The short version
No bank password required
Networo works completely without connecting a bank: you enter your own figures. If you choose to link an account, the connection runs through Plaid, you log in on your bank's own screen, and Networo never sees or stores your bank username or password.
Bank-level encryption inside the database
Every value you record, the names of your accounts, your notes, income, expenses, goal, birth year and any feedback you send are encrypted by Networo with AES-256-GCM before they reach the database. A copy of the database on its own shows only scrambled text. The database's disks are encrypted as well, and bank connection tokens get their own separate AES-256 encryption.
Encrypted in transit
All traffic between your device and Networo is encrypted with TLS. The site tells browsers to refuse any unencrypted connection (HSTS), and a strict Content-Security-Policy limits which outside services a page may talk to.
Never sold, never shared
Networo makes money from subscriptions, not from your data. Nothing you enter is sold, rented, or shared with advertisers or data brokers. The few service providers that run the product process data only on Networo's behalf, and they are listed in the privacy policy.
Your password never touches Networo
Networo does not keep a password database. Sign-in is handled by Clerk, a specialist identity provider, and Networo only ever receives proof that you signed in.
Delete means delete
Delete your account from Settings and your records are erased immediately, any Networo subscription is cancelled first so you are never charged again, and any bank connection is revoked at Plaid. Database backups expire on their own within 7 days. You can also export everything as a CSV at any time, free.
Hosted in the United States
Networo's database and servers run in the eastern United States, on Neon and Vercel, both of which encrypt their storage.
Exactly what is encrypted
Networo encrypts these with AES-256-GCM before they are written to the database, so the database itself only ever holds scrambled text:
- every value you record for an account, and its note
- the name of each account, its monthly payment and any locked or unvested amount
- for linked banks, the last digits of the account number and the bank's name
- your display name, monthly income, monthly expenses, net worth goal, birth year and What-If scenarios
- any feedback message you send us
- the tokens that let Networo read a linked bank balance, which have their own separate key
A few things are not encrypted this way, because the service cannot work without reading them directly: your email address (so you can sign in and receive the reminders you ask for), the type and category of each account, the dates values were recorded, and your plan and settings. None of these include an amount of money.
On top of that, the database encrypts its own disks, and all traffic to and from Networo uses HTTPS.
What we can and cannot see
We want to be precise here, because many apps are not. Networo's servers hold the encryption key, because features you rely on need to read your numbers: reminders, milestone emails, the AI Coach, household sharing and bank sync. That means this is strong protection against someone who steals or leaks a copy of the database, but it is not “zero-knowledge” encryption, and we do not claim it is.
Nobody at Networo browses your data. Access to the systems that could read it is limited to the company's own accounts, each protected by two-step verification. The encryption key is itself locked inside Google Cloud's key management service, and only Networo's live servers can unlock it, by proving who they are to Google each time. No password or stored credential can, and every use of the key is logged.
When you use the AI Coach, a summary of your figures is sent to Anthropic to answer your question. It does not include your name, your exact birth year or the names of your accounts, it is not used to train models, and Networo does not store your questions or the answers.
If you choose to connect a bank
Bank sync is optional and off until you turn it on. Connections run through Plaid: you log in on your bank's own screen, choose exactly which accounts to share, and Networo receives only balances. It never sees your bank username or password, never reads transactions, and cannot move money. Disconnecting a bank revokes Networo's access at Plaid, not just in our own records.
Protecting your account
Networo never stores your password. Sign-in is handled by Clerk, a dedicated identity provider, with protection against automated password guessing. Sensitive parts of the site are rate limited, and a strict Content-Security-Policy restricts which outside services any page may load code from or send data to.
In Settings, Security & privacy you can see who else has access to your account through Household, review signed-in devices, and manage your sign-in.
Your data is yours to take or delete
You can export everything you have ever entered as a CSV at any time, free, in a format Networo can import again. Deleting your account erases your records immediately, cancels any Networo subscription first so you are never charged again, and revokes any bank connection. Database backups expire on their own within 7 days.
If something ever goes wrong
If we learn that personal data has been accessed without authorisation, we will contain it, tell the people affected without undue delay and within 72 hours of confirming it, explain what happened and what we are doing about it, and meet every notification duty the law sets.
Found a security problem?
Please tell us at support@networo.com with “Security report” in the subject. We will reply, keep you updated, and never take action against anyone reporting in good faith. Our security.txt has the same details.
Where your data is stored and who processes it is listed in the privacy policy.