Security & privacy

What Pennyweight can see, what your AI can do, and how access works.

• What Pennyweight can and can't seeHow your passphrase protects your data, when Pennyweight's servers can decrypt it, what stays readable, and how to cut off access.
• How bank connections are securedWhat Pennyweight asks Plaid for, how your bank's access token is stored, which steps need two-factor, and what disconnecting removes.
• Your AI can't move moneyYour AI can read your finances and edit Pennyweight's records. Nothing in Pennyweight can send, transfer or pay money from your accounts.
• What your AI provider seesWhat Pennyweight sends to the AI app you connect, what it never sends, and where your provider's own privacy terms take over.
• Lock vs sign outWhat Lock and Sign out each clear in your browser, which tabs they affect, and why neither one disconnects your AI.
• Forgot your passphrase?Reset a forgotten encryption passphrase with your recovery code. You choose a new passphrase, and your original recovery code keeps working.
• Change your passphraseSwitch to a new encryption passphrase from Settings. You need your recovery code, even when you know your current passphrase.
• Replace your recovery codeGet a new recovery code from Settings when the old one was lost or shared. Confirm your passphrase, save the new code, and the old one stops working.