Your money data is yours. Full stop.
Let's Save reads only the transactions you bring in, and it can't move money. We don't sell financial data, and you can delete your account and everything in it whenever you want.
Read-only bank sync, coming soon
Automatic bank sync isn't available yet. When it arrives it will be optional and go through Salt Edge, a regulated open banking provider. You'll sign in on your bank's own page, so we'll never see your bank username or password, and the access we ask for will cover account details and transactions, and nothing else.
Statements read on your device
CSV and Excel files are opened in your browser, and only the rows you approve are sent to us. On Pro, PDFs and photos you choose to have read by AI are sent for processing, with account numbers cut down to the last four digits.
Encrypted at rest
Your data sits in Cloudflare D1, which encrypts it at rest. Once bank sync launches, its connection secrets will get a second layer that we manage ourselves: AES-256-GCM with versioned keys, so a key can be rotated without touching anything else. We never store card numbers.
Deleting your account
Choose Delete Account in Settings and we email you a confirmation link. Opening it deletes every account, transaction and log entry in one go, with no grace period and no archive copy. If you're sharing anything with someone, you'll need to stop sharing first.
What protects your data
Three parts of how Let's Save is built.
Open banking, coming soon
Automatic bank feeds will come through Salt Edge, which provides read-only access under the EU's PSD2 rules. Until then, you import your bank's own export.
Files read locally
CSV and Excel statements are parsed in your browser, so the raw file never reaches our servers.
Encrypted at rest
The database is encrypted at rest by Cloudflare, and bank connection secrets will carry an extra AES-256-GCM layer of our own once bank sync launches.
Your data, under your control
No power to move money, statements read on your device, and a delete button that really deletes.