Security
Your money data, locked down
Cash Flow Calendar sees your bills, your paychecks and your balance. That's a lot of trust, so here's exactly how we keep it safe, in plain English.
Your bank login never reaches us
You connect your bank through Plaid, the service behind Venmo and thousands of finance apps. You sign in on Plaid's screen, and we get read-only access to balances and transactions. We can't move a cent.
We never see your card
You pay through Stripe on the web, or Apple and Google in the app. Your card number goes straight to them and never touches our servers.
Only you can see your calendar
Every request is checked against your account on our servers before anything is read or changed. Our database only answers our own servers.
How we protect it
Encrypted, everywhere
Every connection uses HTTPS. Your data and its backups are encrypted at rest by our hosting providers.
Sign-in that never holds your password
Google Firebase handles sign-in. The app keeps a token that expires within the hour, not your password.
Reviewed, then shipped
We review our code and infrastructure for security issues, most recently in October 2026, and fix what we find before anything else.
Delete means delete
Delete your account any time from Settings. We disconnect your banks at Plaid, cancel your subscription and erase your calendars.
What we'll never do
- We never sell your data.
- Your balances and transactions are never used for advertising.
- We never ask for your bank password, by email or anywhere else.
Who helps us run Cash Flow Calendar
These companies store or process data for us, each under its own security program:
- Supabase (database)
- DigitalOcean (servers)
- Vercel (website)
- Google Firebase (sign-in)
- Plaid (bank connections)
- Stripe, Apple, Google and RevenueCat (payments)
- Mailgun and EmailOctopus (email)
- Sentry (error monitoring)
We also use Google, Meta and Reddit analytics to learn how people find us. Microsoft Clarity session recording runs only on this public website, never inside your calendar.
Found a security issue?
Email contact@cashflowcalendar.app with "Security" in the subject. We aim to reply within two business days, and we will never pursue anyone who reports in good faith.
Last updated October 30, 2026.
