Your financial life stays private
Planning your retirement means gathering your most sensitive numbers in one place. We built this around a simple promise: those numbers belong to you, and no one, not even us, should be able to peek.
Locked before it ever leaves your device
Everything you enter is scrambled on your own device, with a key that only you hold. By the time your data reaches us, it's already unreadable, so even our own team, with full access to our systems, simply cannot see your balances, income, or plans.
- Locked on your device, not just on our servers
- Only you hold the key; we never receive it
- If our systems were ever breached, your data would be unreadable
- Works the same whether you sign in with a passkey or a password
The one detail we keep that's tied to you is the email you sign in with, so we can let you in and help you recover your account. Your financial information itself stays sealed.
Protected from every angle
Encryption is the heart of it. These keep it safe in practice.
- Encrypted on your device
- Your information is locked on your device with a key only you hold, and stays unreadable while it travels and while it's stored. Only you can unlock it.
- Simple, strong sign-in
- Sign in without a password using a passkey, or use a password if you prefer. Automated guessing is blocked, and stale sessions are signed out for you.
- Hardened top to bottom
- The app and the systems behind it are locked down against common online attacks, with tight internal access controls and a complete activity log.
- Nothing tracking you
- No ad trackers, no analytics pixels, and we never sell your data, on the app or on this website.
- You're always in control
- Take your whole plan with you whenever you want, and permanently delete your account and data anytime.
- Built and hosted in the US
- Your data lives on trusted US-based infrastructure, with access locked down to only what each part of the system needs.
No security theater
We won't display badges we haven't earned or promise protections we haven't built. We're an independent product, not a big institution, and we don't currently hold formal certifications like SOC 2 or HIPAA, and we'd rather say so plainly than dress it up.
Private by default
Your numbers, kept yours, from the first one you enter.