How your data is handled

Your account

To keep a plan you sign in, either with a link we email to you or with Google. Your account holds your email address, and your name when you sign in with Google. With Google, the sign-in tokens Google issues are kept too, encrypted. There is no password. A cookie in your browser keeps you signed in until you sign out or the session ends. Each session also records the network address and the kind of browser it was started from.

What is kept

What you type in the chat, what you confirm in the table, your what-ifs and your check-in settings are kept on our server, linked to your account. Deleting an account deletes all of this with it. There is no button to delete your account yet.

What is sent to the language model

The chat uses a language model run by another company (Anthropic). Before anything is sent, names, employers, banks and other institutions, places, dates, ZIP codes, account and ID numbers, phone numbers, email addresses and every amount are replaced by placeholders. Messages are pseudonymized, with sensitive values kept on our servers. The model sees placeholders and rough ranges, never your exact figures, and no identifier for you. Every number you see in an answer is calculated by Goldcrest's own engine, not by the model.

The replacement is automatic and can miss things. It can miss a name typed in lower case with nothing around it that marks it as a name. You do not need to use names, birth dates or account numbers: ages and rough amounts are enough.

What is not done

Goldcrest does not connect to your bank or ask for bank passwords. The model does not save anything to your plan by itself: it can only suggest changes, which you confirm or discard in the table.

What the results are

Goldcrest is an educational modelling tool. Projections are hypothetical and depend on the assumptions shown next to them. They are not advice and not a guarantee, and the assistant can be wrong.