Your desktop and your phone can share one notebook — a snapshot entered on one shows up on the other. It's opt-in, and it's not the default: WorthOS works completely offline without it.
Turn on Cloud sync from Settings, sign in with a one-time magic link (no password to create or remember), and your notebook syncs to a self-hosted server — stored data is encrypted at rest, and the connection itself runs over HTTPS. Enter a snapshot on your desktop; it's there on your phone next time you open the app, and back the other way.
It's a Supabase instance we run ourselves, not Supabase Inc.'s cloud. Row-level security restricts every account's data at the database layer, so no one else can read your rows — including us, running a query without your account credentials.
Your email address (it identifies your account), plus the same fields you already enter locally — assets, liabilities, goals, income, debts, and every saved snapshot. Cloud sync moves your notebook between your own devices; it does not connect to a bank, brokerage, or financial institution, and every number in it is one you typed in yourself.
Delete your account from Settings → Account & sync (“Delete account & cloud data”) and every server-side copy — your worth map, snapshots, and account — is removed permanently; your local browser data on that device is cleared at the same time. Signing out, rather than deleting, just ends that device's sync session.
The default is still local-only
If you never turn on Cloud sync, nothing about how WorthOS runs changes: your notebook stays in your browser's storage, on your device, and nothing about it ever leaves.
You can always turn sync on later — starting a snapshot today doesn't commit you to anything.