Security & Privacy
MoneyTree only works if you trust it. So we built it to earn that — with real protections, a promise never to sell your data, and plain English about how it all works.
Your password
When you sign up, your password is transformed into a one-way hash. That hash is what we keep — the original can't be worked backward from it.
When you log in, we run the same steps on what you typed and compare the result — in constant time, so the comparison itself leaks nothing.
Your data in motion
Nothing you enter travels in the clear, and nothing reaches your records without proving it's really you.
Requests are encrypted in transit, then re-checked on the server. The app never trusts the browser alone to decide what you can see.
Guarding your account
Strong hashing is only half the job. These protections make an account hard to break into in the first place.
Repeated wrong sign-ins are rate-limited per account and per network, so guessing attacks stall fast instead of running free.
Passwords and security tokens are compared in constant time, closing the timing side-channels attackers use to guess secrets.
Trusted-device sign-in expires after 90 idle days, and a suspended or compromised session can be cut off server-side at once.
Every request re-checks who you are and what's yours on the server. The client can't grant itself access to another account's data.
Your data lives on Cloudflare's managed database with regular backups, so an accident or outage doesn't mean it's gone.
New accounts confirm their email with a time-limited, hashed code — keeping accounts tied to real, reachable owners.
Our promise
Not to advertisers, not to data brokers, not to anyone. Full stop.
Your spending is never mined to sell you things. It's yours to understand, not ours to exploit.
We only keep the one-way hash. A database leak still never reveals your password.
We store what's required to run your account and features — nothing gathered "just in case."
You're in control
Remove any transaction, or delete your entire account from Settings — which wipes your profile and records from the active database.
Pull a full copy of your account's data whenever you want. Your records aren't locked inside the app.
Turn reminders off in one tap, which also removes the stored push subscription. You choose what reaches you.
Straight with you
No app can promise perfect security, and we won't pretend otherwise. What we can promise is to use strong, well-understood protections, to collect as little as possible, and to be clear about how your information is handled.
For the full details, read our Privacy Policy and Terms of Service.
Strong protection, zero data-selling, and a calm app that coaches instead of nags. Start in seconds.
Install nowOn iPhone, add MoneyTree to your Home Screen from the Share menu. Native App Store & Google Play apps are coming soon.