Read-only bank access
Connections run through Plaid with read-only scope. We can see balances and transactions to build your plan — we can't move money.
Legal
Security, by design.
Your financial data deserves real protection. Here's exactly how we handle it.
Encrypted end to end
Your data is encrypted in transit and at rest. Bank credentials never touch our servers — they go straight to Plaid.
Never sold
We don't sell or rent your personal or financial information. Disconnect accounts and request deletion anytime.
How a bank connection works
When you link an institution, Plaid handles authentication directly. You enter your bank credentials on Plaid's interface — not ours — and we receive a read-only token to fetch balances and transactions. We never see or store your bank username or password.
Your controls
- Disconnect any linked institution from settings at any time.
- Request export or deletion of your data.
- Use the app entirely on manually-entered debts, with no bank link at all.
Reporting an issue
Found something concerning? Email security@smartdebtflow.com or use our contact page. See also our Privacy Policy and GLBA notice.