Security and privacy, in plain words
A budgeting app holds some of the most private details of a family's life. Here's exactly what we do with them, without badges or slogans.
- We don't connect to your bank
- There is no open-banking link and no stored bank password. Transactions arrive only when you import a statement file, scan a receipt, or type them in.
- Your data isn't for sale
- The business is the subscription. We don't sell data, share it with advertisers, or run ads in the app.
- Which AI reads your documents
- When you scan a receipt or import a statement, the file is sent to Anthropic or OpenAI to extract the lines. They process it on our behalf under their API terms, which don't use that data to train their models by default. Nothing is sent to an AI provider unless you upload it. The AI suggests categories; you confirm them.
- How it's stored
- Each household's data is kept apart, and every action checks that you belong to that household. Passwords are hashed with scrypt, sessions use secure cookies, and login attempts are rate-limited. Scanned receipts are served only to members of the household. Amounts are stored in whole cents, so totals don't drift.
- Getting your data out
- Export transactions to CSV at any time. Full account and household deletion is being built now and will be available before paid plans start. Until then, ask us and we'll delete it for you.
- This website
- No analytics and no advertising cookies. The early-access form stores your email, language, the page you came from and a one-way hash of your IP address to block spam. The site runs on Cloudflare.
Start next month with a plan.
Leave your email. We'll write when sign-up opens, with the founding price of €29 for the first year.