Privacy policy

Last updated October 27, 2026

Wren is run by Pleasant Street Partners, LLC, doing business as Wren Money ("Wren", "we" or "us"). This policy explains what information Wren collects, what we do with it and who we share it with. If you have a question, write to [email protected].

What we collect

Your email address. You sign up and sign in with it, and we email you a code each time you sign in.

Information about your bank accounts, through Plaid. When you link a bank, Plaid sends us the accounts you hold there: each account's name, type, last four digits and balances. We also keep a token from Plaid that lets us refresh those balances, stored encrypted. We never receive your bank username or password, or your full account and routing numbers. When you link a bank, you may also allow Plaid to share your transactions, investments and loans with us for features we plan to add. We don't request that information today, and we'll update this policy before we do.

Information from Astra about your transfers. Astra is the payments company that moves your money. When you sign up with Astra, it verifies your identity and collects what it needs to do that under its own privacy policy. Wren doesn't receive your identity documents or Social Security number. We receive an identifier for your Astra account and its status, and records of the transfers Astra makes for you: amounts, dates, status and which of your accounts were involved. We also keep tokens that let Wren ask Astra to make transfers for you, stored encrypted.

Your rules and what Wren did with them. We keep the rules you set up and a record of each check Wren makes: the balances it saw, what it decided and why, and whether money moved. We also keep each authorization you give for transfers: the words you agreed to, when, and the IP address you agreed from.

Technical information. Our servers log requests to them, including your IP address and the time of the request, to keep Wren running and secure. The app keeps your signed-in session in your phone's secure storage. The app also tells us which screens you open and when you take steps such as linking a bank, setting up a rule or moving money, with your member number, your IP address and your phone's model, operating system, language and time zone, so we can see what works and what doesn't and spot fraud. It doesn't send your balances, amounts, account names or email address, and it doesn't record your screen. Wren doesn't use advertising trackers.

How we use it

• To run Wren: show your accounts, check your rules and ask Astra to make the transfers they call for.
• To email you sign-in codes and messages about your account and your transfers.
• To keep Wren and your accounts secure, and to prevent fraud.
• To meet our legal obligations.

We don't sell your information, and we don't share it with anyone for their own marketing or advertising.

Who we share it with

Only the companies that help us run Wren, and only what each one needs:

• Plaid connects Wren to your banks. Plaid's handling of your information is described in its End User Privacy Policy.
• Astra, Inc. makes your transfers. Astra's handling of your information is described in its privacy policy.
• DigitalOcean hosts Wren's servers and database.
• SparkPost delivers our emails.
• Sentry tells us when something in Wren or the app goes wrong. Its reports describe the error and your phone's model and operating system, and may include your member number, your IP address and the approximate location it indicates, but not your sign-in session or what you sent us.
• PostHog records the screens you open and the steps you take in the app, as described above. It keeps your IP address and the approximate location it indicates.

We may also disclose information when the law requires it, to protect the rights and safety of our members or others, or as part of a merger, acquisition or sale of Wren, in which case this policy would continue to apply to your information.

How we protect it

Information travels between your phone and Wren over encrypted connections. The tokens that reach your bank accounts and Astra are encrypted in our database. Access to Wren's systems is limited to the people who run it.

How long we keep it

We keep your information while you have a Wren account. You can delete your account at any time in the app's Settings, or by writing to [email protected]. If money is on its way between your accounts, you can delete your account once the money arrives. We then delete your information and disconnect your banks from Wren at Plaid, except for records we have to keep by law, such as records of money movement and your authorizations for it. We also keep the records PostHog holds of how you used the app, which carry your member number and IP address but not your name or email address, to help prevent fraud. Sentry deletes its error reports after 90 days. Astra keeps its own records under its own policy.

Your choices

You can ask to see, correct or delete the information we hold about you by writing to us. You can pause your rules in the app at any time.

Children

Wren is for people 18 and older. We don't knowingly collect information from anyone younger.

Changes

If we change this policy, we'll post the new version here and update the date at the top. If a change affects how we use information we already have, we'll email you before it takes effect.