Privacy
Readable financial data should remain under the user’s control.
ShareCapsule Finance is designed around a local-first model. The default planner stores an encrypted vault in the user’s browser. Optional device sync transports the encrypted vault, not decrypted transactions or balances.
Operating modes
What the planner should never ask for
Encrypted sync metadata
When encrypted device sync is enabled, the relay may necessarily process technical information needed to provide the service, such as an opaque vault identifier, encrypted vault payload, revision numbers, opaque device identifiers, timestamps and short-lived pairing records. Those records are not intended to contain readable household financial values.
Because no system can promise absolute anonymity at the network layer, users should understand that service infrastructure can still observe ordinary connection metadata such as request timing and network addresses even when financial content is encrypted.
Public guide and project lab
No personal financial data is required to read the Financial Control Guide. The guide is static educational content and should not require advertising trackers, social widgets or bank-data integrations.
The Income Project Lab stores its project-progress workspace locally in this first version. It should not be used for passwords, API credentials, banking secrets or other confidential access information.
Privacy choices
Users who do not need cross-device access can keep encrypted finance data entirely on one device.
Users can keep a portable encrypted backup under their own control.
Device sync is opt-in, clearly explained, and reversible without erasing the local vault.
The planner includes a control to remove the local encrypted financial vault from the current browser.