GLBA Notice

Credit Karma · Official agreement

Read the agreement

15 of 15 cards

Legal Rights & Agreement Rules · Context

This notice covers U.S. Intuit accounts

Intuit Inc. provides this notice for your U.S. Intuit account. The saved notice is marked revised March 2025.

Details not recorded for this card

Supporting quotations

This notice is provided by Intuit Inc. and is applicable to your U.S. Intuit account.
rev. Mar 2025

Data Access & Collection · Company practice

Collected and shared data depends on your product

Depending on your Intuit product or service, the personal information collected and shared can include your Social Security number, transaction history, account balances, payment history, credit history and credit scores. These are examples, not a statement that every product collects all of them.

Details not recorded for this card

Supporting quotations

The types of personal information we collect and share depend on the product or service you have with us. This information can include: § Social Security number and transaction history § account balances and payment history § credit history and credit scores

Data Access & Collection · Company practice

Information comes from account and financial activities

Intuit collects personal information when, for example, you open an account, seek financial or tax advice, supply contact or income information, or apply for a loan.

Details not recorded for this card

Supporting quotations

We collect your personal information, for example, when you § open an account or seek financial or tax advice § give us your contact information or give us your income information § apply for a loan
Also annotated in the same passage (1)

Data Access & Collection · Company practice

Intuit also collects information from other companies

Intuit also obtains personal information from sources such as credit bureaus, affiliates and other companies. Affiliates are companies under common ownership or control; the notice names Intuit businesses including TurboTax, QuickBooks, Mint, Credit Karma and Mailchimp.

Details not recorded for this card

Supporting quotations

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Companies related by common ownership or control. They can be financial and nonfinancial companies. § Our affiliates include companies with the Intuit name (operating as TurboTax, QuickBooks, Mint, Credit Karma, and Mailchimp)
Also annotated in the same passage (2)

Sharing & Disclosure · Company practice

Intuit shares information for everyday business

The notice says Intuit shares personal information for everyday business, including processing transactions, maintaining accounts, responding to court orders and legal investigations, and reporting to credit bureaus. Its table marks this sharing as something you cannot limit. California residents have the additional limits described in the notice: nonaffiliate sharing must be allowed by law, and sharing among Intuit companies is limited as California law requires.

Details not recorded for this card

Supporting quotations

| For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |
| Reasons we can share your information | Does Intuit share? | Can you limit this sharing? |
All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Intuit chooses to share; and whether you can limit this sharing.
For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.

Cross-references

  • qualified by (model-proposed): California sharing is limited by state law — The everyday-business row says sharing cannot be limited, while the California provision separately restricts nonaffiliate and within-group sharing as state law requires. The business card carries that regional qualification.
Also annotated in the same passage (5)

Sharing & Disclosure · Company practice

Intuit shares information to market its own products

Intuit says it shares personal information to offer its own products and services to you, and the table says you cannot limit this sharing. This describes Intuit’s own marketing. California’s separately stated limits on nonaffiliate and within-group sharing still apply where relevant.

Details not recorded for this card

Supporting quotations

| For our marketing purposes— to offer our products and services to you | Yes | No |
| Reasons we can share your information | Does Intuit share? | Can you limit this sharing? |
For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.
Also annotated in the same passage (6)

Sharing & Disclosure · Company practice

Intuit shares for joint marketing with financial companies

Intuit says it shares information for joint marketing with other financial companies, and its table says you cannot limit this sharing. Joint marketing means a formal agreement between unrelated financial companies to market financial products or services together; Intuit identifies its partners as financial service companies. This is distinct from sharing for nonaffiliates to market to you on their own. The notice also states California limits on nonaffiliate sharing and Vermont restrictions on disclosures to nonaffiliated third parties for marketing, subject to permitted-by-law or authorized disclosures.

Details not recorded for this card

Supporting quotations

| For joint marketing with other financial companies | Yes | No |
| Reasons we can share your information | Does Intuit share? | Can you limit this sharing? |
A formal agreement between nonaffiliated financial companies that together market financial products or services to you. § Our joint marketing partners are financial service companies.
| For nonaffiliates to market to you | No | We don’t share |
For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.
For Vermont Customers:
Intuit and Credit Karma will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.

Cross-references

  • contrast (model-proposed): Intuit says it does not share for nonaffiliates’ marketing — The notice allows joint marketing under a formal agreement with unrelated financial companies while saying it does not share for nonaffiliates to market to you. The different stated arrangements explain the tension; this is not a finding that the provisions contradict each other.
Also annotated in the same passage (6)

Sharing & Disclosure · Company practice

Affiliates receive transaction and experience information

Intuit shares information about your transactions and experiences for affiliates’ everyday business purposes; the table says you cannot limit this sharing. Affiliates are companies under common ownership or control, including the named Intuit businesses. This row concerns transactions and experiences, rather than creditworthiness. For California residents, sharing among Intuit companies is limited to the extent California law requires.

