THE GRID
At 13months.ca
The budget tracking tool designed for 35-day cycles. Track daily, weekly, biweekly, and monthly income — all in one place.
Everything you need to
own your budget
35-Day Cycles
Built for 4 and 5 week payment periods. Perfectly aligned with BC PWD disability and Social Service payment schedules.
Cash & Debit Tracking
Six expense slots per day with separate cash and debit categories. Track deposits, withdrawals, and totals.
Mobile & Desktop
Optimized layouts for every screen. Day-by-day navigation on mobile, full grid view on desktop.
Start in three steps
Create Account
Free sign-up. No credit card, no hidden fees. Your data stays private.
Enter Expenses
Log purchases and income into the grid as they happen.
See Your Story
Watch your budget take shape. Cash spent, debit spent, deposits — all at a glance.
Track your spending to play Budget Quest — a game built into THE GRID where every purchase becomes yours. Earn badges, build streaks, climb levels, and see your spending story come to life.
Bank-grade protection.
Zero tracking.
Your data is encrypted, your password is hashed, and we never sell or share anything. Period.
TLS/SSL Encryption
All connections encrypted with TLS 1.3 — the same standard used by banks.
bcrypt Hashing
Passwords hashed with bcrypt and unique salts. Never stored in plain text.
Injection Prevention
PDO prepared statements and htmlspecialchars() block SQL injection & XSS.
§1. Formal Definition
Per the IEEE Standard #1012 (2016) on Software Verification & Validation, Beta testing is defined as “validation testing conducted by representative users in a target environment to determine whether a product meets customer needs and business requirements.”
Per ISO/IEC 25010:2011, software quality is measured across functional suitability, reliability, security, maintainability, and usability.
§2. Release Lifecycle
§3. Industry Precedent
Windows Insider — Millions run beta builds daily.
Apple — Public iOS/macOS betas used by millions annually.
Firefox — Permanent beta channel alongside stable.
§4. Security Architecture
All data encrypted using TLS. Same standard used by banks, hospitals, and government websites.
IETF RFC 8446 — TLS 1.3 Protocol
Your password is never stored in plain text. Hashed with bcrypt (Blowfish cipher-based). Each password has a unique random salt.
USENIX 1999, Provos & Mazières
PDO Prepared Statements with parameterized queries. All output sanitized with htmlspecialchars().
OWASP Top 10 — A03 & A07:2021
Server-side PHP sessions only. No third-party tracking or cookies. No data selling or sharing. Demo uses localStorage only.
OWASP Session Management Cheat Sheet
§5. What Release Candidate Means for You
✅ Data encrypted & securely stored
✅ Password unreadable to anyone
✅ Bugs fixed promptly
✅ Your feedback shapes the product
✅ One step away from Stable Release
✅ Core functionality tested & verified
✅ Only minor polish remains
✅ Safe for everyday use
IETF RFC 8446 · OWASP Top 10:2021
Provos & Mazières (1999) USENIX