Privacy

What we store

Your sign-in email and the financial data you add or import: accounts, transactions, categories, tags, rules, budgets, recurring bills, goals and settings.

If you connect a bank, transactions and balances come from Plaid. Your bank password is never seen or stored by us; the bank connection key stays on our servers and is never sent to your browser.

What we don't do

We don't sell your data, show ads, or share your finances with anyone except Plaid when you choose to connect a bank.

Usage statistics are anonymous and never include amounts, payees or account names.

Who can see your data

Only you. Every record is tied to your account and the database refuses access to anyone else.

Deleting your data

Settings → Erase all data removes your financial data and disconnects linked banks. Ask us to delete your account and we remove your data and your login.

Some copies may remain for a limited time: database backups (until they expire on the hosting provider's schedule), server and sign-in logs (email, IP address, request details), an admin log entry recording the deletion without financial data, Plaid's own records, email delivery logs, and your own browser's cache.

Contact

Questions or deletion requests: reply to your invite email.