Your money data stays yours.
In My Stash is a personal budgeting app built privacy-first: read-only bank access, end-to-end encryption, and a design where we hold as little of your data as possible — ideally none.
The one-line version: In My Stash can read your balances and transactions to help you budget. It can never move your money, it never sees your bank login, it doesn't sell or share your data, and your financial data is stored encrypted — on your device, not our servers.
The essentials
- Read-only. Bank connections can report balances and transactions and nothing else — no payments, transfers, or withdrawals.
- We never see your bank login. You authenticate directly with your bank through Plaid or SimpleFIN.
- On your device, encrypted. Your transactions and balances live on your device and are never stored on our servers.
- Encrypted everywhere. TLS 1.2+ in transit; AES-GCM at rest. The one thing our relay stores — a read-only access token — is double-encrypted.
- No tracking, no selling. No analytics SDKs, no ads, no third-party data sharing.
- You're in control. Export or erase everything anytime; disconnecting a bank revokes and deletes its token.
Documentation
Security Whitepaper
Architecture, data flows, encryption & key model, subprocessors.
Privacy Policy
What we collect, your rights (CCPA/CPRA), retention & deletion.
Terms of Use
The agreement for using In My Stash.
Security Policies
Information security, access control, vulnerability management, retention.
Data partners (subprocessors)
To provide optional bank connections, In My Stash uses read-only aggregators. You always connect through your bank's own secure login.
| Provider | Purpose | Access |
|---|---|---|
| Plaid | Read-only bank data (balances, transactions) | Read-only; never sees your In My Stash data |
| SimpleFIN | Read-only bank data (balances, transactions) | Read-only; never sees your In My Stash data |
| Cloudflare | Hosts the stateless relay | Stores only an encrypted read-only token; no financial data |
Security questions or reports: security@inmystash.com.