We never store your financial data.
Knox reads your transactions to find your moves, then throws them away. They are never written to our database, never sold, and never sent to advertisers. What we keep is the answer — which move we found and what we think it’s worth — not the raw material.
Never sent to us at all
Your categorization rules and every correction you make. Your paystub figures. The answers you give about your situation — what your home is worth, what you owe on it, how many children you have. These live in encrypted storage on your device.
Transactions and balances — used in memory, never stored
To find your moves we pull your transactions from Plaid, compute against them in memory, and discard them. They are never written to our database. A working copy sits in memory-only cache for 60 seconds so re-opening a move doesn't re-pull your bank, and that cache has persistence disabled — the server verifies this at startup.
Your account, your bank connection, and the results
Your email and settings. An encrypted Plaid token plus the institution name and account types (checking, savings, credit) — no balances, no account numbers, no transactions. And the moves we found you: which move, what we estimate it's worth, and how we got there.
Your transactions are processed, not kept.
Finding a move requires reading your recent activity, so our server pulls it from Plaid, computes against it in memory, and discards it. There is no table in our database with your transactions or balances in it. If you want to verify that rather than take our word for it, the deletion path and the storage model are both described below.
The details you type stay on your phone.
Your categorization rules, every correction you make to them, your paystub numbers, and your answers about your own situation are stored in encrypted storage on your device. When a calculation needs them, they are sent with that single request, used, and dropped — never written down on our side. A paystub photo you choose to scan is sent once to our AI parser, read, and discarded; the numbers it finds are kept only on your phone.
We don't sell your data, and we don't run ads.
Knox is paid by subscription. We take no money from banks or lenders to rank a recommendation, and we don't have an advertising business that would make your data valuable to us. There is no data broker in this story.
Delete your account and we actually delete it.
Deleting from inside the app revokes your bank connections at Plaid immediately and marks the account for removal. After a 30-day window — there so an accidental tap is recoverable, and signing back in cancels it — the record is deleted outright, and everything referencing it goes with it.
What we do keep, stated plainly.
Your email address and app settings. An encrypted Plaid access token, the name of your bank, and the type of each account (checking, savings, credit) — not the numbers or the balances. And your move history: which move, our dollar estimate, and the reasoning behind it. Our estimate of what a move is worth is a dollar figure derived from your finances, and we keep it; we're telling you that rather than claiming we store nothing.
Who else touches your data, and why.
Plaid connects your bank and holds the credentials; we only ever receive what you authorised in Plaid Link. Anthropic runs the AI that classifies transactions and explains moves: it receives the transaction descriptions, categories and, if you scan one, the paystub photo for the single request that needs them, and it does not train on them; the privacy tier in Settings controls how much detail it sees, from rough buckets to full picture. Firebase (Google) handles sign-in by email, phone or Apple. PostHog receives usage events (which screens and which move names, never balances or amounts) and Crashlytics receives crash reports; both are off with one switch under Settings → Diagnostics. Apple handles billing for Knox Premium; we never see your payment details. A bug report you send from the app includes your note, the screen name and, only if you choose, a screenshot.
Knox gives estimates, not tax advice.
Tax figures in Knox are estimates built from incomplete information, and they can be wrong for your situation. Knox is not a tax preparer, an accountant, or a financial adviser, and nothing in it is advice. Confirm anything that matters with a qualified professional before you act on it.
This is our privacy policy, written in plain language. For questions about it, or to exercise a right over your data, email privacy@knoxmoney.ai and we will respond within 30 days. Our Terms of Service govern your use of Knox. Bank connections are provided by Plaid and are also subject to Plaid’s End User Privacy Policy.