Privacy notice

Last updated November 6, 2026

What we store

Your name and email, a scrambled hash of your password (never the password itself), and the money records you enter: accounts, categories, transactions, card installments, loans, recurring entries and budgets.

Who can see it

Only you, through your account. Every record is tied to you and every request is checked against your session. The person running this service can technically reach the database and its backups, and does so only to keep the service working.

Where it lives

• The app runs on Vercel; the database is Postgres hosted by Supabase, both in the United States.
• Password-reset emails are sent through Resend.
• An encrypted copy of the database is made every night and kept for 30 days on Cloudflare R2.

We don't sell your data, show ads, or connect to your bank. A single session cookie keeps you signed in; there are no tracking cookies.

Your copy and deletion

In Settings → Profile you can download everything as Excel or CSV, and delete your account. Deleting removes all your records right away; copies inside the nightly backups disappear as those backups expire, within 30 days.

Draft for v1. Review before publishing.