Is NetWorthTrackr safe?

What we can see, what we cannot, and what we will never ask you for

The short version: we never ask for bank credentials, we cannot move money, and every row of your data is locked to your account by the database itself. The trade is that you type your balances in yourself.

We never ask for a bank login

There is no Plaid, no GoCardless, no open-banking connection anywhere in the product. We could not read your bank account if we wanted to, because we never hold a credential or a token that would let us. This is the single biggest security difference between NetWorthTrackr and every aggregator-based tracker.

We cannot move money

The app has no payment rails and no write access to any financial institution. Worst case, a compromised account exposes numbers you typed in. It can never move a euro.

Your rows are yours

Every table is protected by PostgreSQL row-level security keyed to your authenticated user ID. Access is denied by default and granted per row, enforced by the database rather than by application code that could forget a check.

Authentication is not ours to get wrong

Sign-in is handled by Clerk, a dedicated identity provider. We never see or store your password.

Deletion is real deletion

Settings → Account → Delete purges your profile, accounts, balance history and holdings from the live database straight away. There is no soft delete and no grace period. Our database provider keeps encrypted backups for disaster recovery; your data drops out of those within 90 days, as the Privacy Policy says.

We do not sell your data

Not to advertisers, not to data brokers, not to "partners". Product analytics are stored in the EU, and balances, account names and anything you type are stripped from events before they are sent.

Analytics never see your numbers

We measure how people use the product so we can improve it. Balances, account names and anything you type are stripped out before those measurements are sent, and what remains is stored in the EU. The Privacy Policy sets out exactly what is collected.

AI assistants get a token, not your keys

If you connect Claude, ChatGPT or another assistant over MCP, you approve it through a sign-in, and it receives a revocable token that reaches only your own NetWorthTrackr data, under the same row-level security as the app. It never sees your password, there is no bank credential to share, and it cannot touch your login or close your NetWorthTrackr account. Deletes of individual accounts, balances or holdings need your explicit request and a matching name or date. What it reads goes to that assistant’s provider to answer you; disconnect it in the assistant to stop.

What we can see

The balances you enter, so we can chart them for you over time. That is the trade for a tracker that shows your history. If it is more than you want to share, track only the accounts you are comfortable with — a partial picture still gives you a trend.

Reporting a vulnerability

Email support@networthtrackr.com with steps to reproduce. We will confirm receipt within one business day. Please give us a reasonable window to fix an issue before disclosing it publicly.