Privacy and data security

What Treasury can see from your bank

Treasury connects to your bank through Plaid, and the connection is read-only. Treasury can’t move money, make payments or pay bills.

You sign in to your bank through Plaid or on your bank’s own site, so Treasury never sees your bank password. Through Plaid, Treasury reads:

• your accounts, balances and transactions, up to 2 years back;
• investment holdings, if your bank provides them;
• loan and credit card details, such as interest rates, if your bank provides them.

Treasury connects to banks in the United States only.

What Treasury sends to AI services

Treasury uses outside AI services for Treasury AI and for categorizing transactions. This is what each one gets:

• Google Gemini writes Treasury AI’s answers. It gets your message and the data Treasury AI looks up, such as balances, budgets and transactions.
• OpenRouter names each new chat. It gets the first 1,000 characters of the chat’s first message.
• Voyage AI lets Treasury AI search transactions by meaning. It gets the search words, and each transaction’s merchant, your label for it and its category, with personal details removed.
• Parallel runs Treasury AI’s web searches. It gets the search words Treasury AI writes, which can include details you’ve shared.
• ElevenLabs turns dictation into text. It gets your recording, plus names of your merchants, accounts and investments.
• TypeSafe predicts categories for new transactions. It gets the merchant, amount, statement text and your bank’s label. It also gets your category names and how you filed the merchant before.
• TypeSafe also helps pick Home’s suggested questions. For that, it gets your category, merchant and bill names with rounded amounts, your note about how you earn, and the questions themselves. While Learn from conversations is on, it also gets your last 30 days of questions to Treasury AI.

Treasury tries to remove personal details, such as people’s names in payments, before sending transaction details. TypeSafe still predicts categories when Auto-Categorize is set to None, but Treasury doesn’t apply them. See How Treasury categorizes new transactions.

Treasury AI uses memories only while Learn from conversations is on. See Control what Treasury AI remembers. You can also delete a chat at any time.

Stop sharing a bank or delete your data

Disconnecting a bank in Settings → Connections also ends Treasury’s access to it at Plaid. You choose whether to keep its history as manual accounts or delete it.

If your membership has ended, Connections is unavailable in Settings. Your banks stay connected at Plaid but stop syncing. To disconnect them, resubscribe or delete your account.

Deleting your account permanently removes your data from Treasury and asks Plaid to end its access to your banks. Records of past payments stay with Polar or Apple.

Account security

Treasury’s bank connections are read-only, so Treasury can’t move your money. Treasury never sees your bank password, and it has no passwords of its own to steal. You sign in with a passkey, Google, Apple or a code sent to your email. Sign-in codes expire after 5 minutes. See Sign in or recover your account.

For what never to put in a support message or a chat with Treasury AI, see What never to send.

Find the privacy policy

The Treasury privacy policy covers how Treasury stores, protects, shares and keeps your data, and your rights. It can lag behind changes to the app, so it may not list every service in What Treasury sends to AI services. For privacy questions, email privacy@treasury.sh.