Security & Privacy

Quick note on security since I know that's the first thing people worry about:

What we don't do:

- Sell your data to anyone

- Ask for bank login credentials

- Use your data to train AI models

- Share transaction details with advertisers

- Store anything unencrypted

What we do:

- Encrypt everything (AES-256 at rest, TLS in transit)

- Let you export or delete all your data anytime

- Process AI categorisation securely (your data stays in our database)

- Follow GDPR principles regardless of where you live

- Use manual statement upload instead of risky bank API connections

You're in complete control:

- Delete everything with one click in settings

- Export your data as CSV anytime

- Full transparency on what we store

Why manual upload instead of automatic bank connections?

Most apps use Plaid or TrueLayer to connect to your bank. Those connections break constantly and require ongoing access to your accounts. I chose manual upload because:

1. You control exactly what we see

2. No recurring bank permissions needed

3. More secure (no API vulnerabilities)

4. Works with literally any bank worldwide

Happy to answer any questions about how it works or what data we actually store.