Privacy Policy

1. Introduction

FinalOut ("we," "us," or "our") operates a military transition planning platform at finalout.app. This Privacy Policy explains what personal information we collect, how we use it, how long we keep it, and your rights regarding it.

FinalOut is not affiliated with the Department of Veterans Affairs (VA), Department of Defense (DoD), DFAS, DHS, or any government agency. All planning tools are educational only.

2. Information We Collect

Account information

• Email address (required for account creation via Clerk)
• Display name (optional)
• Branch of service, component, rank (optional, for calculator defaults)
• Date of birth and TAFMSD (optional, for eligibility calculations)
• Referral source (optional)

VA planning data (user-provided)

Condition labels (e.g. "Back Pain," "Tinnitus") — not medical records, ICD codes, or diagnoses — body system, claim type, evidence strength ratings, records checklist items (types and statuses, not actual documents), and appointment records (types, dates, statuses).

We do not store SSNs, DD214 files, medical records, diagnostic codes, or full medical narratives.

Financial planning data (user-provided)

Basic pay estimates (High-3 or Final Pay), TSP balances and draw scenarios, budget line items and monthly expenses, and debt records (type, balance, interest rate).

Usage data (automatic)

IP address and user agent (logged for the PHI access audit trail described below), request timestamps, and error logs (request bodies are scrubbed before transmission to error monitoring).

Billing data

Stripe Customer ID and subscription status if you subscribe to the Supporter tier. Actual payment card data is processed and stored by Stripe, not FinalOut.

3. How We Use Your Information

We do not sell your personal information. We do not use your data for targeted advertising.

4. Data Retention

• Active account and planning data — retained while your account is active
• Deleted account data — immediately and permanently deleted upon request
• PHI access audit logs — 6 years from creation (HIPAA business-associate standard)
• Billing records — 7 years (tax/financial compliance)
• Error logs (Sentry) — 30 days
• Server access logs — per our hosting provider's retention policy

5. Data Sharing

We share data only with service providers under data processing agreements: our cloud hosting and database provider, our authentication provider (Clerk), Stripe for payment processing, an AI provider for career guidance features (non-PHI only), and an error-monitoring provider (request bodies scrubbed before transmission). We do not transfer personal data outside of the United States.

6. Your Rights

You may request a copy of your data, request deletion of your account and all associated data, or correct your profile information at any time by emailing privacy@finalout.app or by using the delete-account option in your account settings.

California, Virginia, Colorado, Connecticut, Texas, and other state residents with comprehensive privacy laws have the right to know what information is collected, to delete or correct it, and to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising. Submit requests to privacy@finalout.app. We respond to verified requests within 45 days.

7. Security

We use TLS encryption in transit, encryption at rest for all databases, field-level encryption for sensitive VA condition labels, PHI access audit logging, rate limiting on all API endpoints, and third-party authentication (no passwords stored by FinalOut). See our Security page for more detail.

8. Children's Privacy

FinalOut is intended for active-duty service members and veterans. We do not knowingly collect personal information from individuals under 18.

9. Changes to This Policy

We will notify registered users by email of material changes to this policy at least 30 days before they take effect. The "Last Updated" date above reflects the most recent revision.

10. Contact

For any privacy question or data request, email privacy@finalout.app with your account email address and a description of your request.