Node 6Phase IAPage-level

Account and Trust

Manage sources, control data, hold the plan.

Job: E3 across all three; J1 and J5 on Connections. Primary persona Ravi.

Type: Pages, Dialogs, Section (GC6), States

Step 1

Account and Trust

Manage sources, control data, hold the plan. Trust is ongoing, so this is the always-findable home for "what does Tendd know and how do I change or remove it". Owns GC6.

FLAG 2 resolved. Connections re-enters onboarding's Connect Bank and Add Subscription through one "Add a source" action that opens a chooser (Connect a bank / Add manually), reusing screens 1.3 and 1.4 in-app. No duplicate screens.

Decisions

Recommendations

Data deletion is one labeled action, two taps from You, single confirm, deletes everything.
The data-access explanation uses the name-the-fear pattern (M2): state the fear, deny it with specifics.
Free bank connections are uncapped (product decision, July 2026); Pro is depth, not connection count.

Block order

Nodes 6.14 to 6.16

Page + Dialog

6.14 Connections / Accounts

PTitle: "Your sources."
PSources list (GC6 rows): bank or "Added by you", status, last sync, count
P"Add a source" → chooser 6.14.1 (FLAG 2)
SPer-source "Reconnect" / "Remove"
SProvider note: Plaid US [? EU deferred]

Page + Dialog

6.15 Data and Privacy

PName-the-fear explanation: read-only, we can never move money, we do not sell your data (M2)
P"Delete all my data" → confirm 6.15.1
SWhat each source accesses, one line each
SPermission management
S"Download your data" [? overlaps Pro export]

Page

6.16 Settings / Profile

PAccount basics [? no-account model]
PPlan status and "Manage plan" → 5.13
PNotification preferences and email digest
SLinks to Data and Privacy, Your sources
SSign out and help

Section

Section GC6 Data Source and Trust Indicator

PCurrent source (bank or private/manual)
PRead-only, cannot move money reassurance
SLink to the full "what we read" explanation

States

Cross-checked against flows

State	Reads like	Trigger
6.14 needs-reauth	A source shows "Reconnect needed" plus a Reconnect action	A connection expired
6.14.1 chooser (Dialog)	"Connect a bank" or "Add manually"	"Add a source" tapped (FLAG 2)
6.15.1 deletion-confirm (Dialog)	"This cannot be undone." Delete everything / Keep my data	"Delete all my data" tapped
6.16 logged-out	"Create an account to save your list"	A no-account trial session [?]

Variants

Mockups

6.14 Your sources

Your sources

Chase, connected8 subs

Added by you6 subs

Add a source

6.14.1 Add-a-source chooser

Add a source

Connect a bankAdd manually

Reuses onboarding screens in-app.

6.15 Data and privacy

Data and privacy

Worried what an app does with your bank data? We read your recurring charges, read-only. We can never move your money. We do not sell your data.

Delete all my data

6.15.1 Delete confirm

Delete everything?

This deletes your subscriptions, sources, and account. It cannot be undone.

Delete everythingKeep my data

Cross-cutting

SEO, Accessibility, Mobile

SEO. Private, behind auth. noindex, not a content surface.

Accessibility. Source rows expose full accessible names; the chooser, delete, and reauth dialogs trap focus, Escape maps to the safe choice; deletion consequence is text, not color; destructive button reads "Delete everything".

Mobile. No structural delta: single-column settings lists on every breakpoint; modals centered on desktop, sheets on mobile.

Status

Locked (draft, 2026-07-03) / Open

Locked. FLAG 2 resolved (one Add-a-source re-entry), one-tap deletion, name-the-fear explanation, GC6 canonical here, bank connections uncapped on Free.

Still [?]. No-account auth model; whether export lives here or in Pro.