SECURITY

How we keep your money safe.

You saw the basics on our homepage. Here's the full story—what we can see, what we can't, and how you stay in control.

Want the quick version? See our Trust section →

What we see. What we don't.

Complete honesty about your information.

What we see

Your spending history

So we can spot patterns and give you advice

How much is in your accounts

So we can track your progress toward goals

The rules you set

So Pearl knows what it can and can't do

Everything Pearl does

So you can review any action, anytime

What we never see

Your bank password

We literally can't see it—Plaid handles that

Your full account numbers

We only see the last 4 digits (like ****1234)

Your Social Security number

We don't need it and never ask for it

Your real identity

Even we can't see who you are (more on this below)

PROTECTION

How we keep you safe

No confusing technical terms. Just the facts.

Double encryption

Your data is scrambled twice—we can't even see who you are

We use two layers of encryption. The first scrambles your data. The second scrambles your identity. Even our own engineers see only random characters when they look at the database—they can't tell whose data is whose.

Security audits

Experts regularly test our defenses

Every few months, outside security professionals try to break into our systems. If they find any weakness, we fix it immediately.

24/7 monitoring

We watch for anything suspicious

Our systems automatically detect unusual activity. If something looks wrong, our security team investigates right away.

Regular backups

Your data is saved in multiple places

Even if something catastrophic happened to our main systems, your information is safely backed up and can be restored.

BANK CONNECTION

How you connect your bank

We use a company called Plaid. They're the same ones Venmo, Cash App, and thousands of other apps use. Here's how it works:

1

You log in to your bank

When you connect an account, you're typing your password into your bank's system—not ours. We never see it.

2

Your bank gives us a key

Your bank creates a special key that lets us see your transactions and balances. This key can also allow certain actions you approve.

3

You set the boundaries

You decide what Pearl can do. Want it fully automated? It can move money between YOUR accounts. Want manual control? Pearl will just suggest and you execute.

4

You can cut us off anytime

If you ever want to disconnect, just tap a button. The key gets destroyed and we immediately lose all access.

Plaid connects over 10,000 banks and powers apps you probably already use.

“If Pearl can move my money, what stops someone from stealing it?”

Pearl can only move money between accounts that belong to you.

It cannot send money to other people, make purchases, or withdraw cash.

Even if someone somehow got into your Pearl account, the absolute worst they could do is move money from your checking to your savings—annoying, but not theft.

Plus, you can freeze everything with one tap. And every action Pearl takes is logged, so you can see exactly what happened.

YOUR RIGHTS

You're always in charge

These are things you can do anytime, no questions asked.

Download everything

Get a copy of all the data we have about you. It's yours.

Settings → Privacy → Download My Data

Delete your account

We'll completely erase your information from our systems.

Settings → Account → Delete Everything

Disconnect any bank

Remove any linked account instantly. We lose access immediately.

Settings → Accounts → Disconnect

Freeze Pearl anytime

Stop all automated actions with one tap. Resume when you're ready.

Main screen → Pause button

FAQ

Questions people actually ask

What if Pearl shuts down?
If we ever close, we'll give you at least 60 days to download your data. Then we delete everything—we don't sell it to anyone. This is a legal promise in our terms of service.
Can your employees see my bank accounts?
No. We use a special encryption system (AWS KMS) that scrambles your identity at the database level. When our engineers look at our systems, they see encrypted gibberish—they literally cannot tell whose data is whose or connect any information to a real person. Your identity is invisible even to us.
Do you sell my data to advertisers?
No. Never. We make money by charging 0.25% per year on what we help manage. That's it. We have zero reason to sell your information because our business only works if you trust us.
What if Plaid (the bank connector) gets hacked?
Plaid doesn't actually store your bank password—they use a special token system. So even if Plaid was breached, your login credentials wouldn't be exposed. And you can always disconnect through plaid.com/me if you're worried.
Is my data used to train AI?
No. Your personal financial data never goes into any AI training. Pearl's intelligence comes from financial best practices and rules—not from learning patterns from your private information.
How do I know you're telling the truth?
Fair question. We get audited by outside security firms who verify everything we claim. Email [email protected] and we'll send you the report.
What can Pearl actually do with my money?
Pearl can move money between accounts you own—like from checking to savings, or into your investment account. It can also execute trades within your brokerage. But it can NEVER send money to someone else, make purchases, or withdraw cash. You set the rules, and Pearl follows them.

Still have questions?

Security questions are important. We answer every single one within 24 hours.

[email protected]

Found a security problem? Let us know and we'll fix it immediately.