← Wealth Navigator · Docs

Principles

Privacy is the architecture, not a policy. Your financial data is encrypted on your devices, and only your devices hold the keys. The server stores an opaque blob it cannot read — so a breach, a subpoena, or a rogue employee on our side cannot expose what we never see. Features are designed "pull", not "push": nothing about you leaves your device unless you choose to act on something.

Computation happens on your device. Tax estimates, cash-flow projections, scores, and recommendations are computed locally. We don't need your data on a server to be useful — and so we don't take it.

Your data outlives us. Everything you enter can be exported at any time in documented, open formats. The app itself is one small program with no external dependencies, built to keep working for decades, not until the next funding round. If we disappeared tomorrow, your data and your app would keep working.

You are the customer, not the product. No ads, no analytics, no data sales. The business is a straightforward subscription for server-assisted services — and the free local app is genuinely free, forever.

Tools, not advice. Wealth Navigator computes estimates and organizes decisions; it is not a tax adviser, investment adviser, or law firm. For consequential decisions, verify with a qualified professional — the app is built to make that conversation shorter, not to replace it.

No hostages. If you stop paying, the local app and your data keep working, and export always works. A lapsed subscription only pauses server services (see Free & paid).