Free & paid

The local app is free — full features, full export, forever. Paid plans cover things that cost us money to run on servers: encrypted sync between devices and automatic bank-transaction import.

Plus starts with a 30-day trial — no card, because we have nowhere to put one: payment runs through our payment provider as merchant of record, and card details never reach us. Prepaid codes are also available; they're deliberately unlinkable — we cannot connect a code purchase to an account, by construction.

If a subscription lapses, sync becomes read-only after a grace period and new bank links pause — your data and the local app keep working, and export always works. That "no hostages" rule is a design invariant with tests, not a promise: the code paths for reading and exporting your data never consult billing state. Deleting your account is likewise never gated on payment.

The fine print lives in the privacy policy and the terms of service; the short version is the principle above.