How your data is protected

The Poindex holds things people don't share lightly: bank transactions, debts, what they earn. This page says plainly how it is built to keep that private. It describes what exists today, not what we hope to build.

Your bank login never reaches us

Connecting a bank happens in a window run by Plaid, a company that connects apps to banks for thousands of financial products. You type your bank username and password there. Plaid gives The Poindex an access key that can read your accounts and transactions. It cannot move money.

That key is encrypted, and tied to you

Before the access key is stored, it is encrypted (AES-256-GCM). The encryption key is held in a separate secrets store, never in the database and never in our code. Each encrypted key is also bound to its owner and its record, so moving it to a different record, even inside the database, makes it unreadable.

You can only ever reach your own records

Most breaches in apps like this aren't someone breaking the sign-in. They're a signed-in person asking for a record number that isn't theirs, and the app forgetting to check. The Poindex is built so that forgetting is hard: every query goes through one piece of code that adds "and it belongs to this person" by itself, and the database refuses to link one person's record to another's.

It's tested on every change. A second test account asks for every record belonging to the first, through every door the app has, and must get the same "not found" it would get for a record that doesn't exist.

Every change is written down

Each change to your data is recorded with who made it and when. The log can only be added to; the database refuses edits and deletions.

Sections can't see each other's data

Each section of The Poindex keeps its data in its own database, which only that section can open. Today, the page that brings your day together, asks each section for your items the same way you would, as you. It never opens another section's database.

Sign-in

You sign in with Google. The Poindex never sees your Google password. Your session is a random key in a secure cookie; only a one-way fingerprint of it is stored.

Before bank connections open to everyone

An independent security professional will review The Poindex before anyone outside the founder's household can connect a bank. That review comes first, not after launch.