How MoneyWheel protects your data

You sign in to your bank inside Plaid, never on MoneyWheel, so we never see your online banking username or password. Plaid gives MoneyWheel read-only access: balances and transactions, with no way to move money.

What Plaid returns is a token for that one connection. It is encrypted before it is stored, used only to refresh the accounts you linked, and revoked at Plaid when you disconnect the bank.

Your accounts, transactions and settings are kept in a Neon database in the United States. The app runs on Vercel, which also stores the receipts you upload.

A few other providers handle one job each, on our instructions: Stripe takes payments, Resend sends email, and Anthropic reads the receipts you upload to suggest a category or split.

Your financial data is used to show you your own finances and nothing else. It is never sold, and never shared with advertisers or data brokers.

Everything is encrypted in transit. Bank tokens and two-factor secrets are encrypted at rest with AES-256-GCM. Passwords are hashed with scrypt, and only a hash of each session token is stored, so a copy of the database would not hand over a live session.

Turn on two-factor authentication with an authenticator app and recovery codes from Settings. Sessions end after 45 minutes idle, or seven days on a device you mark as trusted, and you can see and sign out each device.

You get an email the moment your password, email or two-factor settings change, or a browser we have never seen signs in. Changing your password signs every other device out.

Deleting your account from Settings is immediate: bank connections are revoked at Plaid, uploaded receipts are deleted, and your transactions go with the account. Copies may stay briefly in encrypted database backups until they age out.

If you think you have found a security issue, write to support@moneywheel.app. Please include enough detail to reproduce it.