Privacy notice
Draft for the private beta. Last updated November 2026.
What we collect
- Your email address, and passkey public keys if you add them. We never see or store passwords.
- What you enter: paychecks, bills, cards, spending plans and settings.
- If you connect a bank: account names, balances and transactions, read through Teller. Your bank login goes to Teller, not to us.
- Statement files you import (we keep the parsed transactions, not the file).
How it's protected
- Bank access tokens are encrypted with AES-256-GCM before storage and are only decrypted on the server to sync.
- Data is stored in a Postgres database (Neon) in the US and served over HTTPS (Vercel).
- Every query is limited to your account. Security-relevant events are logged for you under Settings.
What we don't do
- We don't sell your data or share it with advertisers.
- We don't move money. Bank connections are read-only.
- We don't give financial advice. The app shows options and the math.
Your choices
- Download everything we hold, any time, from Settings.
- Disconnect a bank to destroy its access token.
- Delete your account to permanently remove all of your data.