Rocket Money is a subscription-cancellation and budgeting app operated by Rocket Money, Inc., a subsidiary of publicly traded Rocket Companies, Inc. (NYSE: RKT), which is majority-controlled by founder Dan Gilbert. Its GLBA-mandated privacy notice discloses collection of contact details, bank account information, transaction history and credit card information (gathered directly and from banks, credit bureaus and third-party data aggregators), and states the company shares data with affiliates for marketing (limitable) but does not share with nonaffiliates for marketing. Its own iOS App Store privacy label, however, declares that Purchases, Purchase History, Financial Info and Payment Info linked to identity are used for 'Third-Party Advertising' — a disclosure in tension with the notice's no-nonaffiliate-marketing claim. The security page describes TLS-in-transit and 256-bit AES-at-rest encryption and tokenized bank-linking via Plaid and Akoya (no raw bank credentials stored). No privacy-specific breach, FTC or CFPB action was found in this research; the CFPB/RESPA and steering litigation found targets sister companies Rocket Mortgage/Rocket Homes, not Rocket Money's data practices.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
COLLECTION
The Rocket Money iOS App Store listing's developer-declared privacy label states that Purchases, Financial Info, Contact Info, User Content, Identifiers, Usage Data and Diagnostics may be collected and linked to the user's identity, corroborating the broad financial-account data set described in the GLBA privacy notice.
Rocket Money's GLBA-mandated privacy notice ("What does Rocket Money, Inc. do with your personal information") states the personal information it collects and shares includes contact details, account balances and bank account information, transaction history, and credit card information, and that this information is collected directly from users and also 'from others, such as banks, credit agencies and other third-party data aggregators.'
The SEC EDGAR company filing registry confirms Rocket Companies, Inc. as CIK 0001805284, a Michigan-incorporated, NYSE-listed mortgage/financial-services holding company with a continuous 10-K filing history back to 2023, corroborating the corporate parent identified in the 10-K itself.
Rocket Companies, Inc.'s FY2025 Form 10-K (SEC CIK 0001805284, NYSE: RKT), which describes Rocket Money as one of its consumer financial-wellness offerings, states that founder Dan Gilbert 'holds more than a majority of the combined voting power of our common stock' and that the Gilbert family can control matters requiring stockholder approval as long as they hold at least 50% of the voting power.
Rocket Money's GLBA privacy notice's sharing-disclosure table states the company shares personal information with affiliates for marketing purposes (limitable) and for affiliates' creditworthiness assessment (limitable), and for joint marketing with other financial companies, but marks 'For nonaffiliates to market to you' as 'No,' and separately names eight Rocket-family affiliates that may receive shared information.
Rocket Money's security page states that all communication between the user's device and Rocket Money is encrypted with TLS, that data at rest is protected with 256-bit AES encryption, and that bank-account linking via Plaid or Akoya uses an encrypted token that lets Rocket Money view transaction data without giving it the ability to access the user's bank login credentials; no privacy-specific breach or regulator action against Rocket Money was found in this research.
The Rocket Money iOS App Store privacy label discloses a 'Third-Party Advertising' data-use category that includes Purchases, Purchase History, Financial Info and Payment Info linked to the user's identity, meaning the developer declares that transaction and payment data may be used to serve advertising through third parties, not only first-party analytics.