Privacy Policy

Last updated: August 9, 2026

markdown.money is a cash projection and planning tool. This policy describes exactly what data we collect, what we do with it, which third parties are involved, and the controls you have. It reflects how the product actually works — not boilerplate.

1. Data we collect

Account data

• Email address (required) — your sign-in identity and how we match your Pro subscription.
• Name (optional).
• Password — if you set one, we store only a salted scrypt hash. We never store or see your plaintext password.
• Session — signing in sets an md_session cookie containing a random token; we store only a hash of it.
• Plan status — whether your account is Free or Pro.

Financial planning data

Everything you enter to build your plan is stored in our database, scoped to your household:

• Accounts (names, types, balances) and categories.
• Recurring bills, schedules, and one-off overrides.
• Transactions (dates, names, amounts, cleared status).
• Income, paychecks, savings goals, and planning settings.
• Household name, members, roles, and pending invites.

We never ask for, receive, or store your bank username or password.

Technical data

• Server logs record a request ID, method, path (query strings stripped), and response status.
• Your IP address is used transiently for rate limiting. We do not build profiles from it.
• No analytics or advertising trackers. The app loads no analytics scripts, ad pixels, or fingerprinting code.

2. Bank sync (SimpleFIN)

Optional bank sync uses SimpleFIN, a read-only protocol. You connect your bank at your SimpleFIN provider and give us a setup token. We exchange it server-side for a read-only access credential, which we store server-side and never send to your browser. Your actual bank login credentials never touch our servers.

3. AI features (Anthropic and OpenAI)

Two features send data to an AI provider acting as our processor. The "Money" assistant always uses Anthropic (the maker of Claude). Statement extraction and category suggestions use Anthropic or, when so configured, OpenAI.

• The "Money" assistant (Pro): when you ask a question, we send your question, recent conversation, and a snapshot of your household's budget data so the answer is grounded in your real numbers.
• Statement import: if you import a PDF or photo, the file is forwarded in memory to the AI provider to extract transactions; we never write the uploaded file to disk.

We use these providers' commercial APIs, which per their terms do not use API inputs or outputs to train models by default.

4. Payments (Whop)

Pro subscriptions are processed by Whop. Checkout happens on Whop's hosted pages — we never see or store your card details. We store only your resulting plan status (free/pro).

5. Hosting (Replit)

markdown.money is hosted on Replit, including our application servers and PostgreSQL database. Database connections use TLS.

6. How we use data

• To provide the product: storing your plan, computing projections, syncing accounts, answering assistant questions.
• To operate securely: authentication, rate limiting, abuse prevention.
• To bill Pro subscriptions via Whop.

We do not sell your data, share it with advertisers, or use it for marketing profiles.

7. Sharing within a household

If you invite members to your household, they can see and edit the household's financial plan. Don't invite people you don't want seeing that data. Your email is visible to household members.

8. Retention and deletion

• Your data is retained while your account exists.
• You can delete your account in Settings (email confirmation required). This permanently deletes all household data.
• You can disconnect bank sync at any time, which deletes the stored SimpleFIN credential.
• You can export your full plan as JSON from Settings at any time.

9. Security

• Passwords hashed with scrypt and per-user salts; session tokens stored only as hashes.
• TLS for all connections, including to the database and to SimpleFIN.
• Webhooks from Whop are signature-verified; unsigned webhooks are rejected.
• Per-IP rate limits on sign-in attempts and per-user rate limits on AI endpoints.

10. Your rights

Depending on where you live (e.g., GDPR in the EU/UK, CCPA/CPRA in California), you may have rights to access, correct, export, delete, or restrict processing of your personal data. The product gives you most of these directly: JSON export, in-app editing, and full account deletion.

11. Children

markdown.money is not directed at children under 16, and we do not knowingly collect their data.

12. Changes

If we materially change this policy, we will update the date above and surface the change in the product before it takes effect.

13. Contact

Questions or privacy requests: email us at privacy@markdown.money. Deletion and export don't require contacting us — both are available directly in Settings.