The Case for Upload-Only Bookkeeping

Your financial records are some of the most revealing data you generate. Every purchase, subscription, and payout traces your habits, your relationships, and where your money actually goes. So it is worth asking what a finance app has to take from you before it can help — and whether it needs that much at all.

The standard approach is to hand over your online-banking login so the app can pull a live feed. Magpie is built the other way around. Here is the case for upload-only bookkeeping, and how Magpie is designed to keep you in control of what it ever sees.

You hand over a statement, not your bank login

Most finance tools connect through an aggregator that holds your banking credentials and reads your accounts on a schedule. That is a standing key to your money, sitting on someone else’s server.

Magpie does not ask for it. You export a statement from your bank — a PDF, CSV, OFX, or QIF — and drop it in. You decide which accounts and which months Magpie ever sees, and nothing arrives that you did not hand over. There is no login to leak and no always-on connection to your accounts.

An optional read-only sync is on the way for people who want it — read-only by design, so it can view transactions and never move money — but it will always be a choice, not the price of entry.

A statement is a cleaner record than a live feed

Upload-only is not only safer; it reads better. A statement is the bank’s own finalized record: settled amounts, real dates, nothing pending. Live feeds are prone to duplicates, dropped rows, and transactions that change after they post. Parsing a statement gives Magpie a clean, complete month to work from — which is exactly what you want when the job is finding the money you are quietly losing.

Read-only, encrypted, never sold, never trained on

Once a statement is in, Magpie reads it read-only: it can look, never write back to your bank or move a dollar. Everything is encrypted in transit and at rest. We do not sell your data, and we never use it to train AI models. Your ledger is yours, full stop.

The Magpie agent, built on Anthropic’s Claude, reads your transactions to flag price increases, dormant subscriptions, idle cash, and deductible spending — and to answer questions you ask in plain English. It reads and summarizes; it never writes anything back to your accounts, and it never shares your data.

You can take your data and leave

Privacy is not only about who can see your records; it is about being able to walk away with them. Export everything as CSV or JSON whenever you like, and delete your account and its data on request. When it is gone, it is gone for good — no retention you did not ask for.

Bookkeeping should leave you feeling in control of your money, not exposed by it. Asking for a statement instead of your bank login — read-only, encrypted, never sold — is the smaller, more honest footprint. That is the design Magpie is built on.