For everyone.

Privacy

What C0MP0UND keeps about you, why, and what you can do about it. Dated 28 October 2026.

C0MP0UND is made by BellaMadison Co. LLC, in Texas, USA. We keep the family's records. We do not hold, move or send money.

What C0MP0UND stores, and why

• Your email and a scrambled form of your password. To let you sign in, send invites and reset links. We never store the password itself.
• Your name and your role in the family.
• Your date of birth. So seats and ages work: people turn 18 on their own, and no one under 13 can have an account.
• A phone number, if the family adds one.
• The family's records. Pay, bills, spending, shares, votes, cash asks and messages inside the family.

We use the app for nothing else. There are no ads, and no analytics or crash trackers are built into it. This website has no accounts, no cookies and no trackers of its own.

The records belong to the family

Everyone in the family sees every dollar. What is recorded is the family's, not just yours, and every member can see it. The one exception: a financial account you link yourself stays private to you.

We never sell spending data

No one's spending data, and no family's, is sold. Not now, not later. This is rule 26 of the family rules, and the only way C0MP0UND earns is subscription.

Linking a financial account

This is off by default and is not switched on in this version. If it is switched on later, you choose whether to link, and a provider handles the connection. It would read your account names and last four digits, the name of the institution, your transactions, your repeating bills and, where available, your credit cards. It cannot move money.

The key that lets C0MP0UND read your account is stored sealed with AES-256-GCM, never in plain form. When you unlink an account, or leave the family, C0MP0UND tells the provider to end access and wipes the stored key.

The AI guide

The guide answers when you type "ask" in Chat. It is off until it is switched on, and answers "not switched on" until then. When it is on, your question and a read-only summary of the family's numbers (the Pot, the Floor, goals, milestones) are sent to Anthropic, the company that runs the answering model. Names and logins are not in the summary. The guide returns text only. It cannot vote, pay, approve or change anything.

How long we keep things

• Sign-in lasts 7 days, then you sign in again. Signing out everywhere ends every sign-in at once.
• The family's records stay while the family exists. We have not set an automatic expiry on them.
• When you delete your account, what goes is listed below. A family cannot be deleted from the app; closing one is handled by freezing it and exporting the records.

Download your data, or delete your account

Both are in the app. Open Mine, then find Your data.

1. Download my data gives you a copy of what C0MP0UND holds about you: your member record (not your password), entries about you or made by you, your cash asks, your votes, your linked accounts (last four digits and name only), and your Trust shares.
2. Delete my account asks you to confirm, then closes your login.

What goes: your email, password, every sign-in, phone, date of birth, account links, unused invites and reset links, and your open votes.

What stays: your name, and the family records that carry it: entries, votes, cash asks and Trust shares. Everyone sees every dollar, so the record belongs to the family, and those rows point to your name.

Deleting is refused in two cases: you are the last keeper with no one to take over (name the next keeper first), or you hold a Trust seat (the Trust has to end it first).

Children

No one under 13 can sign in or have an account. The app checks the date of birth before an account is made.

Contact

Write to [SUPPORT EMAIL]. BellaMadison Co. LLC, Texas, USA. Changes to this page are announced in the app.