Last updated: June 4, 2026
Your privacy matters. This policy explains what InvestEd collects and how it’s used.
The short version
We collect as little as possible. We don't sell it. You control it.
- Use InvestEd without signing in? We only see anonymous calculations—no personal info.
- Sign in to save scenarios? We store your email and name. That's it.
- We never sell your data or share it for marketing.
- You can delete everything anytime.
1. Who we are
InvestEd operates the-invested.com—a financial planning tool that helps you test whether your plans actually work.
This Privacy Policy explains what data we collect, how we use it, and your rights.
2. Information you provide
InvestEd may collect:
- Financial inputs you enter (e.g., contributions, loans, assumptions)
- Basic profile preferences (e.g., familiarity level, planning priorities)
- If you sign in to save scenarios: your name and email
This information is used only to run calculations and explain results.
3. How data is used
Your data is used to:
- Perform financial simulations
- Display results and charts
- Generate contextual explanations through the AI companion
- Store saved scenarios and comparison history (only when you choose to sign in / save)
We do not use your data to sell products or influence decisions.
4. AI usage and data
To explain your results in plain language, we send the information from your session — the scenario inputs you enter and any questions you type — to a third-party large-language-model provider (currently OpenAI), which returns the explanation text. We may use other providers, including Azure-hosted models, as our infrastructure evolves.
- We send only the scenario and conversation data needed to generate the explanation — we do not send your name or email address to the model provider
- Under our agreement with the provider, this data is not used to train their models and is not used for advertising
- Deterministic calculations run entirely on our own engine and never depend on the third-party model
- We do not infer hidden personal traits
- We do not use AI to profile users beyond stated inputs
5. Data storage
Depending on your usage:
- Calculation inputs are processed in memory and are not persisted unless you explicitly save a scenario
- Saved scenarios (if enabled) are stored securely in Azure-hosted infrastructure
- Sign-in session tokens (OTP state) are stored in a short-lived SQLite store that persists only for the duration of the sign-in flow (10-minute window)
- Forgot-email lookup tokens are stored in Azure Managed Redis — a private, in-VNet cache authenticated passwordlessly via Microsoft Entra Managed Identity. No Redis access keys are used. Tokens are single-use and automatically expire after 10 minutes
- All inter-service traffic (API ↔ Redis ↔ database) runs over Azure Virtual Network (VNet) private routing — it never traverses the public internet
We do not sell or rent your data.
5a. Signing in securely
InvestEd is passwordless — you never create or remember a password.
- How it works:Enter your email and we'll send you a one-time code. Enter the code to sign in — no password needed
- Your session: Once signed in, you stay logged in for 7 days. You can sign out at any time
- Forgot your email?You can look it up using your name and phone number. We'll only show you a partially hidden version of the address — we never reveal it in full
- Abuse prevention: To keep accounts safe, sign-in codes expire after 10 minutes and are limited to a small number of attempts. Lookups are similarly limited to prevent misuse
- Your sign-in data is kept private and handled securely. It is never shared with third parties or used for marketing
- No banking data, ever: Signing in only requires your email address. We never ask for or access any banking or financial account details
6. Cookies and analytics
We use two analytics tools to see how the product is used: Amplitude (product analytics) and Ahrefs Web Analytics (page traffic). They load on every page and set basic cookies to recognise a returning browser.
Here is exactly what they receive:
- Which pages you visit and how you arrived — page views, sessions, and referring site
- Three product milestones: that you started the planner, that you signed in, and that you saved a plan — plus which planner path you chose
- A few coarse settings so we can tell whether the product works outside the US: your country, which tax regime applies, and whether your plan includes a home loan
And what they never receive:
- No amounts. Not your income, balances, loan sizes, contributions, or any result we calculate. We switched off the settings that would capture what you type into a form or read the figures off your results page
- No identity. We never send your email or your account ID to either tool. They see an anonymous browser, not you
- Nothing you type to the AI. Your questions and answers are never sent to an analytics tool
Amplitude and Ahrefs keep this data under their own retention policies. You can block both with any standard browser tracker-blocker, and the product works exactly the same if you do.
7. Your control
You control:
- What information you enter
- What scenarios you explore
- Whether to save or delete your data (where applicable)
You can request deletion at any time. For now, the simplest path is to use our feedback form and choose a data/deletion request.
8. Updates
This policy may be updated as the platform evolves. Continued use indicates acceptance of changes.
Contact us
Questions? Concerns? Requests?
Use our feedback form and we'll get back to you: