THE GRID
At 13months.ca
The budget tracking tool inspired by the 13-month calendar. Track daily, weekly, biweekly, and monthly income — all in one place.
Everything you need to
own your budget
4-Week & 5-Week Cycles
Budget in 4-week and 5-week cycles — the way your money actually arrives. Paid biweekly? A 4-week cycle holds exactly two paydays, so it fits too.
Cash & Debit Tracking
Six expense slots per day with separate cash and debit categories. Track deposits, withdrawals, and totals — and pin a note to any day.
Mobile & Desktop
Optimized layouts for every screen. Day-by-day navigation on mobile, full grid view on desktop.
Private by Design
Your data is never sold or shared — and you can delete your account, and every trace of it, in one click. Your money is your business.
Automatic Backups
Your grid is backed up automatically as you work. Restore an earlier copy yourself, anytime — no email, no waiting.
Spending Insights
See where your money goes — daily averages, your biggest spends, end-of-cycle projections, and cycle-over-cycle comparisons.
Start in three steps
Create Account
Free sign-up. No credit card, no hidden fees. Your data stays private.
Enter Expenses
Log purchases and income into the grid as they happen.
See Your Story
Watch your budget take shape. Cash spent, debit spent, deposits — all at a glance.
Bank-grade protection.
Zero tracking.
Your data is encrypted, your password is hashed, and we never sell or share anything. Period.
TLS/SSL Encryption
All connections encrypted with TLS 1.3 — the same standard used by banks.
bcrypt Hashing
Passwords hashed with bcrypt and unique salts. Never stored in plain text.
Injection Prevention
PDO prepared statements and htmlspecialchars() block SQL injection & XSS.
§1. Release Status
13months.ca completed its public beta and reached Stable Release in July 2026, after months of validation by real users in real payment cycles.
Per ISO/IEC 25010:2011, software quality is measured across functional suitability, reliability, security, maintainability, and usability — the qualities this release was tested against.
§2. Release Lifecycle
§3. Security Architecture
All data encrypted using TLS. Same standard used by banks, hospitals, and government websites.
IETF RFC 8446 — TLS 1.3 Protocol
Your password is never stored in plain text. Hashed with bcrypt (Blowfish cipher-based). Each password has a unique random salt.
USENIX 1999, Provos & Mazières
PDO Prepared Statements with parameterized queries. All output sanitized with htmlspecialchars().
OWASP Top 10 — A03 & A07:2021
Server-side PHP sessions only. No third-party tracking or cookies. No data selling or sharing. Demo uses localStorage only.
OWASP Session Management Cheat Sheet
§4. What Stable Release Means for You
✅ Tested & verified through public beta
✅ Data encrypted & securely stored
✅ Password unreadable to anyone
✅ Automatic backups protect your work
✅ Bugs fixed promptly
✅ Your feedback still shapes the product
✅ Safe for everyday use
OWASP Top 10:2021 · Provos & Mazières (1999) USENIX