Fineprint

If you like this, see what else we're creating.

Finance

Robinhood

robinhood.com

D
Open the original (new tab)Robinhood US User Privacy Statement | Robinhood
D

Risk score

64of 100

Read Oct 23, 2026

In short

  • You are accepting that Robinhood collects sensitive personal data, including biometric facial geometry and precise location, to verify your identity and prevent fraud.
  • The agreement allows them to keep your information indefinitely as long as they believe it is necessary for legal or business reasons, rather than for a fixed period.
  • You also agree to third-party tracking across other websites and apps for targeted advertising, which they may share with marketing partners.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing that Robinhood extracts facial geometry from selfies to verify identity and prevent fraud.

    This product

    “We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud.”
  2. 02

    You are agreeing to indefinite retention of your personal data for legitimate interests if required by law or internal policy.

    Other products, stores, or brands

    “We may also keep your personal data for a longer period if required by law, in connection with an ongoing or potential claim, or for another legitimate legal or regulatory reason.”
  3. 03

    You are agreeing to third-party tracking across different websites and devices for targeted advertising.

    Other companies

    “The information that is collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you, both on and off our websites.”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Location or sensitive-data over-collection

You are agreeing to let Robinhood use facial geometry data from your photos for identity verification.

“We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud.”

What that means: You allow the company to store and process sensitive biometric data linked to your identity.

The document states that biometric facial geometry is extracted to verify identity, which goes beyond standard identity verification methods like text-based info.

High cost

Tracking you across apps

You are agreeing to have your activity tracked by third parties across different websites for advertising purposes.

“We and our third-party partners use this information to, among other things, analyze and track data... and deliver advertisements targeted to your interests on our Services and other platforms...”

What that means: Your browsing habits are tracked across the web to build a profile for advertisers.

Third parties collect device identifiers and usage data to track activity across multiple sites and serve targeted ads.

High cost

Third parties handle data you submit

You are agreeing to let third-party vendors handle your personal information for fraud prevention and identity checks.

“We collect information about you from companies that we do business with, such as... identity verification and fraud prevention partners.”

What that means: External companies you did not directly choose receive and process your personal information.

Information is shared with and collected from vendors like identity verification partners who handle your data for fraud prevention.

Medium cost

Indefinite retention

You are agreeing that your data may be kept for as long as the company deems necessary for legal or regulatory reasons.

“We may also keep your personal data for a longer period if required by law, in connection with an ongoing or potential claim, or for another legitimate legal or regulatory reason.”

What that means: Your data remains stored by the company for an undefined duration beyond your active use.

Data can be kept indefinitely based on vague 'legitimate interests' or regulatory reasons, without a specific time limit stated for general user data.

Medium cost

Data sold or shared with third parties

You are agreeing to have your personal information shared with marketing partners for targeted advertising.

“Some of our business activities may be considered “sales,” “sharing,” or “targeted advertising” under applicable US state laws.”

What that means: Your personal information is sold or shared with advertising partners for their own marketing purposes.

Sharing data with marketing partners for targeted advertising is classified as a 'sale' or 'sharing' under California law, meaning it is not limited to service providers.

Lower cost

Records kept for years

You are agreeing that financial data may be retained for up to 5 years after your relationship with the company ends.

“we may retain certain data for the duration of your relationship with us and for a period of up to 5 years after the relationship ends”

What that means: Some of your financial transaction data is explicitly kept for five years after you close your account.

Specific retention periods are mentioned for financial records (up to 5 years), providing some clarity alongside the indefinite clauses.

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what Robinhood asks.

News for this company

First readings and wording changes we could quote — the same items that appear on News.

All News

  1. Updated · Privacy policy

    Robinhood privacy policy changed

    We quoted 8 wording changes below. The current grade is D.

    Wording we could quote

    • Changed

      Tracking you across apps

      Was

      “The information collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you”

      Now

      “We and our third-party partners use this information to, among other things, analyze and track data... and deliver advertisements targeted to your interests on our Services and other platforms... The information collected may be collected over time and combined with information collected on different websites and online services and across your devices”

    • Changed

      Location or sensitive-data over-collection

      Was

      “We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud”

      Now

      “Biometric Data: We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud.”

    • Changed

      Indefinite retention

      Was

      “We retain your personal information for as long as necessary to achieve the original purpose(s) for which we collected it and to comply with relevant laws”

      Now

      “We retain your personal information for as long as necessary to achieve the original purpose(s) for which we collected it and to comply with relevant laws... We may also keep your personal data for a longer period if required by law... or for another legitimate legal or regulatory reason.”

