8 Total
3 High severity
5 Medium severity
0 Low severity
Summary

This is Acorns' Privacy Policy, explaining how the micro-investing and banking app collects and uses your personal and financial data — including your Social Security number, bank account details, investment activity, and app behavior. The most important thing to know is that Acorns shares your personal information with third-party marketing and advertising partners, analytics companies, and its Earn rewards partners, which goes beyond what many consumers expect from a financial app. California residents can opt out of the sale or sharing of their personal information by submitting a request through Acorns' privacy rights portal.

Technical Summary

This document is Acorns' Privacy Policy governing the collection, use, and sharing of personal information across its suite of financial products (brokerage, IRA, banking, and custodial accounts), with legal basis rooted in user consent, contractual necessity, and applicable U.S. financial privacy law including the Gramm-Leach-Bliley Act. The policy requires Acorns to collect extensive personal and financial data — including Social Security numbers, bank account credentials, transaction history, device identifiers, and behavioral/usage data — and permits sharing that data with affiliated companies, service providers, marketing partners, and data analytics firms. A notable deviation from industry standard is the breadth of third-party sharing permitted for marketing and advertising purposes, including with 'Earn' rewards partners and advertising networks, without a straightforward global opt-out mechanism; the policy also embeds tracking via Microsoft Clarity, Amplitude, and RudderStack analytics as disclosed in the page source. The policy engages CCPA/CPRA (California Consumer Privacy Act, Civil Code §1798.100 et seq.) with explicit rights disclosures for California residents, GLBA (15 U.S.C. §6801 et seq.) as the baseline U.S. financial privacy framework, COPPA given the presence of Acorns Early custodial and kids' debit card products, and FINRA/SEC suitability and recordkeeping obligations applicable to the registered broker-dealer and investment adviser entities. Material compliance considerations include ensuring consent mechanisms for behavioral advertising trackers satisfy CCPA opt-out of sale/sharing requirements and that the children's product data handling is fully COPPA-compliant given the minor-facing Acorns Early product line.

Evidence Provenance
Captured May 1, 2026 06:12 UTC
Document ID CA-D-000172
Version ID CA-V-001110
Wayback Machine View archived versions →
SHA-256 d641b4e0c8ae1b1822fb347a14d48b8a04e1ce19f117d75b89cdbf89bda24c8f
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

2 changes analyzed since monitoring began.

What changed Acorns updated their Acorns Privacy Policy on May 01, 2026. Change detected: 1 sentence(s) modified. Document contained 346 sentences after update.
Consumer impact Acorns has issued a new version of its Privacy Notice with an updated effective date of April 30, 2026, replacing the previous version dated May 19, 2025. For most users, this change alone has no immediate impact on how their data is collected or used, as only the effective date was modified in the detected diff. You can visit Acorns' website and review the full Privacy Notice dated April 30, 2026 to check whether any substantive data practices have changed alongside this date update.
Why it matters A new effective date signals a newly active version of the privacy policy governing how Acorns handles your financial and personal data. Users should review the full updated policy to ensure no substantive changes to data practices were introduced.
What changed Acorns updated their Acorns Privacy Policy on April 30, 2026. Change detected: 7 sentence(s) added, 2 sentence(s) removed, 9 sentence(s) modified. Document contained 346 sentences after update.
Consumer impact Acorns now explicitly discloses that when you sign in using Apple or Google, they receive certain account information (like your name and email or a proxy email), and that this data is governed by the third-party provider's terms. The AI chatbot section was reworded to be less specific about its function, removing the description of it as a tool for directing users to curated internal articles. You can review your Apple or Google account settings to control what information those services share with third-party apps like Acorns.
Why it matters If you use Apple or Google to sign into Acorns, this policy now explicitly tells you what data those services share and that you're also bound by their terms — a transparency improvement that helps you understand who controls your data. The vaguer AI chatbot language is worth watching, as it no longer limits what the chatbot can do.

Recent Clause-Level Changes May 1, 2026

8 provisions unchanged.

View full change record →
High Severity — 3 provisions
Medium Severity — 5 provisions

Cross-platform context

See how other platforms handle Children's Data — Acorns Early and similar clauses.

Compare across platforms →

Applicable Regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
FCRA
United States Federal
GLBA
United States Federal