Security, plainly.

Marked Money asks you to put your whole financial picture in one place, so you deserve better than a padlock icon and a vague promise. This page says exactly how your records are protected, specifically enough to be checked.

The strongest protection is what never comes in.

Nothing links to your bank. There is no place to enter a bank login, no aggregator, and no third party holding a live connection to your accounts. You bring your history in yourself, from a file or by hand. A credential that is never collected is a credential that cannot be stolen here.

Your documents stay with you, too. Marked Money has no document storage: receipts and tax papers are never uploaded and never held, because there is nowhere to put them. The one kind of file you ever send is a statement export you choose to import, and it becomes ledger rows you review. Your books live here; the paper stays home.

Your sign-in is built for the worst day.

  • All traffic is encrypted in transit with TLS.
  • Your password is never stored. What is stored is a salted scrypt hash, a one-way form with a work factor well above the default, so it cannot be read back out of the database.
  • Sign-in sessions and password-reset links are stored only as one-way hashes as well, so even a stolen copy of the database could not be used to impersonate you.
  • Two-factor authentication is built in: your password plus a six-digit code from the authenticator app on your phone. Turn it on in Settings, and a stolen password alone stops working.
  • Every page ships strict browser security headers, including rules that stop any other site from embedding Marked Money inside its own pages.

Your books are visible to you, and to no one else.

Every read and every write is scoped to your own account's books at the data layer, and that isolation is verified by automated tests, not by policy alone. The only way another person sees your books is that you invite them yourself.

There is no ad business here, no analytics company building a profile of you, and no session recording. Nothing you enter is sold, and nothing is shared with advertisers, data brokers, or marketing partners. Those promises are written into the Privacy Policy, which is the document that binds us; this page is the plain-language tour.

Backed up nightly. And the backups are tested.

Your books are copied every night to storage kept separate from the database itself. Every week one of those copies is actually restored and checked: the restored ledger has to balance, and it cannot be empty. A backup nobody has ever restored is not a backup, so ours get restored on a schedule.

Delete means delete.

Deleting your account erases your records from the live service immediately and permanently. That is not a promise in a paragraph: an automated test performs a full account deletion and verifies nothing is left behind, and it runs as a gate before every single deploy. The software cannot ship if deletion breaks. Disaster-recovery copies age out on a short, fixed schedule and are not used to bring deleted data back. And you can export your books as plain files, anytime.

What this page will not tell you

That any of this is perfect. No security is, and anyone who says otherwise is selling something. What is here is real, specific, and testable, and we would rather tell you exactly what it is than call it “bank-level.” The full detail, including the infrastructure providers that help run the service and what each one sees, is in the Privacy Policy.

Read the Privacy Policy

Confidence you can check.

If you have a security question this page does not answer, email [email protected] and you will get a straight answer. The beta is the right time to ask.

Start free

Try it without signing upFinished books for a household, three rentals, a design studio and a house-flipping company. View only, so click anything.

No bank linking. Bring your whole history. Export it anytime.