Privacy Policy

Last updated: August 17, 2026

Profit Duck (“Profit Duck,” “we,” “us”) provides a financial dashboard that helps restaurant owners understand their sales, fees, expenses, and taxes by bringing together data from their point-of-sale, bank, and delivery platforms. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

Account information — the username/email and password you use to sign in. Passwords are stored only as salted hashes; we never store them in plain text.

Financial & business data you connect — when you connect an account, we retrieve and store the data needed to power your reports:

• Square (POS) — orders, items, fees, payouts, catalog data, and customer details Square provides, such as customer names, email addresses, phone numbers, notes, and platform IDs.
• Your bank, via Plaid — account names, balances, account and transaction history, merchant/counterparty details, and raw transaction fields needed for expense tracking and payout reconciliation.
• Delivery platforms (DoorDash, Uber Eats, Grubhub) — order, fee, payout, item, refund, and customer/order identifier data synced via our optional browser extension, our optional Cloud Sync service, or file uploads you provide.
• AI assistant conversations — if you use the optional in-app assistant, the questions you ask, the answers it gives, and any ratings you leave. Images you attach are sent to answer your question but are not kept in our conversation log.
• Receipts and files you upload — receipt photos attached to manual entries, and statement/report files you import.
• Usage & security logs — sign-in events (including IP address and browser info), diagnostic and sync telemetry, and bug reports you submit.

About Cloud Sync (managed browser)

If you enable Cloud Sync for a delivery platform, we run a browser session on our servers that signs in to that platform’s merchant portal to pull your data on a schedule. You type your platform password into the platform’s own login page, streamed through our servers: your keystrokes pass through Profit Duck to reach that page, but we do not log them and never store your password in our own database.

Once you have signed in, that browser profile’s login session cookies are saved on our servers so later syncs can run without you. This happens whenever you connect Cloud Sync and is not optional, because those cookies are what keeps the session alive. We encrypt that snapshot, and the encryption key is not available to the browser process itself. If you additionally accept the browser’s own offer to save your password, that copy is held inside the browser profile under the browser’s standard protection, which is weaker than our own encryption of the session snapshot.

You can disconnect a platform at any time from your settings, which revokes the sync’s credentials and deletes the browser profile from our servers. Removal of the encrypted session snapshot is verified. If a sync happens to be running at that moment the disconnect can fail and report an error; retry it, and contact us if you want us to confirm removal.

AI assistant (optional)

Profit Duck includes an optional AI assistant (“Duckworth”) that answers questions about your own business data. When you use it, your question, any images you attach, your recent messages in the conversation, relevant context (such as the page you’re viewing), and the business figures needed to answer are sent to Anthropic, our AI provider, to generate the response. Under Anthropic’s commercial terms, this data is not used to train its models. The assistant is deliberately built without access to your customers’ names or your bank account numbers, and it sees bank transactions only as amounts, dates, vendor names, and categories — though for transactions you haven’t given a clean vendor name, the vendor may appear as the merchant descriptor from your bank statement.

We keep a log of assistant conversations, which we may review to improve answer quality and investigate problems or misuse. You can ask us to delete your conversation history at any time. And the assistant is entirely optional: if you’d rather not use AI at all, ask us and we’ll turn it off for your account — every number in the app is computed without AI either way, so nothing else changes.

About bank connections (Plaid)

We use Plaid Inc. to securely connect your bank account. When you link a bank, your login credentials are entered directly into Plaid and are never seen or stored by Profit Duck. Plaid provides us with the account and transaction data you authorize. Your use of Plaid is also governed by Plaid’s End User Privacy Policy. You can disconnect your bank at any time from your settings.

How we use your data

We use your data solely to provide the service to you — to calculate and display your sales, fees, expenses, tax estimates, forecasts, and reconciliation. We do not sell your data, and we do not use it for advertising.

How we share data

We share data only with the service providers that make Profit Duck work — our cloud hosting provider, Plaid (bank connectivity), Square (POS data), Anthropic (AI assistant responses, only when you use the assistant), and our email delivery provider, Resend (your email address and message content, only when we email you) — and only to the extent needed to operate the service. We may disclose data if required by law. Each customer’s data is stored in an isolated, per-account database.

Data retention & security

We keep your data while your account is active. We use reasonable technical and organizational measures to protect it, including encrypted transport, hashed passwords, encrypted storage for supported API tokens, and per-account data isolation. Account backups may contain readable transaction, order, customer, and platform data, so store downloaded backup files securely. No method of storage or transmission is 100% secure, but we work to protect your information.

Your choices

You can disconnect any connected account at any time, download a full copy of your data from your settings, ask us to turn the AI assistant off for your account, ask us to delete your assistant conversation history, or ask us to delete your account and associated data by contacting us at support@profitduck.app.

Children

Profit Duck is a business tool and is not directed to anyone under 18.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we’ll notify you in the app.

Contact

Questions about privacy? Email us at support@profitduck.app.