MoneyRoomSign inBuilt so we can't betray you.
A finance app earns trust with architecture, not promises. Here is exactly how MoneyRoom connects to your accounts, what it can see, and what it can never do.
How we connect
Your bank password never touches our servers.
Connections run through Plaid, the same connectivity layer used across the industry. The flow is built so MoneyRoom never handles your credentials:
1. You sign in with your bank
The sign-in happens inside Plaid's own window, directly with your bank. MoneyRoom never sees, stores, or transmits what you type — there is no password for us to leak.
2. We receive a token, not a key
What MoneyRoom gets back is a scoped access token for reading account data. We store that token encrypted, and it is decrypted only at the moment we make a request to Plaid on your behalf.
3. Read-only, by construction
We request only read products — transactions and investment holdings. MoneyRoom has no payment or transfer capability of any kind: it cannot move, send, or touch your money.
4. Disconnect any time
Removing a connection revokes MoneyRoom's access. Deleting your account deletes your data with it — cards, credits, transactions, all of it.
Your data
Isolated, scrubbed, and never for sale.
- Every read of your financial data is scoped to your account and fails closed — if the ownership check can't run, the data doesn't load. Cross-account access isn't a setting; it's structurally absent.
- Even our own error reporting is scrubbed before it leaves the app: tokens, account numbers, bank payloads, and personal details are redacted, and we never record your screen.
- The reminder emails we send name card nicknames and credit amounts only — never account numbers, masks, or tokens.
- We do not sell your personal information, and there are no ad trackers — analytics are first-party, cookieless page counts.
- Your tier never holds your data hostage: downgrading hides paid surfaces but deletes nothing, and your existing cards stay visible and editable.
Honest math
If we can't prove a number, we don't show it.
Money screens are easy to inflate. MoneyRoom holds itself to a stricter rule: a credit only counts as “missed” when your real statement history proves the period passed with zero use — provable coverage, not guilt math. When something can't be verified (a missing open date, a credit that doesn't post detectably), the app says so instead of guessing.