Security & privacy

Your data, your control

ClearMint Essentials keeps your records in your private account, isolated by the database and shared only with the household members you invite.

Private by default

Your records live in your own ClearMint account, visible only to you and the household members you invite. ClearMint never asks for your bank password.

Row-level security

Every record is isolated by database row-level security policies. You can only read or write your own household's data.

Encrypted in transit

All traffic is served over HTTPS/TLS. Authentication is handled by Supabase Auth with industry-standard session tokens.

Secure bank linking

Optional Plaid connections are read-only — you authenticate with Plaid, and access tokens stay on our servers, never in your browser. See bank connections.

Household sharing

Invite someone to a combined household view of shared accounts, transactions, bills and budgets. Personal budgets stay private to each member. See household sharing.

No lock-in

Export everything to CSV or JSON whenever you want, and delete your account data permanently with one click.

No selling your data

We don't sell or rent your personal or financial information. Read the details in our Privacy Policy.

You hold the records

Statements you import are read in your browser, and we store only the structured data you keep, scoped to your account. If a PDF can't be fully read in your browser (a scanned file, or totals that don't add up), it's uploaded to ClearMint's server for text recognition; it's passed on to a text-recognition provider only when AI features are on.

Privacy-masked analytics

We use PostHog to see how the app is used and diagnose bugs. Every input and every financial figure is masked and never recorded — we don't see your actual numbers. Details in our Privacy Policy.

The AI stays yours

The AI assistant sends only what's needed to answer your question. If you rate an answer we keep the rating and question — never the answer or your figures. See how the assistant handles data.

Reporting a vulnerability

We take security seriously and welcome responsible disclosure. If you believe you've found a vulnerability, please email our team with details and steps to reproduce. We'll acknowledge your report and keep you updated on the fix.

Your responsibilities

  • Use a strong, unique password and keep it private.
  • Sign out on shared devices, and keep your browser up to date.
  • Only upload statements you're authorized to access.

For data-deletion requests, see Data Deletion.

Clarity that
stays with you.

A more confident view of your money, today and for the months ahead.

Start free trial →