Details not recorded for this card

Supporting quotations

| For our affiliates’ everyday business purposes— information about your transactions and experiences | Yes | No |
| Reasons we can share your information | Does Intuit share? | Can you limit this sharing? |
Companies related by common ownership or control. They can be financial and nonfinancial companies. § Our affiliates include companies with the Intuit name (operating as TurboTax, QuickBooks, Mint, Credit Karma, and Mailchimp)
For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.
Also annotated in the same passage (7)

Sharing & Disclosure · Restriction or exception

Creditworthiness sharing with affiliates has purpose limits

Intuit says it does not share creditworthiness information with affiliates for their everyday business purposes. Its footnote permits sharing that information with affiliates for other purposes with your consent. The Vermont provision also restricts Intuit and Credit Karma’s disclosure of creditworthiness to affiliates, except as permitted by Vermont law or with your authorization; California limits within-group sharing as required by California law.

Details not recorded for this card

Supporting quotations

| For our affiliates’ everyday business purposes— information about your creditworthiness | No | We don’t share* |
| Reasons we can share your information | Does Intuit share? | Can you limit this sharing? |
*We do not share information about your creditworthiness with affiliates for their everyday business purposes. However, we may share information about your creditworthiness with affiliates for other purposes, with your consent.
For Vermont Customers:
Intuit and Credit Karma will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.
For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.

Cross-references

Also annotated in the same passage (7)

Sharing & Disclosure · Company commitment

Intuit says it does not share for nonaffiliates’ marketing

The sharing table says Intuit does not share personal information for nonaffiliates to market to you. Nonaffiliates are companies outside common ownership or control, whether financial or nonfinancial. This statement is separate from the joint-marketing arrangement described elsewhere. The Vermont provision states exceptions for disclosures permitted by Vermont law or authorized by you; California nonaffiliate sharing is limited to what law allows.

Details not recorded for this card

Supporting quotations

| For nonaffiliates to market to you | No | We don’t share |
| Reasons we can share your information | Does Intuit share? | Can you limit this sharing? |
Companies not related by common ownership or control. They can be financial and nonfinancial companies.
A formal agreement between nonaffiliated financial companies that together market financial products or services to you. § Our joint marketing partners are financial service companies.
For Vermont Customers:
Intuit and Credit Karma will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.
For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.

Cross-references

  • contrast (model-proposed): Intuit shares for joint marketing with financial companies — The notice allows joint marketing under a formal agreement with unrelated financial companies while saying it does not share for nonaffiliates to market to you. The different stated arrangements explain the tension; this is not a finding that the provisions contradict each other.
Also annotated in the same passage (6)

Security & Safeguards · Company practice

Intuit describes safeguards against unauthorized access and use

Intuit says it protects personal information with security measures that comply with federal law, including computer safeguards and secured files and buildings. The notice describes measures, not a guarantee that unauthorized access can never happen.

Details not recorded for this card

Supporting quotations

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

Sharing & Disclosure · User right or choice

The notice describes limited federal sharing choices

The notice says federal law lets you limit sharing creditworthiness information for affiliates’ everyday business, affiliates’ use of your information to market to you, and sharing for nonaffiliates to market to you. It says state laws and individual companies may provide additional rights. This is a description of the notice’s stated legal framework, not a claim that Intuit engages in all three activities: the table says it does not share for the first and third purposes, subject to the separate creditworthiness footnote.

Details not recorded for this card

Supporting quotations

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.
Federal law gives you the right to limit only § sharing for affiliates’ everyday business purposes—information about your creditworthiness § affiliates from using your information to market to you § sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.
| For our affiliates’ everyday business purposes— information about your creditworthiness | No | We don’t share* |
| For nonaffiliates to market to you | No | We don’t share |
*We do not share information about your creditworthiness with affiliates for their everyday business purposes. However, we may share information about your creditworthiness with affiliates for other purposes, with your consent.

Not stated here

  • The notice does not supply an opt-out procedure for affiliates’ use of information to market to you.
Also annotated in the same passage (1)

Account & Service Control · Procedure

Privacy questions can go to Intuit

The notice directs privacy questions to privacy@intuit.com and Intuit’s privacy website. It also points Vermont customers to that website for more information about its privacy policies. The linked policies are not supplied by this notice.

Details not recorded for this card

Supporting quotations

Visit us at: https://www.intuit.com/privacy/ Email us at: privacy@intuit.com
Additional information concerning our privacy policies can be found at https://www.intuit.com/privacy/.
For Vermont Customers:

Sharing & Disclosure · Restriction or exception

Vermont disclosures need authorization or a legal exception

For Vermont customers, Intuit and Credit Karma say they will not disclose creditworthiness information to affiliates, or disclose personal or financial information, credit reports or health information to nonaffiliated third parties to market to you, unless you authorize disclosure or Vermont law permits it. The notice does not describe the full scope of those legal exceptions.

Details not recorded for this card

Supporting quotations

For Vermont Customers:
Intuit and Credit Karma will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.

Cross-references

Also annotated in the same passage (2)

Sharing & Disclosure · Restriction or exception

California sharing is limited by state law

For California residents, Intuit says it will not share collected information with nonaffiliates unless law allows. It gives sharing with your consent and servicing your accounts as examples. It also limits sharing among its companies to the extent California law requires; this is not a promise of no sharing at all.

Details not recorded for this card

Supporting quotations

For California Customers: In accordance with California law, we will not share information we collect about California residents with nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts. We will limit sharing among our companies to the extent required by California law.

Cross-references

  • qualifies (model-proposed): Intuit shares information for everyday business — The everyday-business row says sharing cannot be limited, while the California provision separately restricts nonaffiliate and within-group sharing as state law requires. The business card carries that regional qualification.
Also annotated in the same passage (5)