Skip to content
MoneyRoomStart free

Security & Trust

What MoneyRoom can see, and what it can't.

How a bank link works, where your data lives, and the controls you keep: to download it, disconnect, or delete your account.

Start freeRead the Privacy Policy

How a bank link works

Every step, from your bank to MoneyRoom.

Linking a bank takes five steps. The line below shows all of them, from signing in to your bank to the read-only data MoneyRoom asks for.

MoneyRoom connection sequenceBank to Plaid Link, then a one-time public token, an access token stored encrypted, and read-only data.BankYou sign inPlaid LinkPlaid checks loginPublic tokenOne-time codeAccess tokenKey, kept encryptedRead-only dataTransactionsMoneyRoom connection sequenceBank to Plaid Link, then a one-time public token, an access token stored encrypted, and read-only data.BankYou sign inPlaid LinkPlaid checks loginPublic tokenOne-time codeAccess tokenKey, kept encryptedRead-only dataTransactions

Your bank password never touches our servers. Plaid gives MoneyRoom a public token, a one-time code that expires quickly, never the username and password you typed into Plaid Link.

MoneyRoom exchanges the public token for a Plaid access token, a key that lets it read the data you allowed. We store the access token encrypted and unlock it only to ask Plaid for that data.

Read-only by design. MoneyRoom only asks Plaid for balances and transactions. It doesn't turn on any Plaid payment or transfer service.

What a link allows

What a bank link can do — and what it can't.

Your account data makes MoneyRoom more useful. It never lets MoneyRoom act on your account.

MoneyRoom can

  • Read the balances and transactions you allow through Plaid.
  • Organize your cards, credits, what you've used, points and spending in your account.
  • Use your account activity to help track credits and suggest cards.

MoneyRoom cannot

Move money or start a payment through the Plaid services it uses.

MoneyRoom never receives the bank username and password you type into Plaid Link.

Where your data lives

Your sign-in and your app data are kept apart.

MoneyRoom checks who is signed in first, then uses that to decide which records can be read and what an error report may include.

  1. A

    Supabase: your sign-in

    Signing in, staying signed in, and getting back into your account.

  2. B

    Turso: your app data

    Your cards, credits, what you've used, linked-account activity, and settings.

  3. C

    Your records only

    Every read is limited to the signed-in account. If MoneyRoom can't confirm whose records they are, it shows nothing.

  4. D

    Error reports without your details

    When something breaks, we get an error report. Who you are, and what your browser sent (form contents, headers, cookies, web-address details), are removed or scrubbed before an error event is sent.

Your controls

Export, disconnect or delete, any time.

Settings is where you download your data, disconnect a bank, choose your reminders, and delete your account.

Export

Download a JSON backup of your tracking records (a full copy as one file), or spreadsheet (CSV) files of your cards, credits, and what you've used. Points balances and the record of credits matched for you are not included.

Settings / Advanced

Disconnect

Remove a connected bank. MoneyRoom then asks Plaid to revoke its access.

Settings / Connections

Delete

Delete your account after a confirmation step: billing is cancelled, your sign-in is removed, and the app data tied to your account is erased.

Settings / Advanced

Notifications

Choose which reminders you get; push notifications come with the iOS app (coming soon).

Settings / Push notifications

Push notifications stay generic — no card names or dollar amounts on your lock screen. Plus and Pro reminder digests are delivered by email; generic push arrives with the iOS app (coming soon). Email digests name card nicknames and credit amounts only — never account numbers, masks, or tokens.

Companies we use

Who handles your data, and their policies.

The main companies that help run MoneyRoom, and the kind of data each one handles. Each row opens the part of our Privacy Policy that names them.

Plaid

Bank account data you allow

PolicyStripe

Subscription payments — you enter card details with Stripe

PolicySupabase

Signing in to your account

PolicyResend

Sending account and reminder emails

PolicyApple (APNs)

Delivering simple push notifications on iPhone

PolicyTurso

Hosting the app's database

PolicySentry

Error reports, with personal details removed

PolicyVercel

Hosting the site and app, and overall visit counts

Policy

We do not sell your personal information.

Limits

What we can't promise.

  1. Bank data can arrive late, be missing, or be out of date. MoneyRoom can't be more up to date than the bank data it reads.

  2. If Plaid can't confirm a bank was removed, MoneyRoom keeps the encrypted key only to try the removal again, while it clears the rest from your account.

  3. Deleting your account erases your app data. The Privacy Policy lists the few records kept for legal, tax, fraud-prevention, security and audit reasons.

Next step

See how it works, then decide.

MoneyRoom is built to be useful without ever having control over the accounts it reads.

Start free