Privacy Policy

This policy explains what information My Income Model (the "Service"), operated by SoftLOGiX, Inc., collects, how it is used, and the choices you have. It is written to reflect how the Service actually works.

Effective date: August 21, 2026

Information we collect

We collect only what is needed to run the modeling tool:

  • Account information — your email address, and (if you register) your first and last name. Sign-in is passwordless: we email you a one-time verification code rather than storing a password.
  • Planning inputs — the figures you enter to build a model, such as account balances, expected returns, spending, Social Security, pension, and annuity assumptions. These are estimates you provide for modelling; we do not connect to your financial institutions.
  • Subscription information — your subscription status and the identifier returned by our payment processor. We do not receive or store your full card or bank details.
  • Technical data — standard server logs (such as timestamps and error information) generated while operating and securing the Service.

How we use your information

We use your information to authenticate you, to save and retrieve your models, to provide and improve the modeling tool, to process and manage subscriptions, and to keep the Service secure. We do not sell your personal information, and we do not use it for third-party advertising.

Cookies

We use a small number of cookies that are necessary for the Service to function: an encrypted sign-in cookie that keeps you logged in, and a cookie that remembers which saved model you last selected. We do not use advertising or cross-site tracking cookies. You can clear these cookies in your browser at any time; doing so will sign you out.

Service providers

We rely on a few third parties to operate the Service, and share only what each needs to perform its function:

  • Payment processing — PayPal handles subscription billing. Your payment is made on PayPal's systems under PayPal's own privacy policy; we receive only your subscription status and a subscription identifier.
  • Email delivery — an email provider is used to send your verification codes.
  • Hosting and storage — the application and its database run on Microsoft Azure, using Azure SQL Database. Azure provides enterprise-grade infrastructure security: the database is encrypted at rest by default (Transparent Data Encryption), all connections to it are required to use encrypted TLS channels, and it is backed by automated, redundant backups. Microsoft operates the underlying data centers with physical access controls and 24/7 monitoring, and maintains independent, audited compliance certifications (including ISO 27001 and SOC 1/2/3). This infrastructure protection is in addition to the field-level encryption we apply to your data ourselves, described below.

How your information is protected

Data is transmitted over encrypted (HTTPS) connections. Beyond securing the database itself, we apply field-level encryption to your most sensitive information while it is stored ("at rest"):

  • Planning inputs and model data — the financial figures behind each saved model (such as account balances, expected returns, spending, Social Security, pension, annuity, and mortgage assumptions) are encrypted in our database using AES-256-GCM, a modern authenticated-encryption standard. They are not stored in readable form and cannot be read without a separate encryption key.
  • Name — your first and last name, if given, are encrypted at rest with the same AES-256-GCM encryption.
  • Email address — your email is stored in encrypted form, and the records that make up your account are located using a keyed one-way cryptographic hash (HMAC-SHA256) of your email rather than by the readable address itself.
  • Encryption keys — the keys used for this protection are managed separately from the database, so access to the database alone does not reveal the protected information.

Sign-in verification codes are cryptographically signed and expire after a short period. Together, these measures substantially reduce what could be exposed if the database were ever accessed without authorization. No method of transmission or storage is completely secure, and while these safeguards protect your information they do not render it anonymous; we take reasonable measures to keep it secure.

Data retention

We keep your account information, saved models, and subscription records for as long as your account is active or as needed to provide the Service. When you delete a saved model, it is permanently removed from our database at that time — the deletion is immediate and cannot be undone. You may also ask us to delete your account, and we will do so unless we are required to retain certain records (for example, billing records) by law.

Your choices and rights

You may access, correct, export, or delete the information associated with your account by contacting us. Depending on where you live, you may have additional rights under applicable privacy laws; we will honor those rights as required.

Children's privacy

The Service is intended for adults making retirement-planning decisions and is not directed to children. We do not knowingly collect personal information from anyone under 18.

Not financial or tax advice

The Service is a modeling and educational tool. The projections it produces are estimates based on the assumptions you enter and simplified tax rules, and are not tax, legal, or investment advice.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above, and material changes will be reflected on this page.

Microsoft and Azure are trademarks of the Microsoft group of companies. PayPal is a trademark of PayPal, Inc. These marks are used for identification only and do not imply any endorsement or affiliation.

This page is provided as general information about our data practices and is not legal advice.