We built this so your money stays your business.
Your vault is unreadable to us. Here's exactly how we keep it that way, what minimal info we need to run the app, and the two optional features you control.
What we don't do
- ✓No ads. Ever. Your budgets stay ad-free.
- ✓No data sales. We don't sell or share your info with anyone.
- ✓No surveillance. Only anonymous page-view analytics—never your financial data.
Why your vault stays secret
We designed the vault so we can't read it even if we wanted to. Your password never leaves your browser. Encryption happens on your device before anything syncs to our servers.
Stays in your browser. Generates the encryption key that locks your vault.
Happens client-side before sync. We only store gibberish (ciphertext).
No password from you = no vault access for us (or anyone else).
What we need to make the app work
Email address
Why we need it: To sign you in, verify your account at signup, and send critical security alerts (like email change notifications).
Protection: Never sold or shared. Stored only in our controlled database. We only send essential account emails—never marketing.
Password (one-way encrypted)
Why we need it: To verify it's you when you log in.
Protection: Stored in unreadable form (one-way hashing means we can't reverse it to see your password).
Encrypted vault data
Why we need it: To sync your budgets and transactions across devices.
Protection: Locked with your password-derived key. No password = no decryption for anyone.
Security logs
Why we need it: To help you spot suspicious login attempts and abuse.
Protection: Logs actions (login, vault update) with IP/browser but never vault contents.
Two optional features (you control both)
These features touch external services. Both are opt-in and can be turned off anytime.
AI auto-categorization (OpenAI)
Off by defaultWhen you enable it: During CSV import, we send transaction descriptions and amounts to OpenAI to suggest categories.
What stays private: Your on-device rules run first to minimize what gets sent.
You must toggle this on. Off by default.
Account & feedback emails (Resend)
Required for accountAccount emails: Verification at signup, security alerts when you change your email, and optional feedback delivery.
What we never do: Send marketing, promotions, or newsletters. Only essential account-related emails.
Verification email required at signup. Security alerts sent automatically when account changes occur.
Infrastructure & transparency
Performance Insights (Vercel Speed Insights)
On for all usersWe measure page speed and reliability across all routes. That includes paths, load timings, and basic device/browser details. No vault contents, budgets, or form text are collected. This helps us keep the app fast; it is not used for ads or tracking.
Usage Analytics (Vercel Analytics)
On for all usersWe collect anonymous page-view counts and basic visitor geography (country-level only) to understand which features are used. No personal identifiers, IP addresses, or financial data are collected. This is purely aggregate, privacy-friendly analytics—not user tracking.
Anti-Spam Protection
AutomaticWe stop brute-force login attempts using rate limiting and account lockout that run entirely on our own servers—no third-party service is involved and nothing about your attempts is shared externally. To block automated bots, the login, signup, and contact forms use Cloudflare Turnstile, which receives your IP address plus browser and interaction signals to distinguish humans from bots (never your email, password, or financial data).
Encrypted Backups
Disaster recoveryWe maintain encrypted database backups for disaster recovery. These backups retain data for up to 90 days and are stored with AES-256 encryption on a separate secure service. When you delete your account, your encrypted data may persist in backups during this window, but remains unreadable without your password (which we do not store). Backups are only accessed in critical disaster recovery scenarios or if required by valid court order—never for routine operations or data analysis. Even if compelled to produce data, your financial information remains encrypted.