Only the owner, unless shared
The owner can use and manage the account. A partner receives no access unless the owner creates an explicit share.
Clear access for each login
Private isn't a setting.
It's a boundary.
Tangleway decides account access from the signed-in person, the account's scope, and any explicit view-only share.
What this login can seeIllustrative account view
- PharmacyHealth · Partner everydayShared with meShared with me$18.50
View only: sharing does not allow spending or changes.
How the boundary works
Access is checked where the data is stored.
Application screens show the result, while database rules remain the final authorization boundary for every signed-in user.
Visible, without spending authority
The recipient can read the shared account and its visible expenses. They cannot spend from it or edit, archive, delete, or otherwise mutate it.
The current access model
Mine, ours, and shared with me.
The words in the interface describe different permissions, not just different labels.
Your personal account
Private by default. You can use it for expenses and manage its settings.
Your household account
Active household members can see it, spend from it, and manage its household expenses.
Your partner's personal account
You can view the account and its visible expenses. The owner keeps all spending and mutation authority.
A boundary that follows membership
When someone is no longer an active household member, they no longer qualify for access through that household relationship.Create account