Privacy
This app is for the two of us only: Molly and Parker. Nobody else can sign up. Each person is invited by hand.
What it keeps
Charges from our banks and cards (merchant, amount, date), account nicknames and the last four digits, balances, categories, splits and budgets. Never bank passwords or full account numbers: we never see them. You sign in to your bank inside Plaid’s secure window, and we only receive the data Plaid sends back.
Who can see it
You see your own accounts. Your partner sees only the accounts you mark Shared (or just the balance, for Balance only). Private accounts stay private. Sign-in is by an emailed code, and only invited people can get one.
How long we keep it
- Charges, splits, budgets and balances are kept until we delete them. Nothing expires on its own today.
- Disconnecting a bank deletes its access token the same day. Charges we already saved stay.
- Removing a person ends their sign-in. Wiping their data is a separate, deliberate cleanup we run by hand, never an automatic step.
How it is protected
Bank access tokens stay on the server, in Supabase’s encrypted Vault, and only server-side functions can use them. Nothing new runs in your browser to talk to your bank.
If it ever leaked
It would expose charges (merchant, amount, date), account nicknames and last four digits, balances, categories and budgets. It would not expose bank passwords (Plaid never gives us them) or full account numbers. Bank access tokens are encrypted, with the key held outside the database.
Questions
Ask Parker, or write to parkernixon1@gmail.com.