    • Changed

      Data sold or shared with third parties

      Was

      “We disclose information about you to third-party advertising and analytics services... For example, we may share personal data such as your hashed email address or your device ID with marketing partners”

      Now

      “Some of our business activities may be considered 'sales,' 'sharing,' or 'targeted advertising' under applicable US state laws. Social does not process sensitive personal information as defined under applicable state privacy laws... Yes, we may share with advertising partners”

    • Changed

      Unilateral changes with little or no notice

      Was

      “when we update it, we will revise the "Effective Date" above and post the new statement and, in some cases, we provide additional notice”

      Now

      “This Privacy Statement will evolve with time, and when we update it, we will revise the 'Effective Date' above and post the new statement and, in some cases, we provide additional notice... To stay informed of our privacy practices, we recommend you review the statement on a regular basis as you continue to use our Services.”

    • Changed

      Broad license to user content

      Was

      “Social Content, such as: Posts you create about trades; Comments, reactions, and other interactions with other Users’ content”

      Now

      “We use information collected in connection with Social to: Provide and maintain Social features... Generate and display trading-related posts or profile statistics... Personalize the order and selection of content shown in your feed... Improve and develop Social features and related Services.”

    • Changed

      Children’s data

      Was

      “With the exception of authorized users of our credit cards, we do not knowingly collect or solicit any information from anyone under the age of 13 through our Services”

      Now

      “With the exception of authorized users of our credit cards, we do not knowingly collect or solicit any information from anyone under the age of 13 through our Services. If you attempt to add an authorized user to your account who is under the age of 13, we will request that you represent that you are the parent or legal guardian of that individual and that you consent to our collection and use of the child’s personal information”

    • Appeared

      Difficult or incomplete deletion

      “If you delete your Social profile, we will delete your Social profile information, posts, comments, reactions, interactions, and follower relationships, except to the extent retention is required or permitted by law, or necessary to comply with regulatory, fraud prevention, or recordkeeping obligations.”

    Oct 1, 2026 · D

    Company pageSee what changed

  2. Updated · Privacy policy

    Robinhood privacy policy changed

    We quoted 7 wording changes below. The current grade is D.

    Wording we could quote

    • Changed

      Children’s data

      Was

      “CHILDREN ](#7CHILDREN) With the exception of authorized users of our credit cards, we do not knowingly collect or solicit any information from anyone under the age of 13 through our Services.”

      Now

      “With the exception of authorized users of our credit cards, we do not knowingly collect or solicit any information from anyone under the age of 13 through our Services”

    • Changed

      Data sold or shared with third parties

      Was

      “If You disable these permissions, we will no longer share personal information with marketing partners to more effectively market our services across third-party websites and services.”

      Now

      “We disclose information about you to third-party advertising and analytics services... For example, we may share personal data such as your hashed email address or your device ID with marketing partners”

    • Changed

      Indefinite retention

      Was

      “RETENTION OF INFORMATION ](#3RETENTIONOFINFORMATION) We retain your personal information for as long as necessary to achieve the original purpose(s) for which we collected it and to comply with relevant laws.”

      Now

      “We retain your personal information for as long as necessary to achieve the original purpose(s) for which we collected it and to comply with relevant laws”

    • Changed

      Tracking you across apps

      Was

      “- **Vendors and Business Partners**: We collect information about you from companies that we do business with, such as name, contact data, inferences about your preferences and attributes, as well as inferred fraud risk, from identity verification and fraud prevention partners.”

      Now

      “The information collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you”

    • Changed

      Location or sensitive-data over-collection

      Was

      “You can stop the collection of this precise location information at any time (review [Your Controls](https://robinhood.”

      Now

      “We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud”

    • Appeared

      Unilateral changes with little or no notice

      “when we update it, we will revise the "Effective Date" above and post the new statement and, in some cases, we provide additional notice”

    • Appeared

      Broad license to user content

      “Social Content, such as: Posts you create about trades; Comments, reactions, and other interactions with other Users’ content”

    Oct 1, 2026 · D

    Company pageSee what changed

  3. First reading · Privacy policy

    We read the Robinhood privacy policy

    Fineprint found 5 quoted privacy clauses that match the consumer rubric. This is a reading aid, not legal advice.

    Sep 2, 2026 · D

    Company pageSee what changed