Trust and security

    The short version

    We are an education platform. We do not give financial advice, manage money, hold assets, or sell financial products. Your clients stay your clients. We do not send our own marketing to families invited by an advisory firm. Families receive product notifications about the lessons and features they signed up for, and nothing else.

    What we ask a family for

    Name, email, age range, and what they want to learn about. That's it.

    What we never collect: Social Security numbers, account numbers, bank logins, or balances. There is nothing in our database that could be used to move a dollar of anyone's money.

    Families can set goals and write notes inside the app. Those are private to the member. An advisor can see that a family member checked in this week; they cannot see what was written.

    Who can see what

    • An advisor sees only the families assigned to them. At a multi-advisor firm, one advisor cannot see another advisor's families.
    • A firm's data belongs to the firm. We do not sell it, share it, or use one firm's activity to help another.
    • We do not send our own marketing to families invited by an advisory firm. Families receive product notifications about the lessons and features they signed up for, and nothing else.

    How it is protected

    • Data is encrypted in transit and at rest.
    • Data is stored in the United States (US East, Ohio) on Supabase infrastructure.
    • Our infrastructure runs on Supabase, which maintains a SOC 2 Type II audit. That is their audit, not ours. We do not hold a SOC 2 report of our own, and we will say so to any compliance team that asks.
    • Access to production data is limited to the people who operate the platform.

    Education, never advice

    Every lesson, course and handout is educational. The platform does not recommend products, allocate assets, or tell a member what to do with their money. Our AI tutor is bound by the same rule: it explains how things work and hands anything that needs judgment back to the family's advisor, by name.

    If a member writes something that suggests a crisis, the tutor stops teaching and points them to real help.

    What your compliance team should know

    • Messaging and community features are off by default for advisory firms. Messages between firm staff and families are stored in the platform and are not currently sent to third-party archiving services such as Smarsh or Global Relay. Firms with communications recordkeeping obligations should either leave messaging off or confirm with their compliance team how those records will be retained.
    • We are not a broker-dealer, an investment adviser, or an insurance producer. We are a software vendor.
    • Anything can be turned off. Market commentary, community features, partner content and messaging are firm-level switches, set during onboarding.
    • We will hand your compliance team a demo account to review the platform themselves, along with a written overview of everything on this page.

    Content review

    Our client-facing material is reviewed for accuracy before it reaches a firm, and reviewed again on a schedule.

    Questions

    If your firm needs a document we have not published, ask and we will write it.