There's a moment I know well, because people describe it to me often.
It's when someone opens their accounts for real, for the first time. All of them together. What they have, what they owe, no more dancing around it.
And before even looking at the number, a thought passes through.
"I hope nobody sees this."
Not "I hope the number is high". That comes after.
First comes the fear of being watched.
Usually, when privacy comes up in an app, the talk is about data. Servers, passwords, encryption. Technical things, important things, which I've written about elsewhere.
Today I want to talk about the other half of privacy. The half that doesn't live in the servers.
The half that lives in the gut of whoever opens the app.
The real fear isn't failing. It's being seen failing
Let me draw a distinction, because I think it's the heart of it all.
Failing is part of life. A bad month, a debt that weighs on you, a project that didn't work out, savings thinner than you'd like. It happens to everyone. We know this.
But there's a second thing, and it hurts far more than the first.
Being seen while we fail.
It's not the same fear. It's another one — older, more social. It's the fear of judgment. The one that makes us lower our voice when, at dinner, someone asks "so how much do you make?". The one that keeps money, in so many places, the last true taboo — more than sex, more than health.
We tell ourselves it's a matter of upbringing, of discretion. Partly it's true.
But underneath, often, there's something more naked: the fear that if others saw our real numbers, they'd think we weren't capable.
And that fear doesn't wait for others.
It switches on even when the only one who could look is a tool. An app. A piece of software.
Why a finance app touches exactly that nerve
Think about what a personal finance app usually asks of you.
It asks you to put in there the things you don't willingly discuss even with the people who love you.
How much you really earn, not how much you let people believe.
How much you've put aside. Or how little.
That debt you carry around and hoped you'd already closed.
The purchase you're a bit ashamed of, that you'd make again but would rather not have to explain.
They're data, on paper. In practice they're pieces of you.
And then something happens that I've seen many times, and felt myself.
You download the app. Maybe you even open it. Then, at the moment of writing down the real numbers, you stop.
Not because you're lazy.
Because, deep down, writing those numbers somewhere is like saying them out loud. And saying them out loud, when you fear judgment, is the last thing you want to do.
So the app stays empty. Or you fill it halfway, with the nice numbers and not the uncomfortable ones.
And a finance app filled halfway is useless. Worse than useless: it gives you the illusion of seeing, while you're looking only at the part you like.
You probably arrive with a few scars already
I've written a whole article about this, so here I'll keep it short.
Almost nobody comes to a personal finance app as a serene, curious visitor. You come to one after a few attempts gone wrong: the spreadsheet abandoned in February, the notebook given up on, the "easy" app that counted your coffees but never told you where you actually stood.
I have a name for those attempts: whoever comes aboard has already been shipwrecked once.
And every shipwreck leaves the same thought under the skin: "I'm the one who isn't capable."
So. If you already start with that thought, the idea that an app might now record your incapacity — see it, file it, maybe show it to someone — doesn't invite you to try again.
It invites you to close the app and think about it no more.
Shame, here, is not an emotional detail. It's a practical wall. It's the number one reason people never look at their own accounts.
And a wall like that you don't knock down with one more feature. You knock it down by removing the eye the person fears.
What we removed, on purpose
When we thought about Cashfulness, we had this in front of us from the very beginning.
Protecting the data wasn't enough. We had to remove the feeling of being watched.
They're two different jobs. The first is technical. The second is psychological. We took on both, and the second one runs through very concrete choices.
The first: we don't ask who you are.
To use Cashfulness you sign up with a nickname. Whatever you like — "Captain", "Sail", any invented name — plus an email and a password.
We don't ask your first name. We don't ask your last name. No tax code, no date of birth, no address, no phone number.
Put like that it sounds like a bureaucratic detail. It isn't.
It means the numbers you write inside the app aren't attached to the real person you are. They're the accounts of a nickname. You know your life is behind them; for the system, it's "Captain" with some accounts.
It's not anonymity to hide from the world. It's anonymity to lift the weight off you while you write.
There's an enormous difference between writing "I have 4,000 euros of debt" under your full name, and writing it as a coordinate of a boat named whatever you want.
The numbers are the same. The weight is not.
And documents? There the lock is even tighter
There's a second level, for the most delicate things.
Inside Cashfulness, if you want, you can upload documents: a bank statement, a utility bill, a contract, an insurance policy. Heavy stuff, full of your data.
Those documents are locked on your device, before they even leave it. The key is born from you and never leaves your phone or your computer.
On our servers, those documents are a block of digital noise. Unreadable.
We who built the app cannot read them. Whoever runs the servers cannot read them. An attacker who someday broke into our systems could not read them.
This is the technical part, and it has a name — end-to-end encryption — about which I've written a separate article, jargon-free, because it deserves its own space.
Here I care about something else.
I care about what that lock means for the gut, not for the servers.
It means that the most embarrassing document you could upload — the bank statement from the worst month of your life — will be seen by no one. Literally no one but you.
Not because we promised not to look at it.
Because we removed from ourselves, on purpose, the possibility of looking at it.
"Not even us": the part that weighs the most
I come to the point that, in my view, makes the difference between a privacy promise that reassures and one that truly sets you free.
Many apps tell you: "your data is safe, we won't give it to anyone".
