Read-only by design.
Money Manager can see your transactions so it can categorize them. It cannot touch your money, and it never holds your bank login.
Bank access is read-only
Connections run through Plaid. The token we receive can read balances and transactions. It cannot initiate a payment, a transfer or any change at your bank.
We never see your bank login
You sign in on your bank's own screen inside Plaid. Your username and password are never sent to Money Manager and are never stored by us.
Encrypted in transit
Every request between your browser or phone and our servers uses TLS. Sessions live in a secure, HTTP-only cookie that page scripts cannot read.
No bank password to leak
There is no Money Manager password at all. Sign-in is through Google or Apple, with their two-factor protection on your account.
Export any time
CSV, Excel or PDF from Settings on every plan. Your records are not locked in.
Delete any time
Delete a record, a bank connection, all of your data, or the whole account. Deleted data is purged from backups within 30 days.
How a bank connection works.
The whole flow, so you know what is and is not in our hands.
You choose Connect Bank Account
Money Manager asks our server for a Plaid link token. Nothing about your bank is involved yet.
Plaid opens, you pick your bank
You sign in on a screen Plaid serves. Your credentials go to your bank through Plaid, not to us.
Plaid returns a public token
Our server exchanges it for a read-only access token and stores that token, encrypted, against your account.
Transactions sync
We fetch new transactions and balances with the token, categorize them, and sync them to your devices.
You disconnect whenever you like
Removing the connection revokes the token with Plaid. Imported transactions stay unless you delete them.
What we do not do.
The full data practices are in the Privacy Policy.
- Move money or make payments
- Store your bank username or password
- Sell personal data
- Show ads on the web app
- Upload your full ledger to answer an assistant question
- Claim certifications we do not hold
Found a vulnerability? Write to support@themmanager.com with the subject line Security. We read every report and reply within two business days.
Bank sync questions.
Track without linking anything.
Manual entry, receipts and statement import work with no bank connection at all.