Privacy notice (beta)

This website sets no cookies, runs no analytics and loads nothing from other companies. If you ask for early access, we keep your email address and the day you asked, only to write to you about Lamppost. They are stored with our web host, Cloudflare. To have yours removed, email hello@lamppostmoney.ai.

What stays private.

Your plan is encrypted on your own device, with a key only your household holds. We never see a balance, a holding or a key unless you choose to send it to us.

What leaves your device, and when.

Some of these are for features that are not in the app today. Each one is on this list before it reaches the app.

• Prices for your holdingsTo value your plan, the app looks up prices each time you open it. It sends symbols, such as VTI, and the dates it needs, from your Mac to a market-data service, not through us. It never sends how many shares you hold or what they are worth.
• Questions to the assistantWhat a question needs goes to our AI provider, Anthropic, under our account. It’s deleted within 30 days unless it’s flagged for misuse or the law requires keeping it.
• Email with your chief of staffBriefs and your replies pass through our mail service, where we can read them on their way. That’s why briefs never carry amounts or account names.
• The daily check-in, while your brief is onYour Mac tells our service once a day that it is running, and sends nothing else.
• The usage reportCounts only, such as which screens were opened. No words you wrote, no figures, and no one’s name. You can turn it off in Settings.
• “Report this”Only when you press Send, after you see exactly what goes.
• Typed questions (beta, off by default)Shared with us only if you turn it on, with numbers and identifiers blanked.
• A bank’s nameOnly if you choose Send on a statement no reader recognises. The app doesn’t send it right away. It sends it on its own, at a random time some weeks later. That time is only a rough guide to when your import was refused. While few households use the app, it can still be enough to point to yours. Nothing in what is sent says who you are, though like any connection it comes from your Mac’s address. We keep a count for each bank name, and nothing else: not who sent it, not the address it came from, and not when it came.

Who runs Lamppost.

Lamppost is a trade name of Surrey Street Partners LLC, a California company. Surrey Street Partners LLC is responsible for this website and for the email addresses collected through early access.