Privacy Policy

Effective date: August 15, 2026

Last updated: August 15, 2026

LOADED is operated by Zencode Consulting Inc. ("Zencode," "LOADED," "we," "us," or "our").

LOADED allows you to connect financial accounts and other supported asset sources so that we can calculate and display a verified measure of your wealth.

We designed LOADED around a simple principle:

We should collect as little financial information as possible to provide the service.

1. Information we collect

Account information

LOADED currently identifies your account with a device-generated identifier stored in your device's secure storage, together with authentication information, account settings, and consent and security records. We do not currently require your name, email address, or a password to use LOADED. If you contact us, we may process the email address you use to reach us. We do not store an account password in plaintext.

Financial information

When you choose to connect a financial institution through Plaid, we may receive user-authorized information necessary to calculate and verify your wealth, including:

• account type and limited account metadata
• current or available account balances
• investment account values
• investment holdings where required to determine account value
• loan, credit, mortgage, and other supported liability balances
• account-holder identity information used to confirm ownership of a connected account

LOADED does not request transaction-history access for its core wealth-verification service.

We do not use Plaid to initiate payments or move money.

Where practical, detailed provider information is reduced to the account or asset values required by LOADED and unnecessary raw provider responses are discarded.

Other verified assets

If you connect other asset sources, such as a self-custody digital-asset wallet, we may process information necessary to confirm ownership and determine the value of that asset.

The Privacy Policy will be reviewed and updated before materially new asset-verification systems are placed into production.

2. Plaid

LOADED uses Plaid to allow users to connect supported financial institutions.

When you use Plaid Link, information is exchanged with Plaid and your selected financial institution according to the permissions you approve during the connection process.

Your financial-institution credentials are entered into Plaid or the financial institution's own authentication system as applicable. LOADED does not intentionally receive or store your bank password.

Before Plaid Link is presented, LOADED provides the required authentication and consent flow, including a link to Plaid's End User Privacy Policy.

3. How we use financial information

LOADED uses connected financial information only for purposes reasonably necessary to provide and secure the service, including:

• determining current asset values
• determining current liability values
• calculating verified wealth
• refreshing a user's verified value
• confirming ownership of connected accounts
• creating user-requested verification records
• displaying the resulting value to the user
• displaying a verification publicly when the user explicitly chooses to share one
• detecting abuse or protecting the security and integrity of the service
• meeting legal and contractual obligations

LOADED does not use your financial information to provide lending decisions, credit scoring, advertising profiles, or investment recommendations.

4. Read-only access

LOADED's core financial integrations are read-only.

LOADED does not use connected financial accounts to:

• transfer funds
• withdraw funds
• initiate payments
• purchase or sell investments
• change financial-account settings

Connecting an account allows LOADED to obtain the authorized information necessary to calculate and verify wealth. It does not give LOADED authority to move the user's money.

5. Public verification

LOADED is designed to let users voluntarily show other people a verified wealth value. The user controls whether a verification is shared.

A public verification may contain information such as:

• the verified wealth value
• the date and time it was verified
• verification status
• a LOADED verification identifier

Public verification pages do not disclose:

• account numbers
• financial-institution credentials
• individual investment positions
• individual account balances
• the identity of financial institutions unless the user explicitly requests such a feature

Public verification links may expire or become invalid when the user deletes them, disconnects contributing financial sources, or deletes their LOADED account.

6. Information we do not sell

LOADED does not sell users' personal or financial information.

LOADED does not provide financial-account data to advertisers for targeted advertising.

If advertising or materially different data-sharing practices are ever introduced, this policy and the applicable consent mechanisms must be changed before that processing begins.

7. Service providers

Zencode may use service providers necessary to operate LOADED, including providers of:

• financial-data connectivity
• cloud hosting
• database and storage infrastructure
• authentication
• security and monitoring
• payment processing
• email or customer communications

These providers receive information only as reasonably necessary to perform services for LOADED and are subject to their respective contractual and privacy obligations.

Information may be processed in jurisdictions other than the user's province, state, or country and may therefore be subject to the laws applicable in those jurisdictions.

8. Security

LOADED uses administrative, technical, and organizational safeguards appropriate to the sensitivity of the information it processes.

Production controls include:

• encryption of consumer data at rest
• HTTPS using TLS 1.2 or later for data in transit
• application-level encryption of Plaid access credentials, with encryption keys stored in managed secret storage
• a device-stored, biometric-protected signing key, unlocked by Face ID or strong biometrics on the mobile app, before a financial-account connection can be requested
• least-privilege production access
• protected storage of financial-provider access credentials
• separation of secrets from source code
• vulnerability and dependency management
• logging designed to exclude financial data and authentication secrets

No method of storing or transmitting information can guarantee absolute security.

Security issues may be reported to security@zencode.ca.

9. Data retention

LOADED retains information only for as long as reasonably necessary to provide the service, maintain security, meet legal requirements, or satisfy an explicit user request.

In particular:

• raw Plaid API responses are not persistently retained unless technically necessary
• Plaid access credentials are retained only while the associated financial connection remains active
• current account values and normalized wealth data are retained only while required to provide LOADED
• verification records are retained according to the product's verification-retention rules
• operational logs must not intentionally contain financial values or provider access credentials
• deleted data may remain temporarily in encrypted backups until those backups expire, currently a maximum of 7 days

Zencode maintains a separate Data Retention & Disposal Policy describing organizational retention and secure-disposal practices.

10. Disconnecting a financial institution

Users can disconnect a financial institution from LOADED.

When a financial connection is disconnected:

1. LOADED stops using that connection.
2. Provider access is revoked or removed where supported.
3. Financial data associated solely with that connection is removed from active LOADED systems unless retention is required by law or remains necessary to fulfill an explicit user request.
4. Public verifications dependent on the disconnected source may be invalidated.

11. Account deletion

Users may delete their LOADED account.

Account deletion:

1. revokes active external financial connections where supported
2. removes associated provider credentials
3. deletes personal and financial data from active production systems
4. invalidates public verification links
5. removes or anonymizes other account information that is no longer required
6. allows deleted information to age out of encrypted backups according to the documented backup-retention schedule

Certain records may be retained where required for legal, security, fraud-prevention, accounting, or dispute-resolution purposes.

12. Consent

LOADED obtains user authorization before connecting external financial accounts.

The connection flow discloses:

• that the user is connecting a financial account
• the categories of information requested
• that the information will be used to calculate and verify wealth
• the involvement of Plaid or another applicable provider
• a link to this Privacy Policy

Consent is recorded with a timestamp and applicable policy version.

Materially new uses of financial information require appropriate notice and consent before implementation.

13. Children's privacy

LOADED is not intended for children under 18.

We do not knowingly offer financial-account verification services to children under 18.

14. Your privacy choices

Depending on applicable law and your location, you may have rights concerning personal information held about you.

LOADED provides mechanisms to:

• disconnect external financial sources
• delete your LOADED account
• invalidate public verification links
• contact Zencode regarding access, correction, or deletion of personal information

Privacy inquiries should be sent to privacy@zencode.ca.

15. Changes to this policy

This Privacy Policy will be reviewed periodically and whenever LOADED materially changes the categories of information it collects or the purposes for which that information is used.

Material changes will be reflected by updating the effective date and providing additional notice where appropriate.

16. Contact

Zencode Consulting Inc.
Alberta, Canada

Privacy: privacy@zencode.ca
Security: security@zencode.ca