Security
How we protect your data
A plan in Wilson Finance can hold your whole financial picture: income, balances, debts, and the retirement you are working towards. This page says exactly how that is protected, and where the limits are.
No bank logins, ever
Nothing connects to your bank. You enter the figures, so there is no stored credential or standing permission for anything to read your accounts.
Your rows are yours
The database itself refuses to return one account's figures to another. It is enforced by Postgres on every request, not by code that has to get it right each time.
Encrypted in transit and at rest
Every connection uses TLS. The database and its backups are encrypted on disk by our provider.
Two-factor sign-in
Add an authenticator app and a password alone no longer gets anyone in. Sign in with Apple or Google is there too.
Leave with everything
Download all of it as one file, or delete the account and everything in it, from the Account screen. No email to send, nobody to ask.
What we never have
- Your bank or brokerage logins. There is no bank connection and no data aggregator, and the app cannot move money.
- Your broker export files. A positions file imported in Retirement › Holdings is read on your device and then dropped. Only the positions it lists are saved, with the same protection as everything else below.
- Your card number. Payment happens on Stripe’s page on the web, or through Apple once the iPhone app launches. We receive only whether a subscription is active.
- Your password. It is stored as a salted hash by our authentication provider. Nobody can read it back, including us.
- Your Social Security number or any government identifier. Nothing in the product asks for one.
Signing in
- Passwords must be at least 10 characters, and the most commonly guessed ones are refused.
- Two-factor authentication with any authenticator app (Google Authenticator, 1Password, Authy and others). Once it is on, every new sign-in needs the current six-digit code.
- Sign in with Apple or Google if you prefer. We never see those passwords, and Apple lets you hide your real email address from us.
- Security emails. We email you when your password or email address changes, or when two-factor is turned on or off, so a change you did not make does not go unnoticed.
- Sign out everywhere from the Account screen ends every session on every device at once, for a lost phone or a shared computer.
- On iPhone (coming soon), your sign-in is kept in the iOS Keychain rather than in ordinary app storage.
Where your figures live
In a managed Postgres database in the United States, run by Supabase. Every row is tagged with the account that owns it, and row-level security in the database refuses to return a row to anyone else. That rule sits beneath the app: even a bug in our own code cannot hand one customer’s figures to another, because the database will not do it.
Connections are encrypted with TLS, data is encrypted at rest, and the database is backed up automatically every day.
The limits, stated plainly
Your figures are not end-to-end encrypted. Like almost every web app, the service has to be able to read them to draw your charts on whichever device you open. That means the database administrator could technically read them. We do not look at an individual account’s figures unless you ask us to fix a problem with it.
No system is perfectly secure, and we do not claim otherwise. What limits the damage is what is not here: no bank credentials, no card numbers, no identifiers. An attacker who got in would find figures you typed, and no key to anything else of yours.
Taking your data with you, or deleting it
- Download: Account → “Download my data” saves everything as one readable file.
- Delete: Account → “Delete account” removes the account and every figure in it immediately, and confirms by email.
- Cancelling a subscription deletes nothing. What you entered stays readable and exportable.
Reporting a security problem
If you find a vulnerability, email support@wilsonfinance.app with the details, and please give us the chance to fix it before publishing. We will confirm receipt, keep you posted, and credit you if you would like.
The legal detail, including every company involved in running the service, is in the privacy policy.