Revenue tracking without handing over your data

Updated 2026-08-04

Almost every revenue analytics tool is a hosted web application. That architecture has a consequence people rarely think through: the vendor holds your credentials and a copy of your revenue data.

This is not a scandal. It's how web apps work — to render a chart when you open a browser, the server needs the data. But it's worth understanding what you're agreeing to.

What a hosted tool necessarily knows

Your total revenue and its trend
Your customer count and what each pays
Your churn rate and growth rate
Often customer email addresses
Your API credentials, usually encrypted at rest

Why it might matter

Competitive disclosure. Your revenue is one of the more sensitive facts about your business. A vendor's employees can generally see it, and vendors have been known to publish aggregate benchmarks derived from customer data.

Breach surface. A database holding thousands of founders' payment credentials is a high-value target. Their incident becomes your disclosure, regardless of how careful you were.

Corporate change. Companies get acquired. The privacy policy you agreed to is not necessarily the one that governs your data in three years. ProfitWell was independent, then part of Paddle — a company that also sells billing services.

Regulatory reach. Data on a server is subject to subpoena in that server's jurisdiction.

When it genuinely doesn't matter

Being fair: for a great many founders, none of the above is a real problem. If you're building in public and tweet your MRR anyway, the confidentiality argument is moot. Free tools like ProfitWell and ChartMogul are genuinely good, and "a company knows my revenue" is a perfectly acceptable trade for capable analytics at no cost.

The point isn't that hosted tools are wrong. It's that this should be a decision rather than something you discover later.

The alternative architecture

A tool that runs entirely on your device:

Credentials stored in the device's secure enclave — the iOS Keychain
The app calls Stripe, Lemon Squeezy, PayPal directly from the phone
Results rendered locally
No server involved at any point

The vendor cannot see your revenue because the data never passes through anything they control.

The honest trade-offs:

No background sync. Without a server polling on your behalf, data refreshes when the app runs. Push notifications need a relay that forwards events without reading them.
No web dashboard. There's no server to render one.
No cross-device sync. Keys are on one device by design.
You manage the credentials. No "connect with OAuth" convenience.

That's a real cost. It buys you being the only party who knows your numbers.

How FRGMNT is built

No backend database. No account. Read-only keys in the device Keychain, used to call each platform directly. Wipe everything from the Vault whenever you like.

The architecture and its limits are described in why FRGMNT has no backend.

Choosing

You care most about	Use
Free, capable analytics	ChartMogul or ProfitWell
Deep cohort and churn analysis	Baremetrics or ChartMogul
Nobody else holding your revenue data	A device-local tool
Multi-platform aggregation	FRGMNT

Frequently asked

Do revenue dashboards store my financial data?

Hosted ones necessarily do. To show you a chart when you open a browser, a web tool must hold your credentials and typically a cached copy of your revenue data on its servers.

Is there a revenue tracker that doesn't store my data?

Yes — tools that run entirely on your device and call each platform's API directly. FRGMNT works this way: keys live in the device Keychain and there is no backend database.

Why does it matter if a company can see my revenue?

Depends on your situation. It is a competitive disclosure, it creates a breach target, and the data can outlive the company through acquisition. For many founders the convenience is worth it — the point is to choose deliberately.