Your data & security
Where your data lives, and how your identity is protected.
Straight answers to the questions members ask most: where information is stored, who can see it, and what happens before, during and after you sign in.
The short version
Your password stays secret
Passwords are stored only in scrambled, one-way form by our sign-in service. Nobody at Let Money Grow™ can read them. With Google sign-in we never see your Google password.
Only you can open your details
Database rules lock your saved figures, goals and Monet conversations to your own account. No administrator screen shows them.
Encrypted, and never sold
Everything travels over encrypted connections and is encrypted where it is stored. We do not sell your information or share it with advertisers.
Card numbers never reach us
Payments are handled entirely by Stripe. We keep a record of what you bought, never your card number.
Where your data is stored
Your account and saved information live in a managed cloud database hosted in Amazon Web Services data centres in Canada (Central region). Traffic travels over encrypted connections and our hosting and database providers encrypt stored data at rest. Encryption protects data from outsiders; it does not prevent access by the platform's own authorized systems and personnel.
Database rules mean your saved details, goals and Monet conversations are readable only by your own signed-in account through the site. No administrator screen displays them. Separately, our systems hold privileged credentials used by background processes such as scoring, billing, email and aggregate reporting, and our hosting, database and email providers keep operational logs and backups. Access through those routes is restricted to authorized systems and personnel for specific operational, security or legal purposes.
Before, during and after you sign in
Step 1
Before you sign in
- You can read guides, use the calculators, take the Fragility Test and ask Monet free questions without an account.
- As a guest, your Monet conversation is kept only in your own browser. Each question is still sent to the AI provider behind Monet so it can be answered.
- We count page visits and button taps with a random visit number to improve the site. There is no advertising network, no session recording and no third-party tracking pixel.
Step 2
When you sign in
- Choose Google or email. With Google, Google confirms who you are and we receive only your name and email address.
- With email, you confirm your address from a link before your first sign-in, and your password must be at least 8 characters. It is stored only in scrambled, one-way form — not even our team can read it.
- Once signed in, your browser holds a short-lived, signed sign-in pass that renews itself. Signing out ends it on that device.
- Forgot your password? A reset link or one-time code goes only to the email or cell number on the account, and we never reveal whether an email is registered.
- Before your account is created, you read and sign six agreements on the sign-up form: our five policies and the security commitments on this page. With Google, you sign them right after your first sign-in, before you can use the site. We record the name you type, the date and time, the version, your network address and your browser type, so the agreement can be verified later.
Step 3
After you sign in
- Your saved details, goals, Fragility Test results and Monet conversations are locked to your account by rules inside the database itself — not just the website.
- Administrators manage accounts, roles, access and purchases. No administrator screen displays your financial details or conversations.
- If you connect card or loan accounts, it is a read-only link through our bank-connection provider. Your bank login never reaches us, and the connection is erased after 3 days.
- Files you download carry a licence stamp with your name, so a leaked copy can be traced to the account it came from.
What we keep, and who can see it
Every kind of information, in one place — with what you can do about it.
Account (name, email, and cell number for one-time reset codes)
- Where it lives
- Our cloud database
- Who can see it
- You. Administrators, to run your account and help with support.
- Your control
- Edit it on your account page, or ask us to close the account.
Saved financial details and goals
- Where it lives
- Our cloud database, locked to your account
- Who can see it
- Only you, in the app
- Your control
- “Delete my details” on your account page removes them.
Monet conversations
- Where it lives
- Signed in: our cloud database, locked to your account. Guest: your own browser.
- Who can see it
- Only you, in the app. Each question is sent to the AI provider to produce the answer.
- Your control
- Delete any chat from your chat list.
Payments
- Where it lives
- Card details at Stripe; a purchase record with us
- Who can see it
- You. Administrators, for receipts and refunds.
- Your control
- Purchase records are kept as long as the law requires.
Bank and card connections (optional)
- Where it lives
- Our bank-connection provider, read-only
- Who can see it
- Only you — balances are read live and not stored by us
- Your control
- Erased automatically after 3 days, or remove it sooner.
Signed policies and download licences
- Where it lives
- Our cloud database
- Who can see it
- You. Administrators, to verify an agreement or a leaked file.
- Your control
- Kept as legal records, even after an account closes.
We will never
- — Sell your information or share it with advertisers or data brokers.
- — Ask for your password, full Social Security number or bank account numbers by email, phone, text or chat.
- — Show your financial details or conversations to other members, partners or advisors.
- — Store your card number.
About Monet
Monet's answers are generated by an external AI provider. Your question, and any saved context you have chosen to share, are sent to that provider to produce the answer. We do not sell that content or use it to advertise to you. We do not control the provider's own logging or retention, and we cannot promise your content is never retained or never used to improve models — so please do not enter account numbers, full Social Security numbers or passwords.
Want the full detail?
Read the Privacy & confidentiality policy, the Data protection policy and the Content protection policy. To get a copy of your data, correct it or close your account, contact us. No system is perfectly secure; if a breach ever affects your data, we will tell you.