That's a promise aimed outward. At others: advertisers, companies, bad actors.
But shame, as I said, doesn't wait for others. It switches on even in front of the tool alone. So the promise that really counts is a different one, and it's aimed at ourselves — at the people who built the app:
we don't judge you. We can't. And above all, we don't want to.
There is no one, anywhere, on our team looking at your accounts and thinking something about you.
There is no system that, behind the scenes, gives you a grade, puts you in a bracket, compares you with everyone else's average to tell you where you rank.
No notifications arrive to scold you. No red screens, no "you're spending too much!", no little voice moralizing. The few things the app writes to you are measured and at your service — and when there's something worth looking at, it tells you calmly and, where possible, with a way out.
There's no "good saver" score to climb, no medals, no leaderboards. That stuff — they call it gamification — turns your money into a report card. And a report card is exactly the judging eye, brought back into the app through the back door.
Cashfulness doesn't give you grades.
It gives you a coordinate.
A coordinate doesn't judge you. It only tells you where you are.
Why it's also an ethical matter, not just a psychological one
I could stop at the psychology: removing shame gets you to use the app, using the app gets you to see your accounts, seeing your accounts gives you calm. All true, and it would be enough.
But underneath there's an ethical choice, and I want to state it explicitly.
An app that sees your numbers and knows you by name has power over you. It can sell you something at just the right moment. It can push you toward a product because it profits from it. It can, even just, make you feel observed — and people who feel observed spend, choose, live differently.
We don't want that power.
Not because we're better than others. Because a power like that, sooner or later, someone uses. And the only serious way not to use it is not to have it.
That's why we don't sell financial products and take no commissions on what you do with your money. The number you see earns us nothing, in either direction: high or low, to us it's the same.
There is one thing, though, that I want to tell you before you find it out on your own, because transparency counts for little when it arrives late.
There are, and there will be, links to savings opportunities — utility-bill comparisons, services that cut what you already pay for things you already have. If you follow one of those links and end up signing up for something, we may receive a fee.
I'm writing it here, in plain sight, rather than at the bottom of a terms page.
So the right question is: isn't that exactly the power I said we didn't want?
No, and the whole difference fits in one line: your data does not leave here. Ever. To anyone.
We don't send your numbers to whoever is on the other side of the link. We don't tell them what you spend, what you have, which accounts you keep. We don't pass on your name — which, for that matter, you never gave us.
The link is a signpost, not a revolving door. It sits there; you decide whether to look. If you follow it, you land on a site that isn't ours, and it's you who enters your details, if you want to, knowing who you're giving them to. If you don't follow it, nothing happened and nobody recorded it.
That's the line we don't cross: earning by showing you something is one thing, earning by selling you is another. The first we do in broad daylight. The second we don't — and that's not a promise about our behavior: it's that your data simply isn't there to be sold.
Removing from ourselves the possibility of judging you and of profiting from you is the same choice, seen from two sides.
From your side it's called dignity: your numbers are yours alone.
From ours it's called honesty: we tied our own hands before we could do wrong.
An evening with Marco
Let me give an example, which is clearer than a thousand arguments. The details are invented, but I've seen the scene dozens of times.
Marco is 41. From the outside he looks fine: a job, a family, a house. Inside, about money, he has a knot he hasn't untied in years.
He has 9,000 euros in his account and doesn't quite know whether that's a lot or a little. He has a mortgage, a car loan, and two or three small installments he prefers not to count together, because counting them together makes him anxious.
He tried an app, once. When the moment came to write down the real debt, he closed it. He told himself "I'll deal with it later". He never dealt with it.
The point wasn't the number. The point was that writing it down felt like an admission. Like confessing to someone: "there, I managed badly, here it is in black and white".
That evening, with Cashfulness, something different happens.
He signs up as "Marco41" — not as Marco Rossi. He starts laying down the pieces: the account, the remaining mortgage, the car loan, and yes, the three small installments too, because in there nobody sees them anyway.
He writes them all.
For the first time in years, he puts them in the same place. And while he writes them, there's no little voice scolding him, no red flashing, no feeling that someone, somewhere, is taking notes on him.
There's only a number that, slowly, takes shape.
In the end his net worth is lower than he hoped. But it's not the blow he feared.
It is, strangely, a relief.
Because the true number, even when it's smaller, weighs far less than the fog that was there before. And because Marco, at last, could look at it without anyone watching him while he did.
That evening Marco didn't fix his finances. That will take time.
He did something smaller and more important: he stopped being afraid of opening them.
The point, in the end
The radical privacy of Cashfulness — the nickname, no first or last name, the documents we cannot read, no judgment, no report card — is usually told as a technical and ethical matter. It is. I've written the full picture in the privacy pillar, if you want both levels in full.
But the reason we cared this much is more human than that.
It's that you cannot be calm with your money if you're afraid of your money.
And often you're not afraid of the money itself. You're afraid of what others — or a tool, or you yourself in the mirror — will think of you when the numbers are there, uncovered.
Removing that fear is not an extra service. It's the condition for everything else to work.
Your numbers are yours alone.
Nobody judges them.
Not even us.
And from there, at last, you can look at them.
— Vittorio