Your data
What it does with your money data
Six facts about how your data is stored and handled.
Read-only. It can’t move a cent.
Kept apart
Nobody else’s budget can reach yours, and a stolen database is not a stolen bank login.
Every row is yours alone
Each budget’s rows are kept apart by a rule in the database itself. Even a mistake in the app cannot show you someone else’s budget, because the database refuses first.
How: Enforced by the database
Bank credentials are encrypted
A stored bank credential is encrypted with a key that is itself wrapped by a managed key service. A copy of the database on its own is not a copy of your credentials.
How: Key wrapped by a key service
The edge-to-origin hop is encrypted and verified
The connection between the network edge that answers you and the server that holds your data is encrypted, and each end checks the other.
How: Each end checks the other
Not watched
The app counts nothing about you. This website counts visits only if you accept.
No advertising, and no analytics in the app
Not in the application and not in the phone apps. This website loads Google Analytics only after you choose Allow analytics, and it never sees anything from your budget.
How: Website analytics only if you allow it
Always yours
Export everything, and undo any change.
Take everything with you
A full export of the workspace as a zip, whenever you want it, and a CSV of transactions with every row in its own currency. Deleting a budget offers the export first.
How: Zip and CSV, whenever you want
Undo on everything
Every change goes through a change log. Recent changes can be taken back as a whole batch. The one exception is removing an attachment, which asks first because nothing stands behind it. Permanently deleting your account is final too: it is not kept in the change log and cannot be undone.
How: A change log behind every change
See the rest of it
Every capability, in plain words, and the plans that include them.
A privacy policy and terms of service accompany this page — Privacy · Terms.