreements.

4. Data storage and security

Your data is stored in Google Cloud Firestore (US region). We use HTTPS for all data in transit. Access to production databases is restricted to authorised personnel only. No system is perfectly secure — if you discover a vulnerability, please contact us at privacy@enoughmoney.ai.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons (e.g. payment records for tax purposes, typically 7 years).

6. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”)
  • Export your data in a portable format
  • Object to certain processing

To exercise any of these rights, email privacy@enoughmoney.ai. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication sessions and functional cookies for analytics (PostHog, Clarity). We do not use advertising cookies. You can disable cookies in your browser settings, though some features may not work correctly.

8. Children

Enough is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email or an in-app notice at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

10. Contact

Porfin LTDA
privacy@enoughmoney.ai