What happens to your numbers

If you're not signed in

Everything you enter — balances, accounts, notes, targets — is stored only in this browser on this device, in the browser's local storage. It never leaves your computer. If you clear your browser data or switch to a different device, it's gone.

If you sign in

Your data is saved to a private per-user row in our database (managed Postgres with row-level access control). Only you can read or write your own rows. Your account is used to sync the same data across your devices — nothing more.

Your email address

When you sign up through Clerk we receive and store the email on your account so we can recognize you across devices. Your last activity timestamp is updated when you save snapshots or profile changes, so future notification features (e.g. monthly reminders, if you opt in) know when to ping you. We'll never sell or share your email, and we'll never send marketing email without an explicit opt-in from you first.

What we never do

• No ads.
• No selling, renting, or sharing your data with anyone.
• No paid tier that locks core features behind a paywall.
• No ad networks, no fingerprinting, no cross-site tracking.

What leaves your browser

• Sign-in goes through Clerk, our authentication provider.
• Your saved data syncs to our database only when you're signed in.
• Market prices — we fetch ticker prices (e.g. S&P 500, Bitcoin) from public finance APIs. We send the ticker, nothing about you.
• Rough location from your IP — the first time you open the retirement planner, we read the city your IP resolves to (a free edge header our host attaches, no third-party lookup) so cost-of-living defaults are somewhere near you. We never store the IP itself; only the matched city id (e.g. austin). You can change it anytime in the planner.
• Aggregate usage — we record anonymous visit events (page, device type, referrer, UTM) to understand how people find the app. Events are sent to Vercel Analytics and PostHog; payloads never contain account balances, entry contents, or identifiers tied to your finances.

Deleting your account

Go to your avatar in the top-right → Manage account → Security → Delete account. When you confirm, we delete every row we have under your user id — profile, snapshots, accounts, account settings, and tracked indexes — within seconds. There is no soft-delete or retention period.

Exporting your data

You can export all your snapshots as CSV any time from the app. Signed-in users get their server rows; anonymous users get the in-browser data.

Questions

Email support@compoundjoy.com and we'll reply.