← Back

Privacy Policy

Last updated August 3, 2026

Command Deck is a small, independent expense tracker. This page describes what actually happens to your data in plain language — it has not been drafted or reviewed by a lawyer.

What we collect

An email address and password (used only to sign you in), and whatever financial data you choose to enter or import: transactions, accounts, budgets, bills and goals. Nothing else is collected. There is no analytics or tracking of any kind.

How your password is handled

Authentication is handled by Supabase Auth. Your password is hashed before storage — nobody with database access can read it back out.

Where your data lives

All data is stored in a Postgres database hosted by Supabase, with the app itself hosted on Vercel. Every row is scoped to your account with row-level security.

What we don't do

We don't sell your data or share it with advertisers. We don't connect to your bank — entries are typed in or imported from a CSV file you choose, and no credentials for any bank are ever asked for or stored. We don't use your financial data to train any model.

Cookies

The only cookies this app sets are the ones Supabase Auth uses to keep you signed in. No advertising or analytics tracking.

Your data, your control

You can export everything as a single JSON file at any time from Settings, and delete your account and every record attached to it from the same screen. Deletion is immediate and permanent, so take an export first if you want a copy.