Mayer Money Security Overview

Last updated: November 10, 2026

Mayer Money is a private budgeting app run by Brad Mayer for his own household. It is not offered to the public and cannot be reached from the internet. This page summarizes how it protects the household's financial data. The full Information Security Policy is published too.

Where the data lives

The app and its data run on a computer in our home. Nothing is stored with any other cloud service, and no financial data is ever kept in the app's code repository.

Who can get in

• Only named household members have accounts. There are no shared logins.
• Every sign-in requires a password and a code from an authenticator app (multi-factor authentication).
• Each account has a role. The administrator can change settings and bank connections; other members have read-only access.
• From outside the home, the app can only be reached from devices the owner has approved, over an encrypted connection. It is never exposed to the open internet.
• Access is reviewed every quarter and removed the same day it is no longer needed.

Bank connections

• Banks are connected through Plaid. Mayer Money never sees a bank password; where the bank supports it, you sign in on the bank's own page.
• Connections are read-only. They cannot move money.
• The keys for those connections are encrypted when stored, and disconnecting a bank deletes its data from the app and ends the connection at Plaid.

Keeping it up to date

• Software dependencies and the home server are scanned for known vulnerabilities.
• Critical fixes are applied within 7 days and high-severity fixes within 30 days.
• Suspected security incidents are contained the same day, and Plaid and affected household members are told within 72 hours if Plaid-sourced data may have been exposed.

Your data

How we collect, use, keep and delete data is described in the Privacy Policy.

These practices are reviewed at least once a year.