Security & privacy
Privacy that starts before you sign up
One idea shapes the whole product: you shouldn't have to hand over your bank login to understand your own spending. So you never do.
Upload, don't connect
How it works, in three steps
Export
Download the CSV or PDF statement from your bank — the one you already have access to.
Upload
Drop it in. It's parsed and categorised in seconds. No password, no consent screen.
See
Explore where your money went, and chat with your real numbers.
Why it's safer
Upload vs bank-linking apps
Most money apps ask to connect to your bank. Here's what that difference means for you.
Swipe the table sideways to compare →
| This app | Bank-linking apps | |
|---|---|---|
| Needs your net-banking password | Sometimes | |
| A standing connection to your accounts | ||
| Routes through Plaid / Open Banking / Account Aggregator | ||
| You choose exactly what's shared | One file | Broad access |
| Works as an in-browser demo (nothing uploaded) | ||
| To stop sharing, you… | delete a file | revoke consent |
The guarantees
What keeps your money safe
Upload, don't connect
You never share net-banking passwords or grant sync access — no Plaid, no Open Banking, no Account Aggregator. You upload the CSV or PDF your bank already gives you; your credentials never touch the app.
The AI can't write on its own
Every AI suggestion — a category, a transaction from a receipt, a budget — waits for your explicit confirmation. Nothing is saved silently.
Numbers that reconcile
A double-entry ledger under the hood means balances are derived, immutable once posted, and always add up. Corrections are new entries, never quiet edits.
AI usage is capped
Hard per-account limits are enforced in the database itself — not just in the interface — so costs and data exposure stay bounded.
Isolated by account
Your data is scoped to you. Access is enforced at the database row level, so there's no cross-account leakage by design.
The demo uploads nothing
The 'try it here' widget on the home page parses your CSV entirely in your browser. It never sends the file anywhere.
AI boundary
The AI proposes. You confirm.
Every AI-drafted change is a suggestion until you tap confirm — and silent categorisation only ever comes from a rule you made.
Assistant suggests
Add ₹240 · Coffee (cash)
Nothing is written to your books until you confirm.
Your data
Exactly what we do with it
What we store
Your account email, and the transactions from statements you choose to import — nothing more.
Encrypted in transit and at rest
Your data is protected on the wire and in storage.
The AI sees only the minimum
For example, just the column headers to map a format, or a receipt image you upload.
Export anytime
Your data is yours — take it with you whenever you like.
Delete anytime
Remove your account and its data on request; nothing lingers beyond legal obligations.
Our principles
Privacy by default, not as an afterthought
A short, plain-English promise about how your data is treated.
- We don't ask for, store, or transmit your banking credentials.
- The AI proposes; you dispose. A human confirmation stands between any AI suggestion and your data.
- Your data is yours — export it, and delete your account whenever you like.
- We tell you plainly what's real and what's still being built.
Want the specifics? Our privacy policy spells out exactly what data is collected and why. Have a question we haven't answered? Get in touch.
Understand your money without giving up your privacy
No bank login, no sync, no catch. Free during the beta.