Cedar & Coin is built privacy-first. The short version: we never connect to your bank, we never see your credentials, we never sell or share your data, and you can leave with everything or delete it all at any time.
Only what you type in or upload: a username, a display name, an email address (used for email verification, password reset, and the weekly digest you can turn off), and the financial entries you choose to record - budgets, transactions, debts, savings, watchlists, and similar. Uploaded statements are parsed into transaction rows and are not retained as files.
No bank or brokerage logins. No card numbers. No Social Security numbers. No advertising trackers, no analytics beacons, no third-party cookies. The only cookie is your own session.
Your data is stored in a Cloudflare D1 database operated by HK Applications LLC, with encrypted backups kept for eight weeks for disaster recovery. Passwords are stored only as salted PBKDF2 hashes - we cannot read them.
When you use Ask Cedar, statement parsing, or Tape Read, relevant numbers from your ledger are sent to an AI model provider to generate the answer, under our instruction that they are used only for that response. You can simply not use those features; the ledger works fully without them.
Nothing is shared with anyone unless you join a household and choose what your partner sees (totals only, or full detail - your call, changeable any time). We do not sell, rent, or trade data. Ever.
Transactional email (verification, password reset, the weekly digest) is sent via Resend from cedarcoinco.com with SPF, DKIM, and DMARC configured. The digest can be turned off inside the app.
Export everything from the app's Export button whenever you like. To delete your account and all data, email digest@cedarcoinco.com from your account email and it will be done within 7 days.
HK Applications LLC, Wichita, Kansas · digest@cedarcoinco.com