How your data is protected

Ample holds a detailed picture of your money. Here is how that picture is protected, in plain terms. The full statement is on the Security & privacy page.

Bank connections are read-only

Ample connects to your accounts through Plaid. When you link a bank, you sign in on Plaid's screen; your username and password go to Plaid and your bank, and Ample never receives or stores them. What Ample gets back is a token that allows reading balances and transactions for the accounts you chose. It cannot move money, make payments, or change anything at your bank.

You can revoke a connection from Ample at any time (Settings › Connections › Remove), and most banks also list Plaid under connected apps where you can revoke from their side.

Encryption

Data moves between your device and Ample over TLS. Data at rest, in the database and in backups, is encrypted by the hosting provider. Connection tokens are stored server-side only and never sent to your browser.

Access is scoped to you

Every row of your data is tagged with your account, and the database enforces row-level rules so that a signed-in user can only read and write rows tagged with their own account. Server processes that run on your behalf (the nightly sync, the scans) use a key that is never exposed to the browser.

What Ample does not do

• It does not sell your data.
• It does not share your data with lenders, card issuers, advertisers or data brokers.
• It does not take referral fees or kickbacks from any product a Move might mention.
• It does not move your money.

Ample is paid by you. That is a security property, not only a business one: there is no one else to serve.

AI features

Some features send anonymized numbers to an AI provider to draft a suggestion or fetch a public rate: category totals, a balance and rate, a bill amount. Account numbers, names and bank credentials are never included. You can turn AI-assisted suggestions off in Preferences; everything that depends on arithmetic alone keeps working.

Backups and export

You can export everything as a file at any time from Settings › Data, and you can delete your account and all its data yourself. See Export or delete your data.

The pilot

During the pilot Ample is run by a very small team, features change, and you use it at no charge. Two things follow. First, treat your export as your backup: take one when you change something you would hate to lose. Second, tell us when something looks wrong; a person reads every message and a problem you report protects everyone in the pilot.

Reporting a security concern

If you believe you have found a vulnerability or see something in your account you cannot explain, write to us at the address on the Contact page with "security" in the subject. We will acknowledge within two business days.