How this works
We would rathershow our work.
Silver Dollar holds the things a family does not hand over lightly: what is in a parent's house, when their appointments are, and what their accounts are doing. Here is what we can see, how it is handled, and what we are never able to do.
Bank connections
Read-only is a permission,not a promise.
Bank connections run through Plaid, a service many personal finance apps use. The connection Plaid gives us carries no ability to move money. That is not restraint on our part, it is the permission we asked for, and a transfer is not an action the connection can perform.
- What we receive: balances, transactions, recurring activity, and whether the connection is still healthy.
- What we never receive: your online banking password. You enter it with your bank, through Plaid, and we never see it.
- How long we keep it: a rolling 24 months of transaction history while a connection is active.
- When you disconnect: the connection is hidden immediately, we keep asking your bank to revoke our access until it confirms, and the history is deleted within 30 days.
- Who can connect one: owners and co-owners only.
Alerts are decided by fixed rules, never by AI. AI is only allowed to write the explanation afterward.
Calendars
We make our own calendarand stay inside it.
When a family connects Google or Outlook, we create a separate calendar named Silver Dollar in that account. Every event we write goes there, and it is also the only calendar we read. Your work calendar and your family calendar are never opened, changed, or copied.
- Google and Microsoft both ask for permission to your whole calendar, because neither of them offers a narrower one. We are telling you that rather than letting you discover it on the consent screen.
- Medications never leave the app, to any calendar, in either direction.
- Hiding the Silver Dollar calendar hides it. Deleting it takes everything we put there with it.
Where AI is used
AI helps.Rules decide.
AI recognizes what is in a photograph, suggests a category and a rough value, and answers questions about what your family has recorded. For owners and co-owners, that includes questions about what Financial Care is watching. It never decides that anything is wrong.
- Two providers do this work: Google's Gemini for recognition, the assistant and voice, and Voyage AI to make descriptions searchable by meaning.
- The assistant can read Financial Care to answer an owner's question, and can never change it.
- Alert explanations are built from a minimized set of facts. Merchant names, account numbers, transaction identifiers, dates, and locations are removed before the model is asked.
- No AI system decides that an alert exists, or how serious it is. Fixed rules do, and they are the same rules for every family.
Photographs
A photo of the houseshould not carry the address.
Phones write the exact location into every photo and video. Before a file is stored, we read the details we need into your family's private record and then strip the location out of the file itself.
- The stored file carries no coordinates, so it could not give away a home address even if it left our hands.
- The location stays in the database row, readable only by active members of that one family.
- This runs on our servers, on every upload, in every format. It is not something the phone is trusted to have done.
Who sees what
One family,four levels of access.
Every person who can sign in holds a role, and the role decides what they can open. Money is tighter still: it is limited to owners and co-owners, and a family can narrow it to the owner alone.
- Owners and co-owners run the family. Managers can help organize. Viewers can look without changing anything.
- A companion account is for the parent themselves: a simple, confirm-only view of one person's day, and nothing else.
- Changes to family records are written to an activity log that owners and co-owners can read, so nobody has to take anyone's word for who changed what.
- Intended recipients are not accounts. Tagging who a thing is meant for creates no login and gives that person no access.
Tagging an intended recipient records a family's intention. It does not replace your will or trust.
Getting your record out
The record is yourson any day you want it.
The family's inventory, photos and intended recipients included, can be downloaded as a PDF or a spreadsheet from inside the app at any time, without asking us. There is no step where holding your data is how we keep you.
- Download the full inventory as a PDF to hand to an attorney, or a spreadsheet to work with.
- Ask us to delete the account and everything in it, and it is gone within 30 days.
Questions we have not answered here?
Write to us. If you are evaluating Silver Dollar for a family you advise, we will walk through any of this in detail, including the parts that are still being built.
