How CrestCast Protects Your Financial Data

A household forecast only works if you're honest with it, and that means real salary, real mortgage balance, real debts. So the app is holding some of the most sensitive numbers in your life, which makes it worth being precise about what actually happens to that data.

Stored privately, isolated per user

Your data lives in a Postgres database on Supabase, protected by strict per-user access controls. Row-Level Security is enforced at the database itself and tied to your authenticated account, so every read and write is checked against your own user ID. In practice that means no other user can ever reach your data, even by accident. It is encrypted in transit (TLS) whenever it moves between your device and our servers, and encrypted at rest (AES-256) on the underlying storage.

Built on an independently audited platform

We don't run our own data centre, and that's the safer choice, not a compromise. CrestCast is hosted on Supabase, an established cloud platform that is SOC 2 Type 2 compliant and ISO 27001 certified, encrypts all data at rest with AES-256, and serves it over TLS. Those are the storage, encryption and authentication foundations your forecast sits on, held to standards that are independently audited rather than simply asserted by us. Row-Level Security, enforced inside Postgres itself, is what isolates your data to your own account on top of that platform.

What that rules out

• No bank connections and no payment credentials stored, ever
• Your financial data is never sold to third parties
• Your financial data is never used for advertising or profiling
• Your financial data is never sold or handed to third parties; the only people who can see it are you, and a partner you deliberately choose to share a household with
• You can delete your account and all of your data at any time

Why this matters more for a joint household model

Because CrestCast is designed to be used by both partners, it necessarily holds a complete picture of a household's finances in one place, with combined income, joint bills and shared debts all together. That concentration of sensitive data is exactly why per-user isolation and delete-anytime control matter: the two people who share a plan can see it, and nobody else can.

The short version: you get a cloud-synced forecast that both partners can see and update, stored privately behind per-user access controls, encrypted in transit and at rest, never sold or handed to third parties, shared only with a partner if you choose to, and deletable in full whenever you want.