What Plumb can do
See balances, transactions, and account details for the accounts you've connected — through a bank-grade aggregator, the same category of infrastructure most major financial apps use. That's the material the plan and the Coach are built from.
What Plumb cannot do — structurally, not by policy
- It cannot move money. The connection has no capability to initiate transfers, payments, or trades. There is no button we're declining to press.
- It cannot see your bank password. You sign in on your bank's own page; the bank hands the aggregator a limited-scope token. We receive data, not credentials.
- It does not store your banking credentials. They aren't in our systems, so they can't leak from our systems.
- It cannot see accounts you haven't connected. Connecting checking reveals checking — not everything at that institution.
Why we never pull your credit report
Credit reports run 30 to 60 days behind your real balances — too stale to plan a week around. Plumb builds everything from your live accounts instead. Nothing Plumb does appears on a credit report, and nothing is visible to lenders.
Disconnecting
Disconnect any account in Settings and the data flow stops. You can also revoke access from your bank's side, in most banks' security settings, without asking us at all. Cancel entirely — one tap — and you can export everything first.
The Trust page lists our security practices, compliance posture, and every subprocessor by name.