How we handle security

Most of our security comes from data we never collect, because data we don't hold can't be taken from us.

Forecast Commander is a budgeting app you type into. It shows what your balance will be on the days ahead, built from the bills and paychecks you enter yourself. It never connects to a bank, so most of what a finance app would usually hold about you doesn't exist here.

What stays out

• No bank connections, bank logins or account numbers. Nothing is imported from a financial institution, and you're never asked to sign in to your bank through us or through an aggregator acting for us.
• Every figure in the app was entered by a person, typed or added from a statement file you chose to open. That's unusual for a budgeting app.
• No payment card details. A merchant of record handles payment and holds those records, and they never reach us.
• No location data, device fingerprinting or advertising identifiers, no data enrichment from third parties, and no data bought about anyone.

What you can do yourself in Settings

• Download everything: one complete file, free, as often as you like.
• Download transactions as a spreadsheet, free.
• Start over: erase every record and keep your login and preferences.
• Delete your account: every record and the sign-in are erased immediately, with no waiting and no email to anyone. The delete screen names the three things it can't reach: emails already sent, security records that hold an address for up to 90 days, and operator backups from the last 30 days.
• Restore from a backup, even after deleting your account and signing up again with the same email address. The file works in the new account.

The backup file is encrypted, and it opens only in the account that made it. You don't set a passphrase or keep a key: signing in is what opens it. So a copy left in a Downloads folder, a cloud drive or an email is no use to anyone else, and a backup can't be restored under a different email address from the one that made it. The transactions spreadsheet isn't encrypted, so it opens in Excel.

The encryption protects the file if it goes astray. It doesn't protect your data from us, and it isn't zero-knowledge: we hold the keys, and our database holds the same records.

None of it costs anything, and none of it needs you to contact us.

Found a security problem?

Email security@forecastcommander.com and a person will read it. Tell us what you found and how you found it, and you'll get a reply.

There's no bounty program and no formal disclosure process. We ask for time to fix a problem before it's made public, and you'll hear back from someone who can change the code.

Questions about any of this, or about your own data: privacy@forecastcommander.com. The full policies are linked at the bottom of every page.