Privacy Policy

Last Updated: April 2026

​

Hi Maestro ("we," "us," or "our") is operated by Hi Maestro, Inc. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at www.himaestro.com (the "Website") and our application at app.himaestro.com (the "App"), collectively referred to as the "Service."

 

By using the Service, you agree to the collection and use of information in accordance with this policy.

​

​Information We Collect

Information You Provide

When you create an account and use Hi Maestro, you may provide:

​

Account information: Your name, email address, and date of birth. If you sign in with Google or Apple, we receive your name and email address (or an Apple-generated private relay address) from your Google or Apple account. We do not receive or store your Google or Apple password.

​

Financial information: To generate your retirement plan, you may enter information about your income, savings, investments, spending, property, expected Social Security, and other financial details. This information is entered manually by you. Hi Maestro does not connect to, access, or import data from your bank accounts, brokerage accounts, or any other financial institutions.

​

Household information: You may provide information about members of your household, including names, dates of birth, and retirement-related details, to create a multi-member plan.

​

Payment information: If you subscribe to a paid plan, your payment is processed by Stripe, our 3rd party payment processor. We do not collect, store, or have access to your credit card number or banking details. Stripe's handling of your payment information is governed by their privacy policy at https://stripe.com/privacy.

​

Information We Collect Automatically

Usage data: We collect information about how you interact with the Service, including pages visited, features used, and general usage patterns. This data is collected through our hosting platform's built-in analytics and is used to improve the Service.

​

Device and browser information: We may collect your browser type, operating system, and general device information when you access the Service.

​

Cookies: The Service uses cookies and similar technologies for authentication (keeping you signed in) and basic functionality. We do not use advertising cookies or tracking cookies within the App. Our Website (www.himaestro.com) may use Google Analytics to understand how visitors find and use our marketing pages. Google Analytics uses cookies to collect anonymized usage data. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout/.

​

 How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating your retirement plan, projections, and plan improvement ideas

• Process your subscription and manage your account

• Send you transactional communications related to your account (such as password resets, subscription confirmations, and renewal reminders)

• Improve and develop new features for the Service

• Respond to your requests, questions, or feedback

• Protect against fraud, unauthorized access, and other security concerns

• Comply with legal obligations

​

We do not use your information to:

• Sell or rent your personal or financial data to 3rd parties

• Display advertising within the Service

• Provide financial advice, investment recommendations, or personalized financial guidance

• Share your data with financial advisors, brokers, or other financial service providers unless you explicitly request it

​

How We Store and Protect Your Information

Data storage

Your data is stored securely using Supabase, a cloud-based database platform. Our servers are hosted in the United States.

 

Encryption

Sensitive personal information, including personally identifiable information (PII), is encrypted at rest using pgsodium, a PostgreSQL encryption extension. This means your sensitive data is stored in an encrypted format and is not readable in its raw database form.

 

Access controls

Access to your data is restricted through row-level security (RLS) policies, which ensure that you can only access your own data. Administrative access to the database is limited and protected by authentication controls.

​

Data transmission

All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.

​

Your responsibility

You should also help protect your data by selecting a strong password, limiting access to your device and browser, and signing out after you have finished using the Service. While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

​

3rd Party Services

We use the following 3rd party services to operate Hi Maestro. Each service has access only to the information necessary to perform its function. We do not sell, trade, or otherwise transfer your personal or financial information to outside parties for their marketing or commercial purposes.

​

​

​

​

​

​

​

​

​

​

​

 

​
 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

​

AI-powered Features

The Ideas feature uses AI to generate retirement planning suggestions based on your plan data. When you use this feature, your plan information is sent through Lovable's AI Gateway to a third-party model provider (currently Google Gemini) to generate suggestions.

 

The specific data handling terms between Lovable and the model provider, including data retention and training use, are governed by Lovable's agreements with these providers.

 

We are working with Lovable to confirm these terms and will update this Privacy Policy as we receive additional information. If you prefer not to use AI-powered features, you can continue to use Hi Maestro's core planning functionality without them.

​

Aggregated and Anonymized Data

We may create aggregated, de-identified, or anonymized data from the information we collect, including by removing information that makes the data identifiable to a particular individual. We may use such aggregated or anonymized data for our lawful business purposes, including to analyze and improve the Service and to understand trends among our users. We will not disclose such data in a manner that could identify you.

 

Data Retention

We retain your data for as long as your account is active. If you cancel your paid subscription, your data is retained so you can continue using the Service on the free tier or resubscribe in the future.

​

If you wish to delete your account and all associated data, you may do so through the account settings in the App or by contacting us at support@himaestro.com. Upon account deletion, we will permanently remove your personal and financial data from our systems. Some data may persist in encrypted backups for a limited period before being fully purged.

​

Business Transfers

​In the event that Hi Maestro or Hi Maestro, Inc. undergoes a merger, acquisition, bankruptcy, or other transaction in which a 3rd party assumes control of our business (in whole or in part), your information may be transferred to that 3rd party. In such a case, we will make reasonable efforts to notify you and ensure that the acquiring entity honors the commitments made in this Privacy Policy or provides you with notice of any changes.

​

Your Rights and Choices

Access and update your data

You can view and update your personal and financial information at any time through the App.

​

Delete your data

You can request deletion of your account and all associated data by contacting us at support@himaestro.com or through the account settings in the App.

​

Email communications

You can manage your email preferences for non-transactional communications. Transactional emails (such as password resets and subscription-related notifications) cannot be opted out of while your account is active.

​

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how it is used

• The right to request deletion of your personal information

• The right to request correction of inaccurate personal information

• The right to opt out of the sale of personal information (we do not sell personal information)

• The right to not be discriminated against for exercising your privacy rights

To exercise your rights, contact us at support@himaestro.com. We will respond to verified requests within 45 days as required by law.

​

Residents of other U.S. states

Residents of states with consumer data privacy laws, including Colorado, Connecticut, Delaware, Virginia, and others, may have similar rights to access, delete, and correct their personal information. To exercise your rights, contact us at support@himaestro.com.

​

Children's Privacy

We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected data from a child under 13 without verified parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@himaestro.com.​

​

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you by email or by placing a notice within the Service. We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.