Summary. This is a private, self-hosted personal finance tool used only by its owner's household to view their own finances. It is not offered to the public. Data is read-only, stays on an encrypted computer we control, and is never sold or shared.
Only data that a user chooses to connect from their own financial accounts through financial data providers such as Plaid: account names and balances, transactions, and investment holdings and trades. We also store each user's login email and name.
Only to show each user their own budgets, spending and investments, and to answer their own questions about that data. Data is never sold, shared, rented or used for advertising.
Each user connects their own accounts personally and gives consent in the data provider's authorization screen before any data is shared.
On a single computer controlled by the operator, with full-disk encryption. Connection tokens are additionally encrypted inside the database. The data is not stored with any hosting provider, and the app is not reachable from the internet.
Financial data providers such as Plaid deliver the data at the user's direction, and their own privacy policies govern their handling of it. Users can review and revoke Plaid connections at my.plaid.com.
When the users choose to use AI features, the relevant data is sent to that AI provider for processing only. This covers automatic transaction categorization and asking questions about their own finances through an AI assistant. The data is used only to return a result to the users and is governed by those providers' terms.
Data is kept only while the user keeps the account connected. A user can delete any connected account and its data from within the app at any time, and deletion requests are completed within 7 days. Removing a Plaid connection also revokes Plaid's access.
The app requires a password plus multi-factor authentication, encrypts data at rest, uses TLS for all data in transit, and is scanned for vulnerabilities every month.
Questions or requests: privacy@jasoncwchan.com. Changes to this policy are dated on this page.