Read & write is built so that an AI mistake, or a trick hidden in some text, can't change your data on its own.
- Beth only proposes. Its tools can't save anything. A change is saved only when you tap Confirm on the card.
- The card comes from Beyond Payday, not from Beth. Our server looks up the records, works out the before and after values and the money impact, and signs the change so it can't be altered before you confirm.
- Deletes are double-checked. Beth must list them in the chat and get your "yes" in a new message first, and the card needs a second tap that names the count. Adding or changing several items is one card that names every item, saved with one tap. Removing a change from your SHTF plan, and deleting a scenario or removing a change, added item, or older purchase from a What-if scenario, are double-checked the same way.
- Your permissions still apply. Beth can only propose changes you're allowed to make yourself. Child accounts can't use Beth.
- Stale cards are refused. If a record changed after the card was made, nothing is saved and Beth has to ask again. Cards expire after 15 minutes.
- Everything is logged. Each confirmed change and undo is recorded, and most changes can be undone for 24 hours. These records are kept for 90 days, then deleted, and are deleted right away if your household's account is deleted. Our staff can see what a change was only if the account owner approves a time-limited support access request.
- You can switch back to Read-only in Settings anytime.