Privacy Policy

Accounts, transactions, goals, automations and your activity log are stored in your browser’s local storage. They are not uploaded, not stored on a finance.works server, and not backed up anywhere. Clearing your browser’s site data deletes them permanently.

There is no account, no password and no login. Nobody at finance.works can see your data, because there is no copy of it to see.

One thing does: when you ask Finance AI a question, your question and your current financial data are sent to the finance.works server so it can compute the answer. That request is made over HTTPS to this application and to no other destination.

• The data is used to answer that one question and is not written to disk, not logged and not retained after the response is sent.
• Server logs record the request's shape — how many accounts, how many transactions, how long it took — never merchants, amounts, balances or the text of your question.
• If no hosted model is configured, the answer is computed on the server and nothing goes any further.

The operator of a finance.works deployment may configure a hosted Claude model from Anthropic to answer questions. When they have:

• The model reads your finances through a fixed set of read-only tools. It receives the results of those calls — an account balance, a category total, a forecast — and never the raw transaction ledger.
• Your question text is sent to Anthropic as part of the request.
• Anthropic processes it under their own terms and privacy policy, which govern retention on their side.
• The API key lives only on the server and never reaches your browser.

The Finance AI screen always states which engine is answering, so you can see at a glance whether a third party is involved.

• No analytics, no tracking pixels, no advertising identifiers, no session recording.
• No third-party scripts of any kind. The Content-Security-Policy blocks them at the browser level, so this is enforced rather than promised.
• No cookies are set by the application.
• Your data is never sold, rented or shared with a data broker.

• Export: Settings has a one-click export of everything the app holds about you, as JSON.
• Delete: resetting the demo data from Settings, or clearing site data in your browser, removes it completely and immediately.
• There is nothing to request from us, because we hold nothing.

Connecting a real financial institution will require server-side storage, authentication and a data aggregator acting as a processor. That is a materially different privacy posture from the one described above. This policy will be rewritten, and consent asked for again, before any real account can be connected.

finance.works is not directed at children and is not intended for anyone under 18.

• This service is operated by Operating entity not set, under the laws of Jurisdiction not set.
• Questions about this policy, or a request about your data, go to Contact address not set.
• There is in practice very little for us to hand over or delete on request: your financial data is in your browser and, if you have an account, in one row we can remove entirely from Settings.