Your household's money, handled with care.

Protection in four layers.

• Your account

  • Email addresses are confirmed with a one-time code at sign-up.
  • Passwords are stored only as salted hashes by our authentication provider, never in plain text.
  • Deleting your account asks you to confirm with your password or Google first.
  • Sign-in and account actions are rate limited to slow down guessing.

• Your household

  • Roles decide who can add, see and manage. Viewers can only look.
  • Owners and admins can adjust what each member may add or view.
  • Private goals are visible only to the people taking part.
  • A history records what happened in the household.

• Your data

  • Traffic between the app and our servers goes over HTTPS.
  • The database enforces row-level security, so data access is limited at the source.
  • Receipts and income proofs sit in private storage and open through short-lived links.
  • Every request is validated before it touches the database.

• How we run it

  • The API only accepts requests from approved websites, and sends security headers on every response.
  • Waitlist IP addresses are stored only as keyed hashes, and queued emails are encrypted until sent.
  • Email delivery events are checked against a signature before we trust them.
  • Retried requests are made safe with idempotency keys, so nothing is recorded twice.

Common questions