Asking for your calendar, your location and your spending alongside your health data is a serious ask. We built for that before we built the features.
Every Connection is opt-in, one at a time. Link what you want, skip the rest, cut any of it off in a tap.
No ads, no selling, no third-party analytics on your health. A product that knows this much about you cannot also be funded by advertising, so it isn't.
Export all of it whenever you like, including the derived signals we computed for you. Your history is portable, not held hostage.
Spending is one of the strongest life signals there is — it knows when you travelled, when you ate out, when a week went sideways. It's also the most invasive thing on the list, so it's stored as day-level shape and nothing more.
Sesharo needs to know your Tuesday was unusual. It does not need to know what you bought.
A day was heavier than your normal · you ate out · you travelled · a large one-off went through
Merchant names · line items · balances · account numbers · anything identifying about a purchase
Raw transactions are encrypted at rest and can be deleted without losing the signals already derived from them.
Every row belongs to exactly one account, and that boundary is enforced by the database itself — not by application code that has to remember. There is no query path that can accidentally cross it.
The desktop and home components are optional programs you install and can uninstall. They report what you told them to report, and nothing else — no keystrokes, no screen contents, no window titles you didn't allow.
The maths that finds relationships is plain deterministic statistics. A model is only used to phrase what was already found, and to read the sentence you typed — never to trawl your history.
Cutting a Connection revokes the token and stops the sync immediately. The history it already built stays yours to keep or delete — your choice, not ours.
That's the deal, and it doesn't change once you've connected enough to matter.
Join the waitlist