Only you can read your desk.
What the desk holds
The numbers from your income plan, your accounts, your holdings and tax lots, and the settings you choose. Your email address, for signing in. That is all.
Where it lives
On your device, encrypted. A copy of that same encrypted file sits in your account so your phone and computer stay in step. Nobody at Corso Wealth, and nobody at the companies that host the desk, can open it. There is no key on any server.
How it is locked
Your desk is sealed with AES-256 encryption. The key is protected by your six-digit passcode, which is stretched 600,000 rounds before it is used, and by a recovery code shown once when you set up. The passcode never leaves your device. If you lose both the passcode and the recovery code, nobody can unlock the copy in your account, including us. Keep a desk file (More › Desk file › Save) as your own backup.
The desk locks itself after 15 minutes without you. Easy passcodes such as 111111 or 123456 are refused.
Statements and plan PDFs
Files you drop on Set up are read inside your browser. The PDF itself is never uploaded anywhere. Only the positions it lists are kept, inside the encrypted desk.
What we can see
Your email, and a daily count of how many times the desk was opened, a refill was recorded or this month's numbers were saved, with the app version. That is what lets your coach know the desk is being used. Balances, holdings and plan details are never visible to us.
Your coach
Your coach cannot look into your desk. Sharing is always your move: Download plan prints a one-page summary you can hand to anyone you choose, or you save a desk file and send it however you like.
Privacy view (the eye button in the top bar) hides names, dollar amounts and share counts for screen-shares and public places. It changes only what is drawn on screen; your desk file and the encrypted copy in your account are never altered by it.
Nothing else
No analytics, no advertising, no trackers, no third-party scripts. The page is allowed to talk to exactly one address, the account service, and the browser enforces that rule. Fonts and the PDF reader are served from the desk itself.
Deleting
Start over (under More) erases the desk and the copy in your account. Erase this device (under Account and passcode) clears one device and keeps the account copy. To close your account entirely, email your coach and it is removed along with everything stored under it.
Questions
Write to your coach at Corso Wealth Coaching LLC. This page describes the desk as built; it changes when the desk does, and the version is shown under How this works.