What our software does, and what it never does.
Specific and plain. If something here stops being true, this page changes first.
Read only by design
Purser reads accounts and explains them. It cannot pay, transfer or move funds, and there is no setting that changes that. Every payment stays in your bank's own app.
The same rule shapes everything we build: software observes and explains before it is ever allowed to act. When a number may be out of date, it says so instead of looking fresher than it is.
How Purser handles data
- Where it comes from. Bank, card and loan data arrives through a bank aggregation service that you connect and authorise yourself. Apple Card and Apple Cash data is read through Apple's FinanceKit, only after you grant permission on your own iPhone.
- What it is used for. Only to show you your own finances. Your numbers are never sold or shared.
- Where it lives. In the United States, encrypted at rest and in transit, with a copy on your own devices so the app works offline.
- Penny, the advisor. When you ask Penny a question, the question and a short, rounded summary of your figures, with no account numbers, are sent to Anthropic's Claude service to write the answer, under terms that do not allow it to train models on the data. Nothing is sent unless you ask.
- No account numbers on screen. Purser shows an institution and a nickname, never an account number, not even the last four digits.
- Deletion. You can ask for your data to be deleted from the service and from your devices.
The full detail is in the Purser privacy policy.
This website
inglebylabs.com is a static website. It has no accounts, no sign-in and no forms that send data anywhere. The details are in our website privacy policy.
What we do not claim
We do not hold security certifications or audit reports, such as SOC 2 or ISO 27001, and nothing on this site should be read as saying we do. When that changes, it will be listed here with the date and the scope.
Responsible disclosure
If you believe you have found a security problem in anything we make, including Purser or this website, please write to security@inglebylabs.com.
A useful report includes:
- What is affected, and where
- The steps to reproduce it
- What someone could do with it
While you look, please do not access or change data that is not yours, do not degrade the service for anyone else, and give us a reasonable chance to fix the problem before you share it publicly. We will not pursue anyone who reports a problem in good faith and follows these guidelines.
Our contact details are also published in machine readable form at /.well-known/security.txt.