Your financial data never leaves your browser

The long view of your money —
that stays yours.

Yearspan models every year of your retirement — taxes in all 50 states, Roth conversions, Social Security, RMDs, IRMAA, and Monte Carlo — with advisor-grade depth. And your plan stays encrypted on your own device.

No credit card to start · No account linking · Cancel anytime
How it works

Serious modeling, without handing over your life savings' data

Everything runs in your browser. There's no cloud database of your accounts to breach.

1

Enter your plan

Add accounts, income, and expenses — or load a realistic sample household to explore first. No bank logins, no Plaid.

2

Model every year

Yearspan projects each year with full federal + state taxes, Roth conversions, Social Security, RMDs and IRMAA, then stress-tests it with Monte Carlo.

3

Decide with confidence

Compare scenarios, see success probability, and export a CPA-ready report. Your data stays encrypted on your device the whole time.

Depth

Advisor-grade, down to the tax bracket

The kind of modeling planners charge for — made explainable, and yours to run as often as you like.

Every year, modeled

A deterministic year-by-year projection plus 1,000-trial Monte Carlo — percentile fan charts, success probability, and historical & bootstrap return modes.

Taxes done right

Federal (post-OBBBA brackets, LTCG stacking, NIIT, AMT, the Social Security taxation worksheet) plus a modular all-50-state tax engine and IRMAA Part B/D with the 2-year MAGI lookback.

Roth conversion strategy

Fill-to-bracket, stay-under-an-IRMAA-tier, or fixed conversions — plus an optimizer that ranks schedules by after-heir-tax outcome instead of a single black-box answer.

Withdrawals & RMDs

SECURE 2.0 RMDs, a configurable withdrawal order solved against taxes, 0%-capital-gains harvesting, lot-level basis and tax-loss harvesting, and inherited-IRA drawdowns.

Social Security & survivor

Claiming-age modeling from each spouse's PIA (spousal, survivor, delayed credits), a claiming optimizer, and the "widow's tax" filing-status switch most tools skip.

Spending strategies

Guyton-Klinger guardrails, VPW/amortization, percent-of-portfolio, and the 95% rule — with mortality-weighted and bad-first-decade sensitivity runs.

Track reality

Log balance snapshots and expense actuals, watch drift against the plan, import from CSV, and paste back a 1040 to seed IRMAA — the plan stays anchored to real life.

Take it to your CPA

A spreadsheet view with per-year breakdowns, CSV export, a printable one-page report, and privacy-framed AI prompts you can paste into any assistant.

Private by design

Passkeys, at-rest encryption, and a plaintext export you can take anywhere. Works offline as an installable app — no dependency on us to keep planning.

Why local-first

Your whole financial life shouldn't live on someone else's server

Most online planners are cloud-first: you upload your accounts, balances, and Social Security details, and they sit in a database you don't control. Yearspan is the opposite — your plan is stored and encrypted on your device.

  • Nothing to breach. There is no server-side copy of your plan to leak, subpoena, or sell.
  • No account linking. No Plaid, no bank credentials, no aggregation, no ads.
  • Own your data. Export a plaintext or encrypted backup any time and leave whenever you like.
  • One honest business model. A flat subscription — no assets-under-management pitch, no upsell to advisors.
“Yearspan holds a key to data it never possesses.”

To license the app and let you recover your account, our server custodies your encryption key — but your plan itself is encrypted and stored only in your browser, and never sent to us. Honest about the limits: at-rest encryption protects a shared or stolen computer and casual snooping, not a determined attacker already on a device you're logged into. That's what your OS full-disk encryption is for.

How we compare

Advisor-grade depth. Local-first privacy.

Cloud tools like Boldin and ProjectionLab are good — but they run your financial life on their servers. Here's the difference that matters.

YearspanTypical cloud planner
Where your plan livesOn your device, encryptedOn their servers
Bank / account linkingNever requiredOften required or pushed
State income taxesAll 50, itemized + IRMAAFederal-only or approximate
Roth conversion optimizerYes — explainable, rankedSometimes
Works offlineYes (installable app)No
Export & leave anytimePlaintext + encryptedVaries; lock-in common
Data sold or used for adsNeverSometimes
Price$99/yr or $12/mo, flatSubscription; some add advisory/AUM
Pricing

One plan. Everything included.

Start with a 30-day free trial — no credit card. Every feature is in every plan.

Monthly

$12 / month
Billed monthly · cancel anytime
Start free trial
Save 31%

Annual

$99 / year
Billed yearly · cancel anytime
Start free trial

Payments and invoicing handled securely by Paddle, our merchant of record.

Questions

Frequently asked

Where is my financial data stored?

Only in your browser, on your device (encrypted at rest). Your plan is never sent to or stored on our servers — we custody the encryption key so you can license the app and recover your account, but we can't read your plan. See our Privacy Policy.

Do I have to link my bank accounts?

No. There's no Plaid, no bank credentials, and no account aggregation. You enter what you want to model — or load a sample household to explore first.

Is Yearspan financial advice?

No. It's a self-directed planning and education tool, not tax, legal, or investment advice, and using it doesn't create an advisory relationship. Verify major, irreversible decisions with a qualified professional. See our Not Financial Advice notice.

Which states are supported?

All 50 — each with its own sourced tax rules — plus federal taxes, IRMAA, ACA premium credits, and Social Security taxation. Relocation between states is modeled too.

Can I export my data or cancel?

Yes to both. Export a plaintext or account-encrypted backup at any time, and cancel from your account whenever you like — see the Refund & Cancellation Policy.

What do I need to run it?

Any modern browser over HTTPS (Chrome, Edge, Safari, Firefox). It installs as an app and keeps working offline. Passkeys or a password protect your account.

Plan every year. Share none of them.

See what an honest, advisor-grade retirement model looks like — with your data staying on your own device.