Security & privacy.

How a connection works

When you link a bank, you sign in on Plaid’s screen. Your username and password go to Plaid and your bank. Ample receives a token that allows reading balances and transactions for the accounts you chose, and nothing else.

• Ample cannot move money, make payments, or change anything at your bank.
• Ample never receives or stores your bank credentials.
• Tokens are stored server-side only and never sent to your browser.

Ending a connection

Remove a connection in Settings › Connections and Ample deletes the token and revokes it on Plaid’s side. Most banks also list Plaid under connected apps, where you can revoke from their end too.

Plaid has its own end-user privacy policy describing what it does with the data it handles.

In transit and at rest

Data moves between your device and Ample over TLS. Data at rest, including backups, is encrypted by the hosting provider. Nothing is stored on your phone beyond a session.

Row-level rules

Every row of your data is tagged with your account, and the database enforces that a signed-in user can read and write only rows tagged with their own account. Server jobs (the nightly sync, the Moves scans) run with a key the browser never sees.

Who can see your data

You. During the pilot, the founder can access production data to fix a problem you report, and does so only for that purpose. There is no support team with standing access.

AI features

Some suggestions send anonymized numbers to an AI model provider: category totals, a balance and rate, a bill amount. Account numbers, names and credentials are never included. You can turn AI-assisted suggestions off in Preferences; the arithmetic keeps working.

What Ample does not do

• Sell your data.
• Share it with lenders, card issuers, advertisers or data brokers.
• Take referral fees or commissions from any product a Move mentions.
• Move your money.

Why that matters for security

Ample is a subscription, paid by you. There is no second customer to serve, so there is no reason to collect more than the product needs or to keep it longer. Analytics on this website use Plausible, which sets no cookies and collects no personal data.

Export

Settings › Data › Export all data downloads a single file with everything Ample holds for you. Most lists also export as CSV on their own.

Delete

Settings › Data › Delete account removes your account, every row of your data and your connection tokens, and revokes the connections at Plaid. Provider backups age out within 30 days. Or write to us and we will do it and confirm.

Small team, changing product

Ample is run by its founder while in pilot. Features change, sometimes weekly. It is free while that is true. Treat your export as your backup, and tell us when something looks wrong; a problem you report protects everyone in the pilot.

Reporting a security concern

If you believe you have found a vulnerability, or see something in your account you cannot explain, write to support@ample.example with “security” in the subject. We acknowledge within two business days and will tell you what we found.