Usually an app introduces itself by telling you everything it can do.
The list of features. The arrows pointing up. The things that, they promise, will change your life.
Today I want to do the opposite.
I want to tell you three things Cashfulness does not do. And not because we haven't gotten there yet, or because one day we'll add them.
Three things we've decided, on purpose, never to do.
I'm doing it because I believe an app — like a person — is better understood by what it refuses to do than by what it puts in the display window.
Features get copied. Refusals don't. A refusal is a choice, and a choice tells you who you are.
The three refusals that follow have one thing in common. None of the three is a technical limitation — the "we couldn't manage it" kind. They're three choices of value. Three doors we could have opened, that many do open, and that we locked from the inside.
Let me tell you about them one by one.
One. We won't manipulate you
I'll start with the most uncomfortable, because it's the one people talk about least.
So many apps — not just finance ones — are designed to push you into doing things that, with a cool head, you wouldn't choose.
These techniques have a name: they're called dark patterns. Interface schemes built on purpose to steer your choice toward what suits whoever made the app, not you.
The big, colorful "accept all" button, and the one to say no hidden small, gray on gray. The cancellation buried at the bottom of six menus. The prompt that makes you feel guilty for refusing — "no thanks, I'm not interested in saving money." The timer ticking down to make you decide before you reason.
They're all ways of nudging your decision with a little shove you didn't ask for.
In a personal finance app, this stuff would be even more poisonous. Because it touches your money, and it touches your fears.
Think how easy it would be.
A notification built to make you anxious: "You're spending too much!", in red, maybe on a Sunday evening. You open the app with your heart in your throat — and that extra heartbeat is exactly what certain business models call "engagement."
A number that flashes to make you feel behind everyone else.
An alert that pushes you toward a product to buy, dressed up as friendly advice.
We won't do this. Ever.
Cashfulness's notifications are of two kinds only, and neither exists to hook you.
There are the general, informational notices — service communications.
And there are the personal notices, tied to a real state of your accounts: "five days to budget close, and you're on track." Useful information, at the right moment, and when needed always with a suggested solution alongside it. Never a shouted alarm. Never a "come back, we miss you."
The principle we set for ourselves is one line, and I want to write it out in full: the app never writes to you because it serves us for you to open it. It writes to you only when it serves you.
There's a deeper reason behind this refusal.
Manipulation and calm can't live in the same app.
If I push you, I stir you up. If I stir you up, I take away the very thing Cashfulness exists for. The calm side of money isn't a slogan to put on the website: it's a promise that breaks at the first notification built to make your heart race.
That's why manipulation isn't a feature we chose not to add. It's a door that, if we opened it, would bring down everything else.
Two. We won't gamify your money
The second refusal is a cousin of the first, but it has a more cheerful face. And precisely for that, it deceives more.
You know those apps that turn saving into a game?
The days in a row you stayed under budget, with the implicit promise not to break the streak. The badges to unlock. The virtual coins. The levels to climb, as if managing the household budget were a match.
The technical name is gamification: taking the mechanics of video games — points, rewards, streaks not to break — and applying them to something that isn't a game.
It seems like the opposite of manipulation, because it's colorful and gentle. In reality it's the same thing in a friendlier outfit: it exists to keep you glued to the screen.
Those mechanisms don't measure your money. They measure your presence. They reward you for coming back, not for being better off.
And they shift your attention from the number that really counts — how much what you own is worth minus what you owe — to the score the app invented.
The first number is yours. The second is theirs.
Let's take a quick example, so the difference shows.
Marco has a thirty-day streak of "budget respected" on an app like that. He's proud of that number. One evening he's tired, traveling, and to keep the streak alive he logs an expense sloppily, just to tick the box.
That gesture didn't make him a euro richer. It only protected a score that exists solely inside the app.
We don't gamify. No streaks, no badges, no points, no levels, no leaderboards — not even against yesterday's you.
If you skip a week, you lose nothing. There's no streak that resets, no castle that collapses. Your number is always there, waiting for you calmly when you come back.
Recognitions, in Cashfulness, are few and rare, and we've tied them to real facts: when you complete the reconnaissance of your wealth for the first time, or when you reach a budget you set yourself.
The difference is all there. Gamification rewards you for the behavior: you came back. We recognize the result: you understood where you are.
The deeper reason is simple, and to me it's serious.
Your money is not a game.
