What happens to your numbers.
You enter the numbers. Encryption, key handling, and deletion happen on their own.
- 1You enter it
Plan numbers
Balances, spending, tax inputs, and assumptions.
- 2At rest
Encrypted storage
Saved plan data sits behind your individual encryption keys.
- 3In use
Compute window
Read briefly for the math. No readable copy kept.
- 4Output
Protected result
Stored encrypted, or not stored at all.
- 5If you leave
Keys and data destroyed
Without keys, saved data can never be read again.
Five things that stay true.
Private labels stay separate
Account names, institutions, notes, and similar details are protected apart from projection inputs.
Numbers are encrypted at rest
Stored balances, spending, tax inputs, and assumptions sit behind account-scoped encryption.
Access is purpose-built
The engine reads numbers only to calculate projections, then writes back protected results.
AI help is optional
When enabled, assistant features use only the plan data needed to answer, not private labels or notes.
Delete destroys access
Account deletion destroys the key path needed to read saved data.
Your data, your controls.
Export anytime
Take your full plan with you, in a portable file, whenever you want.
Delete permanently
One action makes your saved data permanently unreadable.
No ads, no selling
We make money from subscriptions, not from your data. That is the whole model.
The math has to read your numbers.
To project your future, the engine does arithmetic on your real numbers. For the few seconds that takes, it reads the inputs it needs.
What we can do is make that window small and tightly sealed. Your numbers are encrypted everywhere else. The compute path stores nothing readable afterward, and key use is logged. Private labels and notes are protected separately from the numbers required for projection math.
We would rather be precise about this than overstate what we protect.
We do not sell your data, share it with advertisers, or let anyone use it to train AI.