Built to read your money, never to move it.
Clearday is not a bank and cannot move money. Here is exactly how your connections, account and data are protected.
Bank connections
Read-only, through Plaid
- Read-only access
- Banks connect through Plaid with read-only access. Clearday can see balances and transactions. It cannot move money, make payments or open accounts.
- Your bank login
- You enter your bank username and password in Plaid's window. They go to Plaid and your bank, and never touch Clearday.
- Access tokens
- Plaid gives Clearday an access token for each connection. Tokens are encrypted at rest with AES-256-GCM using a key unique to your account.
Your account
Guarded sign-in
- Passwords
- Hashed with scrypt. We store the hash, never the password.
- Two-factor authentication
- Optional, and recommended.
- Sessions
- Every signed-in session can be revoked, and resetting your password ends them all.
- Rate limiting
- Repeated sign-in attempts are rate-limited to slow down password guessing.
Your data
Isolated, and yours
- Isolation
- Each person's financial data is isolated in the database by row-level security, so one account's queries cannot read another's rows.
- Never sold
- We never sell your data.
- Export and delete
- Export your data or delete it, any time, from Settings.
Clearday AI
Private by construction
- Tokenized names
- Names are tokenized before anything is sent to the AI model.
- No training on your data
- Our AI provider, Anthropic, does not train its models on data sent through its API.
- Your approval
- The assistant can only change your account after you approve each change, and cannot move money.
Report an issue