Your data, your control
ClearMint Essentials is built privacy-first. Run it entirely in your browser, or turn on cloud sync with database-enforced isolation.
Private by default
With no account, your finances never leave your browser — they're stored locally on your device until you choose to enable cloud sync.
Row-level security
When sync is on, every record is isolated by database row-level security policies. You can only ever read or write your own data.
Encrypted in transit
All traffic is served over HTTPS/TLS. Authentication is handled by Supabase Auth with industry-standard session tokens.
Secure bank linking
Optional Plaid connections are read-only — you authenticate with Plaid, and access tokens stay on our servers, never in your browser. See bank connections.
Household sharing
Invite someone to a combined household view of shared accounts, transactions, bills and budgets. Personal budgets stay private to each member. See household sharing.
No lock-in
Export everything to CSV or JSON whenever you want, and delete your account data permanently with one click.
No selling your data
We don't sell or rent your personal or financial information. Read the details in our Privacy Policy.
You hold the records
Statements you import are parsed in your browser. We store only the structured data you keep, scoped to your account.
Privacy-masked analytics
We use PostHog to see how the app is used and diagnose bugs. Every input and every financial figure is masked and never recorded — we don't see your actual numbers. Details in our Privacy Policy.
The AI stays yours
The AI assistant sends only what's needed to answer your question. If you rate an answer we keep the rating and question — never the answer or your figures. See how the assistant handles data.
Reporting a vulnerability
We take security seriously and welcome responsible disclosure. If you believe you've found a vulnerability, please email our team with details and steps to reproduce. We'll acknowledge your report and keep you updated on the fix.
Your responsibilities
- Use a strong, unique password and keep it private.
- Sign out on shared devices, and keep your browser up to date.
- Only upload statements you're authorized to access.
For data-deletion requests, see Data Deletion.