Expense TrackerA password we never keep
If you sign up with an email, your password is stored only as a one-way bcrypt hash. Nobody here can read it, and the database never holds it.
Your records, kept carefully
What we do to keep a room's figures between the people in it: how you sign in, how your data travels, who can see what, and what we will never do.
How you sign in
Or no password at all
Sign in with Google, Facebook or Apple instead, and your password stays with them. We receive who you are, never how you prove it.
Forms that prove where they came from
Every change you make while signed in carries a token only your own session holds, so another site cannot send it on your behalf.
Who sees what
A room is private to its members
A room's costs, balances and reports are readable by the people in it and nobody else. There is no public profile and no feed.
Everything travels encrypted
Every page and every request from the app goes over HTTPS, from your phone or browser to our servers and back.
Notifications go where you signed in
A new cost in a room reaches you on the devices you are signed in on, and nowhere else.
What we will never do
Hold or move your money
The Expense Tracker records and adds up. It never connects to a bank account or a card, and money moves between you however you already move it.
Keep your data hostage
Any room's ledger downloads as CSV whenever you want it, and your account is deleted when you ask through the contact page.