Updated October 13, 2026

YOUR DATA,
IN PLAIN LANGUAGE.

The public Northwise website and the finance app are separate. Visiting this website does not open your financial workspace or access its saved records.

This website

This site serves information, self-hosted fonts, illustrations, and screenshots containing sample data. It has no account forms, advertising trackers, analytics scripts, financial storage, or app service worker. Vercel hosts the site and processes requests, including network information such as IP addresses, under its own policies.

Using the app on your device

“Continue without account” opens local mode. The app saves records and conversations in browser storage and uses on-device rules for its assistant. The app caches its own pages and assets for offline use. Clearing browser storage or changing the app’s address can make those local records unavailable; export them first.

Signing in

Supabase provides authentication and cloud storage for records associated with your account. Local records and signed-in records are separate. Signing out or clearing device data does not delete the online account. Cloud account deletion is a separate action in Settings that requires recent authentication. The app is in a closed test: only invited addresses can sign in, and the app keeps the address a person was invited with.

Optional bank connections

Plaid supplies account balances, transactions, and available loan details for connected items. Access tokens stay on the server. Disconnecting revokes that connection and removes imported records; manually entered records are preserved. You sign in to a bank in Plaid’s own window, and the connection is for reading only. During the closed test most accounts connect to Plaid’s sample bank; a small number of invited testers can link one real bank. Real bank access is not generally available.

Ask Nova and reviewed suggestions

When signed in and the assistant service is enabled and available, your conversation and a financial summary pass through Northwise’s server to OpenRouter and the configured model provider. That summary can include accounts, transactions, bills, budgets, and non-private goals. Private goals are excluded from the summary, but anything you type into the conversation may be sent. Responses identify whether the service or on-device rules produced them. Every request asks for providers that do not collect prompts for their own use and for endpoints that keep nothing once they have answered; if none is available, the app answers on the device instead.

Suggested categories and goals require your review before saving. Associations and saved plans do not transfer money or change bank balances.

Feedback and problem reports

A signed-in tester can send feedback from the app. It arrives with the page they were on, the app version, and the browser type. A tester may add up to three screenshots; a screenshot shows whatever was on screen, balances included, unless the privacy screen was on. Each picture is kept without its camera details or location, and only the Northwise team can see it. When something breaks while signed in, the app sends a short technical report of what failed, with amounts, account numbers, and addresses blanked before it is kept. A problem report never includes balances, transactions, or page content. Problem reports are kept for 30 days; feedback and its screenshots are kept until the account is deleted. Local mode sends neither.

Notifications

External delivery requires opt-in in the app. Browser reminders store a push subscription and send a general bill reminder without amounts or transaction details. Weekly email uses your account email and a general check-in message when email delivery is configured. You can turn these off in Settings. Email delivery is not currently configured.

Export, masking, and deletion

Export downloads currently loaded records, including private goals and retained historical records. Keep exported files private. Privacy masking hides amounts on screen; it does not encrypt stored records. Quick exit does not erase browser history. Account deletion removes the cloud identity and associated records after bank access is revoked; separately retained encrypted backups, if configured, require their own retention handling.

Service providers

The app uses Vercel for hosting and server functions, Supabase for authentication and data, Plaid for optional bank data, and OpenRouter and its selected model provider for service-based AI. Optional email delivery uses Resend; push messages use the browser’s notification provider. These providers process requests under their own policies. A sign-in provider’s avatar may also load from an external image service.