Cedar & Coin is built privacy-first. The short version: bank connection is optional, Cedar never receives your bank password or payment-card number, we never sell your data, and you can export or delete your information.
We collect the account information you provide (username, display name, email), security and limited activity records, subscription status and provider identifiers, and the financial entries you choose to record. Financial entries can come from manual entry, statement upload, transaction-alert email, or an optional connected institution. Uploaded statements are parsed into transaction rows and are not retained as files.
Cedar does not receive or store bank passwords, full payment-card numbers, card security codes, Social Security numbers, or government IDs. During the invite-only beta there is no live subscription checkout. When paid web subscriptions are offered, payment details will be entered on Stripe's hosted service, not in Cedar. If you opt into Plaid when it becomes available, authentication will occur through Plaid Link or your institution's OAuth page; Cedar would receive an access token and the account data you authorize, not your password. Cedar itself uses only its secure session cookie; provider-hosted pages and frames are governed by their own policies.
Your data is stored in a Cloudflare D1 database operated by HK Applications LLC. Encrypted weekly backups are retained for 56 days for disaster recovery. Passwords are stored only as salted PBKDF2 hashes - we cannot read them. Older encrypted snapshots created before September 2, 2026 may remain in private repository history until that history is separately purged.
You control AI processing from your account panel. The default Cloudflare only mode processes Ask Cedar, statement parsing, and Tape Read through Cloudflare Workers AI. Off prevents those features from sending financial context to any model. External AI allowed permits the app to send only the context needed for the requested feature to the configured external model provider. Before statement text is submitted, common email addresses and account, routing, and card-number patterns are masked. Provider handling and retention remain governed by the selected provider's terms; HK Applications LLC does not use submitted data to train a model. The ledger works without AI features.
We use service providers only to operate features you request: Cloudflare for application hosting and storage, Resend for transactional email, and the AI provider selected by your privacy setting. When paid subscriptions launch, Stripe will process web billing; a future native app may use RevenueCat. Optional institution connection may use Plaid when that feature is enabled. We do not sell, rent, or trade personal or financial data. Household information is shared with your partner only according to the visibility setting you choose.
Transactional email (verification, password reset, the weekly digest) is sent via Resend from cedarcoinco.com with SPF, DKIM, and DMARC configured. The digest can be turned off inside the app.
Cedar is currently free during the invite-only beta. Plaid institution connection is optional and not yet generally available; when enabled, it can be revoked from the account panel. Revocation stops future access; previously imported ledger entries remain until you delete them or your Cedar account. When paid web subscriptions are offered, Stripe will be the system of record for payment status. Cedar will store provider identifiers and status, not payment-card details. A future native app may use RevenueCat for in-app purchases.
Export your ledger at any time. Non-founder users can delete their account from the account panel; deletion requests revocation of any active Plaid access and cancellation of any associated Stripe customer when billing is live, then removes live Cedar account data. Founder-account deletion requires an operator request. You may also email digest@cedarcoinco.com from your account email. Encrypted backups expire on the 56-day retention schedule.
HK Applications LLC, Wichita, Kansas · digest@cedarcoinco.com