Bank credentials never stored
You sign in on Plaid's own interface. Dough never sees, receives or stores your banking username or password.
Connect your accounts. Dough sorts every transaction, watches your budgets, tracks your investments — and tells you what changed, in plain English.
Dining is running 39% over budget with four days left — mostly eleven takeout orders in the last fortnight. Everything else is on pace, and July still closes ahead of June.
Dough asks for a connection to your bank. Here is exactly what it does with it — every line below is stated the same way in the privacy policy.
You sign in on Plaid's own interface. Dough never sees, receives or stores your banking username or password.
The access token Dough holds permits reading balances and history. There is no code path in this product that moves money.
Institution tokens are encrypted with an authenticated cipher, so a copy of the database is not a usable credential without the key.
Isolation is enforced at the query layer, not page by page — so a new screen cannot forget to apply it.
Export everything as JSON, or delete your account outright, from your own settings page. No email required to get it back.
No advertising trackers, no sale of personal information, no marketing email. The product is the product.
Ask in your own words and get an answer grounded in your own figures, not general advice. These are illustrations, written against the sample data above.
Why did I spend $620 more this month?
Three categories account for almost all of it.
The rest is spread thinly across seven categories. Overall spending is up 8% — income covered it, so savings still grew, just by less.
Can I afford a $2,400 trip in October?
Yes, and without touching investments.
That leaves roughly $240 of headroom. Tight but real — and it does not assume you change anything.
What am I actually subscribed to?
Fourteen recurring charges, $312 a month. Three are worth a look.
Dough found these by watching the ledger for repeats. Nothing here was typed in by hand.
How is the portfolio doing, honestly?
Up 6.2% this year, and more concentrated than it was.
Not advice, and Dough says so — it is your own numbers, read back to you clearly enough to act on.
Accounts, transactions, budgets, investments and the people you share money with — under a single roof, and a single account.
Every charge sorted into a category automatically, with rules you can teach when it guesses wrong. Search, filter, bulk-edit, and undo a whole import in one click.
Link banks, brokerages and crypto exchanges once. Balances, holdings and transactions refresh on their own — or on demand, when you want to see something now.
Shares, average cost, live prices and gain/loss per position — plus allocation and net-worth charts that redraw themselves after every sync.
Ask Dough anything about your own money — "why was last month expensive?", "can I afford this?" — and get an answer grounded in your actual figures rather than general advice.
Invite the people you actually share money with. Everyone in a household sees the same accounts — and no household can see another's, ever.
Set a limit and Dough watches it for you — flagging the categories drifting over before the month ends, not after.
Recurring charges found by watching the ledger rather than by asking you to list them — including the ones that quietly went up.
Amounts that do not look like your normal pattern get surfaced for a second look, before they become a statement you scroll past.
One line that goes back as far as your data does, cash and holdings together — so progress is something you can see rather than sense.
A list of transactions is a record. Dough reads the record and reports the story: the subscription that quietly went up, the category running 40% hot, the bill landing on Thursday that your balance has not accounted for.
Going over budget is a fact to work with, not a failing. Dough is warm without being cute, direct without being alarming, and he will never use fear to get your attention — which, in a product that knows what you earn and what you owe, is the whole difference.
Three steps, and the credential never passes through Dough in any of them.
The sign-in happens on Plaid's interface, against your institution. Dough is not in the middle of it and never receives what you typed.
What comes back permits reading balances, holdings and history — nothing else. It is encrypted at rest with an authenticated cipher.
Disconnecting an institution deletes the stored token. Deleting your account removes your details, sessions, API tokens and connections.
Stored only as a scrypt hash. Changing yours
invalidates every existing session and API token at once.
Signed, expiring, and cleared past their absolute lifetime — a stale browser is treated as a stranger, not as you.
Household scoping is applied in the query layer with an ORM backstop, so a query that forgets it raises instead of leaking.
Passwords, tokens, account numbers, prompts and completions are excluded at the formatter, not per call site.
Sign-in, sign-out, invitations, token issue and revocation are recorded append-only, and record events rather than balances.
No system is perfectly secure, and Dough does not pretend otherwise. The policy says the same thing in the same words.
Through Plaid. You authenticate on Plaid's own interface, against your institution, and Dough receives an access token in return — never your banking username or password. Dough uses that token to read account names and types, balances, and transaction history.
No. The connection is read-only and there is no payment, transfer or trading code path in the product at all. Dough can tell you a bill is due; it cannot pay it.
Passwords are stored as a scrypt hash. Institution
tokens are encrypted at rest with an authenticated cipher, so a
copy of the database yields nothing usable without the separate
key. Sessions expire, and changing your password invalidates every
session and API token you have.
No system is perfectly secure, and Dough does not claim otherwise. The privacy policy spells out the rest.
Whichever ones Plaid supports — thousands of banks, credit unions and brokerages across the US, Canada and Europe. Anything it does not reach, you can import from a CSV statement, and the same categorization and budgeting applies to it.
At any time, from your connections page. Disconnecting deletes the stored access token. You can also export everything Dough holds as a JSON file, or delete your account outright, from settings.
No. There are no advertising trackers, no sale of personal information, and no sharing with third parties for their own marketing. When you use an AI feature, a summary of the relevant figures is sent to Anthropic to answer that question; your prompts and its replies are not written to logs or the audit trail.
Only the people you invite into your household. That is what a household is for, and it is also the boundary — no household can read another's data, which is enforced at the database query layer rather than page by page.
This instance is invitation-only. If somebody has sent you a link, it will sign you straight into their household.
Free to create. Read-only connections. Delete everything in one click.