Encryption at rest — AES-256-GCM
Bank connection tokens, two-factor secrets, and every other sensitive secret are encrypted at rest with AES-256-GCM. Passwords are never stored at all — only a bcrypt hash. All traffic runs over TLS.
Security at feels.money
Calm about money starts with trust.
No security page can promise perfection, and we won't. What we can do is tell you exactly how your data is handled — what we encrypt, what we never store, and what stays in your control.
how your data is protected
Encrypted, isolated, and read-only.
The most important protections are the structural ones — the data we never hold can never leak.
Your bank credentials never touch us
Connections are OAuth-first: you sign in on your bank's own page, and we receive a scoped token — never your username or password. Where an institution requires credentials, they are handled inside FeelConnect's isolated connection flow and are not stored by feels.money in any form.
Token isolation via FeelConnect
feels.money holds exactly one thing per bank connection: an encrypted FeelConnect access token. The token is scoped to reading the products you approved, can be revoked at any moment, and is useless outside our servers.
Read-only, by design
We can see balances and transactions. We cannot move money, initiate payments, or change anything at your institution. There is no code path for it — not a setting, an architecture.
your account
Locks you actually control.
Passkeys
Sign in with Face ID, Touch ID, or a hardware key. Passkeys are phishing-resistant and never leave your device.
Two-factor authentication
Add a TOTP authenticator app as a second factor, with one-time recovery codes in case you lose your device.
you stay in control
Your data. Your choice. Always.
Every control below lives in settings — none of them requires contacting support.
Export everything
Your data is yours. Download a complete export — accounts, transactions, goals, journal — from settings at any time, no waiting period, no support ticket.
Delete for real
Deleting your account permanently removes your data from our systems within 30 days and revokes your connection tokens at FeelConnect so syncing stops immediately. It is a delete, not a deactivation.
Disconnect any bank, anytime
Remove a single connection from settings whenever you like. The token is revoked on the spot and that institution stops flowing into your account.
responsible disclosure
Found something? Tell us first.
If you believe you have found a security vulnerability in feels.money, we want to hear from you before anyone else does. Email security@feels.money with enough detail to reproduce the issue. We respond within two business days.
For everything else about how data is handled, read our privacy policy.