Hacker News Reader

These seem contradictory to me:

> End-to-end encryption > No user data leaves the client in plaintext.

> Smart import > Upload any OFX/CSV file from any bank in the world. Leave the rest to us.

Edit: To clarify, "No way for us to sell your data or even peek into it" is more the contradiction I had in mind than just end-to-end encryption.

View on HN

Can you elaborate a little bit on what you find contradictory in these statements?

Sure... If the OFX/CSV we upload is encrypted before we upload it, how can you process it ("Leave the rest to us"). Conversely, if you are processing the OFX/CSV, how can you not peek into it?

Oh, I see.

OFX/CSV files are processed on the client-side, and we never get the raw file, only the processed and encrypted transactions. Does that make sense?

Ooooh, I get it! “Upload” is a bad word for that. Will change it to something else, thanks!

Yup, I think that's where the mental conflict comes from. How about "import"?

I don't think any word will do it justice. I would spell out that it's done client-side and what information is/isn't uploaded.

Reply on news.ycombinator.com