Version 2026-09-05 · Last updated: 5 September 2026
Meadow is a personal net worth dashboard operated by James Hammond, an individual based in the United States ("we", "us"). This policy explains what information the service collects, how it is used and protected, who it is shared with, and the choices you have. It applies to the Meadow web application and this website.
We collect the financial data you import or connect, and the sign-in identity Google provides. We use it for one purpose: to show you your own dashboard. We do not sell or share your information, we run no advertising, analytics or third-party tracking code, and we delete everything on request. Financial data is encrypted at rest and in transit, and each user's data is stored separately rather than as rows in a shared table. One person runs the service and nobody else has access to it — see Who can access your data.
Before you have an account, you may ask to join the beta using a Google Form. It collects your name and email address, asks which financial institutions you hold investing accounts at so we can tell you whether Meadow supports them, and asks which devices you would use.
Responses are stored in Google Forms and Google Sheets under the operator's own Google account. They are not written to Meadow's database and are never joined to your financial data. We use them only to decide who to invite and which institutions to support next.
Meadow has no passwords. You sign in with Google, and Google confirms your identity to us. Your Google password is never entered into, transmitted through, or stored by Meadow.
We receive your email address and basic profile information from Google with each signed-in request. We do not store your email address alongside your financial data. Stored records identify you by a random internal user ID and a one-way cryptographic fingerprint of your address; the address itself is not written to our database or to our diagnostic logs.
Depending on how you use Meadow, this may include: account names and nicknames, account types and balances, holdings and quantities, cost basis and tax lots, transaction and trade history, dividends, contributions and withdrawals, and manually entered assets such as property values. This information reaches us in one of three ways — you enter it by hand, you upload a statement or CSV file you obtained from your financial institution, or you authorize a read-only connection to an institution.
Account numbers are truncated to the last four digits before storage, regardless of source. Full account numbers are never retained.
Our servers keep short operational logs used to diagnose errors and monitor availability. These record the internal user ID, the request path, timing, and error details. They do not contain your email address, and they are not used to build a profile of you or shared with anyone.
We use the information above only to:
We do not use your information for advertising, profiling, credit decisions, lead generation, or training machine-learning models. We do not use it to market other products to you.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. There is no advertising, analytics, or third-party tracking code in the application.
Information is disclosed only in these circumstances:
There are no other subprocessors. Your financial data is not transmitted to any analytics provider, advertising network, data broker, or AI service.
Where Meadow connects to a financial institution, it requests read-only access only. The application cannot place trades, transfer funds, or withdraw money, and it does not request the permissions that would allow it to do so. This is enforced at the point authorization is requested, so the capability is absent rather than merely unused.
Connecting an account is always optional — Meadow is fully usable with manually entered or imported data. You can end a connection at any time using Disconnect in the app, which removes it at the connection provider as well and stops data flowing at once. Revoking at your financial institution instead also works, but we have measured that it does not always take effect immediately at the connection provider, so Disconnect is the reliable route. You can also ask us to remove it.
No system is perfectly secure, and we describe our limitations honestly rather than implying guarantees we cannot make. Meadow has not undergone an independent security audit or penetration test, and holds no security certification.
One person runs Meadow, and no one else has access to it — no team, no contractor, no support desk, no third party with a login to the server or the databases. We do not browse user data, and there is no product reason to.
Because the service shows you your own accounts without asking you for a key it does not hold, the operator can technically reach what is stored. That is the ordinary position for online software. Unless a product is end-to-end encrypted — which requires a key only you hold, and means nobody can help you if you lose it — whoever runs it can reach what it stores, which is why most services say their personnel may access your information. What differs between services is the controls around that access, not whether it exists.
Ours are in section 5 and are stronger than a policy statement: the tools used to run the service mask other users' figures in code, per-user isolation is verified by a test that blocks a release if it ever fails, and the encryption at rest and in transit described above protects your data against the realistic threats — a stolen or discarded disk, another service on the same machine, and anyone on the network between you and us.
We keep your information for as long as your account is active. When you ask us to delete it, we delete your financial data, revoke your access, and remove any access-request form response you submitted, and none of it is retained in an archive. Requests are actioned within 30 days, and in practice far sooner. Because each user's data is stored separately, deletion is a single complete action rather than a partial sweep across systems.
Operational logs containing the internal user ID may persist for a short period after deletion as part of routine log rotation. They contain no email address and no financial detail.
Email privacy@net-worth.xyz to request deletion.
Regardless of where you live, you may ask us to access, correct, export, or delete your information, and we will honour the request. We do not sell or share personal information, so there is nothing to opt out of in that respect. We will not discriminate against you for exercising any of these rights.
Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have these rights by statute, including the right to appeal a refused request. Contact privacy@net-worth.xyz — we do not require an account to verify you beyond confirming control of the signed-in email address.
Meadow is a personal project operated on self-managed hardware. There is no guaranteed uptime and no redundant data centre. Recent data may be lost in the event of a hardware failure. Meadow is not a system of record — your financial institution remains the authoritative source for your account information.
If we have reason to believe your information has been exposed, we will tell you directly, without unreasonable delay, and within the time the law where you live requires. We will tell you what we know and what we do not yet know, including where the cause reflects poorly on us.
Meadow is not directed to children and is not available to anyone under 18. We do not knowingly collect information from children. If you believe a minor has provided us information, contact us and we will delete it.
Meadow is operated from and intended for use in the United States, and all data is stored there. If you access the service from outside the United States, you are transferring your information to the United States.
We may update this policy as the service changes. The "last updated" date above reflects the most recent revision. If a change materially affects how your information is handled, we will notify users directly rather than relying on a silent edit.
Privacy questions and data requests: privacy@net-worth.xyz
Everything else: hello@net-worth.xyz
Full contact details are on the contact page.