Security
Your data and privacy
Encrypted in transit and at rest, on-device AI, no advertising trackers, and no data sales — your money data is yours alone. Here's the breakdown of how we protect it.
OneTruth Money is built around a simple promise: your money, your data, never anyone else's.
What we collect
- The accounts you choose to link via Plaid (balances + transactions).
- The bills, notes, documents, and goals you create in the app.
- Your sign-in identifier from Apple, Google, or email (so we know it's you).
- Email address (for transactional emails like security alerts).
What we don't collect
- No ad-tech analytics (no Google Analytics, no Mixpanel, no Amplitude, no Segment). Our one analytics tool is PostHog, which records pseudonymized product events — never an amount, a balance, or an account detail — and is never used for advertising.
- No advertising SDKs (no Facebook Pixel, no AdMob, no Branch).
- Our analytics never see your money — amounts, balances, and anything you type are masked before they ever leave your device, so there's nothing to sell and no numbers in it to look at. We measure how the app is used, never who you are.
- No "device fingerprinting." Your phone's IDFA is never read.
How it's stored
- Postgres on Supabase, encrypted at rest with AES-256.
- All connections use TLS 1.3 in transit.
- Per-row Row-Level Security ensures one user can only ever read their own data.
- Backups are encrypted and stored in a different region than the primary.
On-device AI
When the AI assistant can answer your question without leaving the device, it does. Apple Intelligence runs locally on iPhone 15 Pro and newer. For requests that need cloud help, only the question text and the relevant context are sent — never your raw transactions, never your account credentials.
Data export
Settings → Privacy → Export my data emails you a ZIP of your account record — profile, subscription, activity history, workspaces and devices — in human-readable JSON, as a one-time-use download link.
Your financial data has its own exporter: Settings → Export, with presets covering bills, payment history, income sources, money requests, notes, mileage and category rules as CSV, PDF or Excel. Anything you send outward has account numbers redacted by default.
Account deletion
Settings → Privacy → Delete my account sends a confirmation email. Clicking through deletes your account and all associated data within 24 hours. We keep nothing in backups beyond 30 days.