It's the tool with which you buy yourself time, freedom, the ability to choose. Deciding how much to set aside, whether to change jobs, how you're really doing — these are adult decisions. They deserve calm and attention, not little lights and fanfare.
I wrote a whole article on this, because there was a lot to say: why we don't gamify your money. Here it's enough to nail the point: it's a choice, not an oversight.
Three. We won't look at your data
The third refusal is the one I care about most of all. And it's also the one that departs most from the industry's habits.
Personal finance is the place where you keep the things you don't even talk about easily with friends. How much you really earn. How much you've set aside, or how little. A debt that weighs on you more than you admit.
If you even suspect that someone, somewhere, might take a look, you'll never write those numbers down in full. And a finance app you lie to by omission is of no use at all.
That's why we built Cashfulness so that we cannot look. And here a precise word matters: not looking is different from not being able to look.
"We don't look" is a promise of good will: trust us to behave.
"We can't look" is a promise of impossibility: even if we wanted to, we can't.
We chose the second, and we chose it in two ways that reinforce each other.
The first concerns who you are. When you sign up we don't ask for your name, surname, tax code, date of birth, address, or phone number. We ask for a nickname — whatever you like, even made up: "Captain," "Sail," whatever you please — an email, and a password. You name your accounts however serves you — "Bank account," not "John Smith's account."
So even someone with access to the accounting data would see a certain nickname with some accounts and some movements, but with no way to tie those numbers to the real person you are.
The second way concerns the documents you upload: statements, bills, contracts, policies. Those are the most sensitive material — full of full names, addresses, amounts.
On those documents we use a protection called end-to-end encryption: before the file leaves your phone or computer, it's turned into a block of unreadable characters. It leaves already like that. Noise arrives at our server, and noise it stays. It becomes readable again only on your device, with a key that's born on your side and never leaves it.
I'll put the consequence in the sharpest way I have.
Your documents can't be read by us who built the app. They can't be read by whoever runs the servers. They couldn't be read by an attacker who one day breached our systems: they'd end up holding unusable files.
Not because we promised to be good. Because we deliberately took away our own ability not to be.
There's an honest price, and I'd rather tell you myself: if you lose your password and also the recovery words for your key, those documents become unreadable forever, for us too. There's no "I forgot everything, send me my files back" button. It's the flip side of a lock that has no spare copy in our hands.
And there's a consequence that goes beyond the technical: we don't profile you. We don't analyze your behavior to sell you something, we don't build a commercial identikit of you, we don't pass your numbers to third parties.
Not because we're kinder than the others. Because we decided your data isn't our product. Our product is the tool. Your numbers stay yours.
On how these two levels work together — the nameless identity and the encrypted documents — I've written separately, because it deserves the room: radical privacy, two levels and one promise. Here the sentence that sums it all up is enough: Cashfulness doesn't know who you are, doesn't read your documents, doesn't understand your numbers. Only you hold the keys.
Why a manifesto in the negative
Maybe you're wondering why I chose to introduce Cashfulness to you starting from three "no"s.
Because the "no"s are the hard part.
Adding a feature is easy, and usually it suits whoever makes the app. One more nudge keeps people glued. One more streak brings them back. One more piece of data can be resold.
Saying no to all this costs something. It means giving up levers that work — that really work, which is why they're everywhere. It means building a product that's a bit quieter, a bit less "sticky," that at first glance seems to do even less than the alternatives.
We accepted this, because there's a thread that holds the three refusals together.
We won't manipulate you, because we want you to decide with your head, not with the gut we stirred up.
We won't gamify your money, because we want you to look at the real number, not a score we invented.
We won't look at your data, because we want you to write the truth, without the doubt that someone's peeking.
The thread is always the same. It's the difference between a tool that works for you and a service that works on you.
Almost everything in today's digital world works on you: it captures your attention, shapes it, resells it. Cashfulness wants to be on the other side. A neutral tool, that gives you your coordinate — your fix, meaning how much what you own is worth minus what you owe — and then steps aside.
We don't sell you financial products. We don't take commissions on what you do with your money. We have no hidden interest in the number you see.
We give you the coordinate. The course, you choose.
These three refusals won't change with the app's next version. They're not a phase, they're not a launch promise to disown when the pressure to grow at all costs arrives.
They're the floor. And a floor, if it's well made, you don't touch again.
I wrote them here, in black and white, for this reason too: so that you can hold onto them, and hold me to account if one day I should betray one of them.
It won't happen. But it's right that the promise be written, not only said.
— Vittorio