A private budget app with no ads and no data sales
MoneyMatter is a private budget app with no ads and no data sales, and its source code is public. Use the cloud version and see which services handle your data and what is encrypted, or self-host it and keep your data on your own server.
No Google or Facebook trackers: the outside services that see your data
The cloud version runs no ad networks and no Google or Facebook trackers. A few outside services help run it, each under its own privacy policy. These are the main ones.
- Stripe for payments. It handles your card, and MoneyMatter never receives the number
- Resend for sign-in and account emails
- Sentry for crash reports, which include your email. A session with an error can include a replay, with all text masked and media blocked
- PostHog for product analytics tied to your account and email, with no session recording on real accounts. Do Not Track stops the analytics sent from your browser, while the server still records events such as sign-ins
- Your bank data provider, and the AI provider behind the included AI or your own model
- logo.dev receives payee and subscription names when MoneyMatter looks up a logo, and your IP address and the brand domain when a logo loads
- OpenStreetMap receives your IP address when you open the map picker, which is off by default
AES-256-GCM for bank credentials, no end-to-end encryption
All traffic between your browser and the cloud version uses HTTPS. Bank credentials and your own AI keys are also stored encrypted with AES-256-GCM, so a copy of the database alone does not reveal them. Transactions and balances do not get that layer, because the server has to read them to build your reports. That means MoneyMatter is not end-to-end encrypted.
- Bank sync is read-only, and your bank password is never stored
- Passwords are stored as bcrypt hashes
Self-host the budget app to keep your data on your own server
If you would rather not trust a hosted service, run MoneyMatter on your own server with Docker Compose. A self-hosted install sends no analytics, and Sentry stays off unless you configure it. Bank sync, AI and logos stay off until you add your own keys, and a model on your own network keeps AI in-house too. You can also sign in through your own OpenID Connect provider.
Sign in with a passkey, Google, GitHub, Apple or a password
Use any of them, and keep several at once as backups. Think someone has your password? A reset signs you out on all devices and disconnects connected apps, including AI assistants.
See every device signed in to your account
The Active Sessions tab lists each browser and device on your account, with its IP address and when it was last active. If one looks wrong, sign it out and change your password. You can also sign out every other session at once.
Delete your account and financial data yourself
You do not need to email anyone. The Danger Zone tab lets you wipe all your data and start over with the same login, or delete your account and all its data. Both are permanent, so download a backup or an export first if you might want your records later.
Set what Claude or ChatGPT can do with your data
You can connect Claude, ChatGPT or another assistant to your data over MCP. Read access is always included, and before you approve you choose whether it can also create and edit records, or delete them. Revoke an app in settings when you are done with it.
Good to know
- MoneyMatter has no published third-party security certification or audit.
- On Plus and during the free trial, AI categorizes new bank transactions automatically, and no single switch turns this off.
Security & Privacy questions
Is MoneyMatter safe for my financial data?
It protects your login and bank connection, but not against everything. A leaked database does not expose bank credentials or readable passwords, and bank sync cannot move money. A stolen password can still open your account because there is no two-factor authentication, and anyone with access to the server can read your transactions.
Can MoneyMatter see my transactions?
Yes. Whoever runs the server can access your transactions and balances. On the cloud version that is MoneyMatter, and on a self-hosted install it is you.
Does MoneyMatter support two-factor authentication?
No. To protect your account without it, sign in with a passkey, or with Google or GitHub, where your own two-factor settings apply. If your account also has a password, that password still works.
Does MoneyMatter send my transactions to AI?
On Plus and during the trial, yes: new bank transactions go to AI with their amount, currency, account name, date, note and payee, along with your category names. Transactions you add by hand are not sent for categorization automatically, though Smart tracking also checks new and edited transactions if you turn it on. Add your own model, such as an Anthropic, OpenAI or Gemini key or a model on your own computer, and those features use it instead. Budget suggestions always use the included AI.
Is MoneyMatter open source?
Yes. The code is public on GitHub under the AGPL-3.0 license, so you can read how your data is handled or run the app on your own server.
What happens to my data when I delete my account?
Your account, login and data are permanently deleted. A subscription you pay for through Stripe is canceled first, and anyone you shared accounts with loses access.
Step-by-step guides: Security and account, General settings, Connect Claude or ChatGPT.