Privacy

What we collect

• Your account. Your email address, an optional display name, and your password stored only as a one-way hash. We never store the password itself and we cannot read it back.
• Your transactions, from Plaid. The rows Plaid shares while a bank is connected — date, merchant description, amount, category, and Plaid’s opaque id for the account they came from. They are stored per user and shown only to you.
• Your bank connections. Plaid’s read-only access token for each connected bank, plus the bank’s name. The token lets the app pull transactions — nothing can move money or change anything with it.
• Your dashboard data. Monthly totals per merchant, used to build your dashboard and to detect recurring charges.
• Security logs. Failed and successful sign-in records (email address and IP address), kept for up to 7 days to rate-limit attacks, then purged. They are never shown to anyone.

We don’t sell your data, and we don’t show it to other users or to advertisers.

How it is used, and where it lives

• Shown to you. Your transactions, totals, and recurring charges appear on your dashboard and in your exports — every query is scoped to your account, and no one else’s.
• Categorized. Built-in rules and a merchant taxonomy label transactions. Merchants the rules cannot label go to an AI provider (below). Your own edits always win over the AI’s.
• Recurring detection. Months of per-merchant totals are scanned for repeating charges so the app can flag subscriptions and price changes.
• Stored in this deployment’s own MySQL database, on the server hosting the app, as rows keyed to your user id. It is used to run the app for you and nothing else — no advertising, no resale.

What goes to Plaid

Plaid is the secure connector between your bank and this app. When you connect a bank, Plaid opens its own window: you sign in to your bank there, and your bank username and password go directly to your bank through Plaid. We never see them, ever.

Plaid hands this app a read-only token for your account. We use it only to pull transactions — nobody can move money or change anything with it. You can review, disconnect, or delete your Plaid data at any time at my.plaid.com, which Plaid controls, not us.

Plaid End User Privacy Policy · What is Plaid? · How Plaid works · Manage connections (Plaid Portal)

What goes to the AI provider

Merchants the built-in rules cannot categorize are sent to an AI provider (DeepSeek) for labeling. Each request contains only a cleaned merchant name, the amount, and the month — never your name, email, bank credentials, account numbers, transaction dates, or anything that identifies you. The labels that come back are stored with your transactions.

How long we keep it, and your controls

We keep your data until you delete it. There is no expiry timer and no deletion for inactivity — the security logs above are the one exception, and they are purged after 7 days.

• Export. Download your data as a CSV from the dashboard at any time, scoped to your account only.
• Remove a bank. Removing a bank disconnects it through Plaid and stops any further pulls. Your already-stored transactions stay in your account unless you delete the account.
• Delete account. The account page’s delete action wipes your account and everything stored with it — your transactions, dashboard data, and subscription list — and calls Plaid to revoke every bank connection. It cannot be undone.

Not built yet

• We do not verify that a sign-up email belongs to you — there is no mailer in this version.
• Password reset is handled by the operator of this deployment (no self-service reset email yet).

Questions about this deployment’s data handling should go to the person who runs it. The Terms of Service cover the rest of the app.