More than a budget.
Your roadmap to freedom.
Trupence is a private wealth command center designed for long-term freedom, not just monthly budgeting. Securely aggregate your checking, savings, and investments, track rollover budgets, and forecast your exact timeline to financial independence.
Designed for early retirement.
Most tools show you where your money went this month. Trupence shows you where your wealth is compounding over the next thirty years.
Overview Workspace
Your financial command center. View your real-time net worth, track aggregate cash flows, and monitor asset allocations across checking, savings, brokerage, and real estate accounts in a single workspace.
Unified Ledger
A single synchronized repository of all your financial activity. View and review transactions from all connected institutions. Search, apply custom tag filters, set category overrides, and analyze transaction details seamlessly.
Rollover Budgets
Budgets that scale with your life. Set monthly spending targets for custom categories that automatically roll over positive or negative balances to the next month, maintaining long-term accountability.
Planning & Projections
Model your timeline to early retirement. Project compound growth rates, calculate safe withdrawal ratios, and model social security or pension benefit gaps to see when you will achieve financial independence.
Secure Aggregation
Connect checking, savings, brokerage, and liability accounts via Plaid & Finicity APIs into a single synchronized ledger.
Wealth & FIRE Planning
Plan budgets with dynamic category rollovers and model your timeline to financial independence with advanced forecasting tools.
AI-Powered Advisor
Converse directly with your financial ledger inside a private chat window to review spending behaviors and uncover insights.
Security built into every layer.
Your financial data is sacred. Here is exactly how we protect your bank connections, database storage, and authentication identity.
Trupence connects to over 12,000 financial institutions using institutional aggregation partners such as Plaid and Finicity via secure OAuth 2.0 direct-tokenization protocol links.
When linking an account, you log directly into your financial institution's official site in an isolated popup window. Once authenticated, your bank issues an encrypted, read-only API access token to Trupence.
No, absolutely not. All API connections authorized with Trupence are strictly read-only.
Our integration scope is explicitly restricted to retrieving transaction history and current account balances. Trupence has zero money-movement permissions, transfer capabilities, or debit authorizations. Your money remains untouched and securely managed inside your banking institutions.
Trupence enforces multi-layered encryption across all stored data:
- Encryption at Rest: All database storage volumes, backups, and server snapshots are encrypted using AES-256 (Advanced Encryption Standard with 256-bit keys).
- Encryption in Transit: All communication between your browser, our servers, and banking endpoints uses TLS 1.3 encryption with strict HSTS enforcing modern cipher suites.
- Field-Level Encryption: Sensitive fields (such as account numbers and tokens) are individually encrypted before database write operations, with encryption keys managed by Cloud Hardware Security Modules (HSM).
Trupence utilizes strict Database Row-Level Security (RLS) and cryptographically bound tenant isolation.
Every database query executed on behalf of a user is automatically scoped to their verified session identity. No query can read or modify data belonging to another tenant ID, guaranteeing zero cross-account data leakage.
Never. We maintain a zero-tolerance policy against selling user data.
Unlike free budgeting tools that monetise by selling anonymised transaction data or targeted financial ads, Trupence is funded purely by subscription revenue. You are our customer—not the product.
Trupence provides modern, frictionless identity management with support for:
- Google OAuth 2.0 (OpenID Connect): Sign in instantly using your Google account with PKCE (Proof Key for Code Exchange) protection, leveraging Google's world-class account security without sharing your password with us.
- Passwordless Magic Links: Receive secure, one-time login links delivered straight to your email.
- Email & Password: Salted password hashes using Argon2id (the winning algorithm of the Password Hashing Competition) to prevent brute-force attacks.
Yes. Account security is our highest priority. We support multi-factor protection, including:
- Authenticator Apps (TOTP): Time-based tokens via Google Authenticator, 1Password, Authy, or Bitwarden.
- FIDO2 / WebAuthn Hardware Keys: Physical security keys (e.g. YubiKey) and biometric authentication (Touch ID, Face ID, Windows Hello).
Trupence uses short-lived JSON Web Tokens (JWTs) delivered inside encrypted, HttpOnly, Secure, and SameSite=Strict cookies.
Because cookies marked as HttpOnly cannot be accessed by client-side scripts, your session tokens are completely immune to Cross-Site Scripting (XSS) extraction. You can also view all connected browser sessions and terminate them remotely from your Account Settings.