How your data is protected
Short version: we can't spend your money, we can't read your passwords, and your data leaves with you whenever you want.
We never see or store your bank passwords
You sign in on your bank's own page through Plaid — the same connection layer used by Venmo and American Express. Your credentials go to the bank, not to us.
The app physically can't move money
Finapp has read-only access: balances and transactions in, nothing out. Transfers, payments and withdrawals are not part of the connection at all — there is no code path for them.
You own the bank connection
Banks connect through your own Plaid account, created in your name. We sell software, not access to your data. Cancel any time — the connection is yours to keep or revoke.
Everything is encrypted
Bank tokens and API keys are encrypted at rest (AES-256), all traffic runs over HTTPS, and daily backups are encrypted too.
Your data is never hostage
CSV export works on every plan, including lapsed ones. If you stop paying, you can still view and export everything for at least 6 months. Deleting your account deletes your data.
People you invite can look, not touch
Your spouse or accountant gets read-only access: reports, transactions, export and comments. Changing data, connecting banks or seeing your Plaid keys is impossible for them — enforced on the server, not hidden in the interface.
Questions? Write to support — a human answers.