Your data, handled with care

Only what you put into the app to make it useful to you:

• Account info: email address and an optional display name.
• App content you create: tasks, bills, goals, transactions, debts, and budgets.
• Basic technical metadata your browser sends (timestamps, user-agent) needed to run the service.

We do not sell your data, run third-party advertising trackers, or share your content with other users.

Data is stored in a managed Postgres database with row-level security so that, by design, each account can only read and write its own rows. Connections are encrypted in transit (HTTPS/TLS) and at rest by the underlying provider.

Passwords are never stored in plain text — authentication is handled by the platform's auth service, with leaked-password protection enabled.

New accounts must verify their email address before they can sign in. This helps prevent abuse and ensures we can reach you for password resets and important account notices.

We only use your email for account-related messages (verification, password resets, and any admin announcements you'd see in-app).

You can remove your data in two ways:

• Delete individual records: every task, bill, goal, transaction, debt, and budget can be deleted directly from its page at any time. Export a CSV or JSON backup from Settings first if you'd like a copy.
• Full account deletion: email the site administrator with the address on your account and request deletion. Your account and all linked records will be removed, typically within 30 days.

Once deleted, content cannot be recovered. Backups, if any, age out on the database provider's standard retention schedule.

Questions about privacy, security, or a deletion request? Reach out to the site administrator from the email associated with your account.