Privacy notice

The financial data you provide or connect: transactions, account balances, holdings, budgets and plans, and any documents you share for import (bank and brokerage exports, tax documents). Your account itself is just a name, an email address, and a password hash.

Each household has its own database, separate from every other household's, encrypted at rest with SQLCipher. The databases live on a private server operated by Dom, with encrypted off-site backups.

You, the household members you invite, and the operator (Dom) — for support and for white-glove onboarding. Operator access to a household is recorded in an audit log.

During white-glove onboarding, the files you share (CSV or Excel exports) are processed with Claude, Anthropic's AI tooling, to map and import them into your ledger. That content isn't used to train models. You agree to this when you accept your invite, and the consent is recorded.

Automatic bank sync via Plaid is on the roadmap. If and when you connect an account, that connection is governed by Plaid's end-user privacy policy — and only for the accounts you choose to connect. Nothing is connected on your behalf.

Your data isn't sold, shared, or used for advertising. It exists so your ledger works — nothing else.

This is a beta: features may change, and occasionally data models evolve with them. You can request an export of your data, or full deletion of your household, at any time.

Questions or requests? Reply to your invite email.