Security at debtbrak
Last Updated: August 27, 2026
debtbrak is a service of RIZZMONEY LLC. Protecting financial information is a core part of how we design and operate the service. This page summarizes our approach without exposing details that could weaken those protections.
At a glance
- Connected financial accounts are read-only.
- debtbrak cannot move money or initiate a payment.
- Mission verification uses posted transactions and connected balance changes.
- The Debt Coach cannot access another user’s conversation or financial data.
- We do not sell connected financial data or use it for advertising.
Read-only financial connections
debtbrak uses Plaid to connect supported accounts that you choose. You complete the connection through Plaid or your financial institution; debtbrak does not ask you to send us your bank username or password. The connection lets debtbrak retrieve supported account, liability, balance, and transaction data. It does not authorize debtbrak to transfer funds.
A payment is not treated as verified merely because it was scheduled or is pending. The service relies on posted connected-account evidence and attributes a payment to a specific debt before crediting it to a mission.
Access and data controls
User access is authenticated, and sensitive operations are enforced on the server rather than trusted to the app alone. Access to user data is scoped to the authenticated account. Debt Coach conversations are read-only from the client, while responses and conversation records are written by the backend.
We validate and limit requests that cross into our backend, rate-limit sensitive features, and use replay and duplicate-processing protections where repeated messages could affect subscriptions or financial records. Data is encrypted in transit using HTTPS.
Debt Coach boundaries
The Debt Coach receives only context selected as relevant to your question. It cannot move money, edit transactions, open or close an account, access credit bureau reports, or state, estimate, or predict a credit score. We do not opt Debt Coach content in to train OpenAI’s general-purpose models. Learn more on our AI Transparency page.
Your controls
You can disconnect supported financial connections and request account deletion through the app or by contacting us. Disconnecting stops new data from that connection. Account deletion revokes connected-account access and removes connected accounts and liabilities, subject to the limited records or historical data we may retain as described in our Privacy Policy and as permitted or required by law.
Report a security concern
If you believe you found a security issue, email contact@debtbrak.com with a clear description and steps to reproduce it. Please do not include passwords, access tokens, full account numbers, or other unnecessary sensitive data. We will review good-faith reports and respond as soon as reasonably possible.