We can see your accounts. We can't touch them.
Read-only access through Plaid, encryption at rest and in transit, and a business that runs on subscriptions rather than on your data.
Built on infrastructure you already trust
PlaidBank connections
StripePayments, PCI Level 1
SupabaseDatabase and auth
AWSCloud infrastructure
VercelEdge hosting
CloudflareDDoS and SSL- AnthropicAI insights
Built for security
How we protect your financial data
Every claim on this page names the system that makes it true.
What Promi can see
- Balances and account names
- Transactions and merchants
- Investment holdings
What Promi can never do
- Move money or transfer funds
- Make a purchase
- Change an account setting
- See your bank password
Your bank password never reaches us
Plaid runs the login in its own window. We receive a token you can revoke from Settings, from Plaid, or from your bank.
Encrypted at rest and in transit
AES-256 on disk, TLS on the wire. The database sits on Supabase inside AWS, and Cloudflare terminates every connection.
Isolated per household
Row-level security scopes every query to your household inside the database itself, on every table, not only in app code.
Hosts you can look up
Supabase is SOC 2 Type II audited and runs on AWS. Vercel serves the app. Promi itself has not been audited yet, and this page will say so until it has.
We never see your card number
Stripe handles billing on the web and Android, Apple on iOS. Card details go to them and never to our servers.
Never sold, never trained on
No ads, no affiliate links, no third-party trackers. AI insights run on Anthropic under an agreement that keeps your data out of model training.
Security FAQs
Your trust is our top priority
Promi is built by engineers who care about privacy. We use the same tools we'd want for our own finances. No shortcuts, no compromises. If you ever have security concerns, please email security@promifinance.com.
Try it without connecting anything
The interactive demo runs on a sample household. No bank login, no signup, nothing to revoke afterward.
Open the live demo