What is protected, and from whom
Two different questions live under this word. One is about strangers. The other is about your family, and it is the one this page leads with.
Within the family
Your people cannot see each other
A person on your list sees one arrangement: theirs. Not your balance, not who else is on the list, not what anyone else was promised, not your schedules, not your caps, not your main account. Your brother does not learn what your mother receives, and neither of them learns what the pot holds.
This is enforced in the product, not in a settings screen you have to find and switch on.
Repeated in full
What each side can see
| What you can see | Giving | Receiving |
|---|---|---|
| The pot balance | Yes | No |
| Who else is on the list | Yes, all of them | No |
| What others were promised | Yes | No |
| Your own arrangement | Yes | Yes — and only this |
| Every run and its outcome | Yes | Only the ones that paid you |
| Schedules and caps | Yes | No |
| The main account | Yes | No |
| Ability to ask | n/a | Yes, if the owner allows it |
| Ability to pause | Yes, anyone | No |
What each side can see, giving compared with receiving.
giving
- The pot balance
- Yes
- Who else is on the list
- Yes, all of them
- What others were promised
- Yes
- Your own arrangement
- Yes
- Every run and its outcome
- Yes
- Schedules and caps
- Yes
- The main account
- Yes
- Ability to ask
- n/a
- Ability to pause
- Yes, anyone
receiving
- The pot balance
- No
- Who else is on the list
- No
- What others were promised
- No
- Your own arrangement
- Yes — and only this
- Every run and its outcome
- Only the ones that paid you
- Schedules and caps
- No
- The main account
- No
- Ability to ask
- Yes, if the owner allows it
- Ability to pause
- No
Consent, not defaults
The things that are off until you turn them on
Automatic top-up reaches past the ring-fence into your everyday money. It is off by default, it has a cap you set, and it leaves a floor in your main account that it will not cross. Turning it on is a decision the app treats seriously and never bundles into onboarding.
- Automatic top-up
- OFF by default
- A cap on each automatic top-up
- you set it
- A floor in your main account
- you set it
- Permission to ask
- per person, off by default
- The failure notification
- on, and cannot be turned off
And the usual things
The ordinary security
Money only moves between BlackTax accounts. The pot is funded from one place — your main account — so there is no account to nominate and nothing to misdirect. Every movement carries a reference you can quote.