Privacy Policy
Last updated September 2026
What Beacon never asks for
- Bank account or routing numbers
- Card numbers — Stripe handles payment, and card details never reach our servers
- Your real credit score or credit report
- Your Social Security number
- Financial documents of any kind
What we collect
Account information. Your email, the name you choose to give, your display name, timezone and country. Timezone matters because it decides when your day rolls over for streaks.
Learning data. Which lessons you complete, the answers you give, your XP, level, achievements, streak, category mastery and Financial Knowledge Score. This is the product: without it Beacon cannot tell you how you are progressing.
Billing data. If you subscribe, we store a Stripe customer reference, your plan, its status and period dates, and invoice metadata. We never see or store your card details.
Product analytics. Which features are used and when — account created, lesson completed, simulator opened, pricing viewed. This is how we decide what to build. You can switch it off in Settings → Privacy.
Technical data. IP address and browser user-agent, used for rate limiting, security and showing you your own signed-in devices.
Simulator inputs
The numbers you type into a simulator — salary, balances, debts — are the most sensitive data in the product, and they are treated that way. They are calculated in your browser, and they are only ever sent to our servers when you press Save. Simulator inputs are never sent to analytics, never written to logs, and never used for anything other than showing you your own saved run.
How we use it
- To run the service and keep your progress across devices;
- to personalise what Beacon recommends next;
- to process payments and manage subscriptions, through Stripe;
- to send account and billing email, and any optional email you have enabled;
- to protect the service against abuse;
- to understand which features are worth building, in aggregate.
We do not sell your data. We do not share it for advertising.
Who we share it with
Only the processors needed to run Beacon:
- Stripe — payment processing and subscription management;
- our email provider — sending verification, reset and notification email;
- our hosting and database providers — running the application.
Each processes data on our instructions. We may also disclose data where the law requires it.
Your controls
- Export. Download everything we hold about you as JSON, from Settings → Your data.
- Correct. Change your profile, email and preferences at any time.
- Opt out of analytics. Settings → Privacy.
- Control email. Every optional email has a toggle. Account and billing notices cannot be switched off, because they are account-critical rather than marketing.
- Delete. Delete your account from Settings → Your data. It is immediate and permanent.
Retention
We keep your data while your account is active. When you delete your account, your personal data and learning history are erased immediately. Two things survive: analytics rows with your identifier removed, which carry no personal data, and invoices, which tax and accounting law requires us to retain.
Security
Passwords are hashed with scrypt and are never recoverable. Session tokens are stored as keyed hashes, so a database leak alone does not yield working sessions. All traffic is encrypted in transit. Access to production data is limited to the people who need it to operate the service.
No system is perfectly secure. If a breach affects your data, we will tell you.
Cookies
Beacon uses two cookies, both strictly necessary: one holds your session, and one holds a CSRF token that stops other sites from acting as you. There are no advertising or third-party tracking cookies.
Children
Beacon is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Contact
Privacy questions or requests: Lighthouse Companies, LLC. See also our Terms of Service.