Your money is nobody else's business. Including ours.
Money is built so that there's as little as possible to steal: no bank passwords, no card numbers, and, if you like, nothing on our servers at all.
No bank password, ever
Money doesn't connect to your bank. You download files from your bank's website yourself, so there are no bank sign-ins for anyone to keep, leak or misuse.
Or keep it all on your PC
The Windows app can keep your budget on your own computer, with no account. Nothing from it is ever sent to us.
Budgets kept apart by the database
Online, every row and every file belongs to one budget, and the database's own rules let only that budget's members read it. Automated tests check those rules on every change.
Encrypted in transit and at rest
Everything travels over HTTPS, and the database and file storage are encrypted on disk.
Your account
- Passwords of at least 10 characters, and a confirmed email address.
- Two-factor sign-in with an authenticator app, in Settings › Your account. Once it's on, a password alone doesn't open your budgets: the database itself checks for the second step.
- A check from Cloudflare on signing in and signing up keeps automated sign-ups out.
- Delete your account yourself, any time, in Settings. Budgets only you belong to are deleted with it, files included.
Your data
- Download everything from an online budget in Settings › Backups: every table as JSON and CSV, plus your attachments, in one zip. The Windows app can open it as a budget on your PC.
- On your PC, Money makes backups automatically, and you can make one whenever you like.
- Your data isn't sold, rented, shared for advertising or "anonymized" for anyone. Money has no ads and no tracking in the app.
- We don't look at your budget, except to answer a support request you've sent, with your permission.
Sharing, and the family
Only the people you invite to a budget can see it. Being in your HouseCrew household doesn't give anyone access to your money.
Who else is involved
A few companies run parts of the service for us. None of them may use your data for anything else.
| Who | What for |
|---|---|
| Supabase | Online budgets and sign-in: the database and files, in the United States. |
| Cloudflare | Serving the web app and this site, and the sign-in check. |
| Resend | Sign-in emails: confirmations, password resets and invites. |
| Paddle | Payments, from January 2027. We never see your card number. |
The details are in Money's privacy policy.
Behind the scenes
- Two-factor sign-in on every account that runs the service, and a written security plan we review every year.
- Every change is tested before it's released, and database changes go to a separate test project first.
- Dependencies are kept up to date, and security updates are read before they're applied.
If something goes wrong
If your data is ever exposed, we'll tell you promptly: what happened, what it affected and what we're doing about it.
Found a problem?
Please email [email protected] with "Security" in the subject. We aim to reply within a business day, and we won't take action against good-faith research.