Medici Money — Terms of Use & Data Handling
Last updated: August 2, 2026
A note on what this is
Medici Money is a private, invite-only personal finance tool built and operated by the app's operator. It is not a public product, not a bank, not a licensed financial institution, and not offered as a commercial service. This document exists so that the small number of people invited to use it understand, in plain language, what data the app accesses, how it's handled, and what to expect.
Because this is a private tool for people the operator knows personally, this document is intentionally shorter and simpler than what you'd see from a public financial app — but it's still meant to be accurate and honest about how your data is actually handled.
1. Who can use this
Medici Money is invite-only. Access is granted individually by the operator. There is no public signup, and the operator can revoke access at any time, for any reason, including simply discontinuing the app entirely.
2. What data the app accesses and why
To provide budgeting, transaction tracking, and financial insight features, Medici Money connects to your bank and financial accounts through Plaid, a third-party financial data provider used by many banking and finance apps. Through Plaid, the app accesses:
- Account and balance information
- Transaction history
- Basic account/institution metadata (e.g., bank name, account type)
Medici Money does not request or store your raw online banking username or password — that authentication happens directly with Plaid and your bank, never through this app or its operator.
The app also uses:
- Twilio, if you enable SMS-based two-factor authentication, solely to deliver verification codes to your phone.
- Anthropic's Claude API, to assist with automatically categorizing your transactions (e.g., recognizing a transaction as "Groceries"). Transaction descriptions may be sent to this service for that purpose.
3. How your data is stored and protected
- All connections to the app are encrypted in transit (HTTPS/TLS).
- Your Plaid access credentials (the token that lets the app read your account data) are encrypted at rest, using a key that never leaves the server and is never included in any data sent to your browser.
- Passwords are never stored in plain text.
- Multi-factor authentication (authenticator app or SMS) is available and recommended for your account.
- The operator does not sell, rent, or share your financial data with any third party for advertising or marketing purposes. Data is only shared with the third-party services listed above (Plaid, Twilio, Anthropic), solely to provide the app's features.
4. Who else can see your data
If you're part of a household in the app, other members you've explicitly granted access to may be able to see shared account/entity data, depending on the permission level you or another household admin has configured. You control this — access isn't automatic just because someone else uses the app.
The operator, as the person running the server this app lives on, has the technical ability to access the underlying database, same as any operator of any self-hosted service. The operator does not access individual users' financial data as a matter of routine, and internal administrative tools used to manage accounts are built to avoid exposing financial details (account balances, transactions) unless genuinely necessary for troubleshooting.
5. What happens if you stop using the app
If your account or a connected bank is disconnected/removed (by you or the operator), the app revokes its access to that bank connection through Plaid and removes the associated stored access credentials. Some records (like a basic activity log) may be retained in an anonymized form for operational history.
6. No warranty, use at your own discretion
This app is provided as-is, without warranty of any kind, by someone building and maintaining it outside of a commercial financial services context. While reasonable care is taken with security and reliability, you should not treat this as a substitute for your bank's own official records, and the operator is not liable for any financial decision made based on information shown in the app.
7. Changes to this document
Since this is a private tool used by a small, known group, changes to this document (if any) will typically just be communicated directly rather than through formal notice procedures.
8. Questions or concerns
Contact the app operator with any questions about how your data is handled or to request your account/data be removed.