A household cash flow planner
Money moves in waves. Know the shape of your year, and move with it. Your household plan on every device you own — phone, tablet, laptop, no account, no email — and nobody can read it but the two of you. Not us. Not the server. Not anyone.
One-time $99. No subscription, ever. Nothing to sign in to.
Rent lands on the 1st. The car payment lands on the 14th. Insurance hits on the 22nd. You already know all of it — you just can't see how it stacks up against the money that's actually coming in.
Spreadsheets go stale. Budget apps want your bank login. Neither one tells you that the balance dips to $43 on Thursday week and comes back on Friday.
HearthPlan rolls your paychecks and bills forward 180 days and shows you the dip before it happens — not after.
Your balance, your paydays, your regular bills. Or paste in a bank export and it reads the bills out of it, on your own device.
Every future balance, day by day. The tight weeks are marked before you get to them, with a cushion you set yourself.
She updates it at the kitchen table. You see it on your phone. No accounts, no invites, no syncing buttons.
HearthPlan seals your plan with a passphrase that never leaves your phone. What travels between your devices is a locked box. The server that carries it holds no key — it could not open it if it wanted to, and neither could anyone who took it.
That is not a policy. It is arithmetic. Nothing in the middle can read anything, because the key never goes there.
HearthPlan never connects to a bank. You download a CSV export from your bank yourself, once, and it is read on your own device. The forecast covers 180 days and the tight weeks are marked before they arrive. Goodbudget and EveryDollar also avoid bank logins, but neither syncs one shared plan between two people.
HearthPlan is built for exactly that. Two people, one plan, no bank login, no account, no email. Both phones pair by typing the same passphrase, and changes appear on the other phone within seconds. Honeydue is also aimed at couples, but it asks for bank access.
Your passphrase turns into an encryption key inside your own browser. The plan is locked before it leaves the device and unlocked only after it arrives on the other phone. The server out there in the middle stores a sealed box and a version number. It holds no key, and its source code contains no decryption of any kind.
$99 once, for the household. No subscription and no second year. For comparison: YNAB is $109 a year, Monarch $99.99 a year, Copilot $95 a year. Prices checked November 2026.
| Bank login? | One shared plan? | Price | |
|---|---|---|---|
| HearthPlan | Never | Yes, encrypted | $99 once |
| YNAB | Yes | Yes | $109/year |
| Monarch | Yes | Yes | $99.99/year |
| Copilot | Yes | No | $95/year |
| Goodbudget | No | Shared envelopes | Free tier |
| Honeydue | Yes | Yes | — |
Prices checked November 2026. A dash means we have not confirmed it.
Yes. The planner runs inside your browser and every save is instant and local. Syncing happens afterwards in the background, and if there is no connection it fails quietly and tries again.
The plan becomes permanently unreadable. There is no reset and no recovery — the same property that stops anyone else reading it. Write it down somewhere that is not a phone.
No subscription. No per-device charge. Nothing to cancel, because nothing recurs.
That opens your email app and sends us a line. No account, no form, nothing tracked. We'll write once, when it's live — and never again unless you ask.
HearthPlan is not finished. It runs, it forecasts, and it reads real bank exports today. The encrypted sync between your devices is being built now. If you want to know when it's ready, the button above is the whole commitment.