Cluster is a personal finance and travel-tracking app built for one purpose: helping you keep track of your own accounts, trips, documents, and residency status. This page explains, plainly, what information Cluster collects, how it's used, and how you can remove it.
Everything below is information you enter yourself while using the app. Cluster has no marketing forms, no web tracking, and no data collected before you create an account.
Email address, password (handled by our authentication provider, never stored by Cluster in plain text), display name, and an optional profile photo.
Accounts, balances, transactions, credit cards, points balances, and budgets that you manually enter or import via CSV.
Countries and cities visited, trip dates and itineraries, and the home country/city you set — used to calculate day-count residency thresholds and related reporting (e.g. FBAR/T1135-style foreign asset summaries) for your own reference.
Files you choose to upload — passports, visas, insurance, tax, housing, or proof-of-travel documents — along with the metadata you attach to them (type, dates, notes).
Countries of citizenship and visa details you enter, used for the app's own residency and travel-prep features.
If you enable it, a TOTP (authenticator app) secret is generated and managed entirely by our authentication provider — Cluster's own database never sees or stores this secret.
Information you provide is used exclusively to power the features you're using it for: tracking balances and spend, calculating day-count and residency figures, storing your documents, and generating the reports and summaries you request inside the app.
Cluster is built on Supabase, a hosted Postgres database and file storage provider. A few specific protections are worth naming:
Every table is scoped at the database level so your data is only ever readable by your own account — this is enforced by the database itself, not just the app's code.
Uploaded files (passports, visas, etc.) live in a private storage bucket, never publicly listed or indexed. The app briefly generates a time-limited link to view a file when you open it, which expires shortly after.
You can require a one-time authenticator code at sign-in, in addition to your password.
Cluster has an opt-in connections feature that lets you share specific data — such as trip plans, account summaries, or document metadata — with another Cluster user you've explicitly connected with. Nothing is shared automatically: every module (countries, trips, cards, accounts, documents) has its own separate toggle, off by default, and either side can revoke access at any time.
Shared document access is metadata only (name, type, expiry) unless you separately choose to share the underlying file.
| Service | Purpose | What's shared |
|---|---|---|
| Supabase | Database, authentication, and file storage | All account data described above — this is the app's own backend, not a separate third party in the marketing sense. |
| Frankfurter (api.frankfurter.dev) | Daily currency exchange rates | Nothing personal — a generic request for public exchange-rate figures, with no account or device identifiers attached. |
Cluster does not integrate any advertising network, analytics SDK, or crash-reporting tool that would transmit your usage data off-device.
Your data is retained for as long as your account exists. You can permanently delete your account and all associated data at any time from within the app (Account → Delete Account). Deletion is immediate and irreversible — it removes your accounts, transactions, documents, trips, citizenship records, connections, and every other record tied to your account in a single operation.
Cluster is intended for adults managing their own finances and travel and is not directed at children. We don't knowingly collect information from anyone under 16.
If this policy changes in a meaningful way, the "Effective date" above will be updated. Continued use of the app after a change means you accept the updated policy.