Help · Your account

Privacy and security

What Pensum keeps

• To sign you in: your Google account ID, email address and name. Pensum never stores a password; Google handles sign-in and two-step verification.
• Your budgets: accounts, categories, transactions, assignments, and who has access.
• A little about use: when you joined, which days you used Pensum, your display preferences, and an approximate country.

Nothing is sold or used for ads.

Who can see your budget

Only you and the people you share it with. The people who run Pensum can see your account details (your name, email address, and when you joined and last used Pensum) and your budgets' names. For each budget they see only how many accounts and transactions it has, and how many banks are connected. Their tools don't show anything inside a budget: no account names or balances, amounts, payees or categories.

How it's protected

• Every budget is walled off from every other in the database itself.
• Traffic is encrypted, the database disk is encrypted, and backups are encrypted before they leave the server.
• One cookie keeps you signed in. It isn't used for tracking.

Bank files and bank sync

• Bank files are read in your browser; only the transactions you import are sent to Pensum.
• SimpleFIN: Pensum stores one access key, encrypted separately from your budget data, never shown to anyone, and deleted when you disconnect. Pensum never gets your bank login.
• Stripe: you sign in to your bank in Stripe's window, and Stripe shares only the accounts you choose. Pensum stores no bank credential, and ends Stripe's access when you disconnect, leave or delete the budget, or delete your account.

Either way, access is read-only: Pensum can't move money.

The details are in the privacy policy.

Still stuck? Signed in, choose Contact support in your account menu, or email [email protected] Copy