Privacy policy
Plain language: what we store, why, and how to get rid of it.
What we store
- Your account: name, email, and a one-way hash of your password (never the password itself).
- Your budget: transactions, categories, budgets, goals and notes you enter or import. Each family's data lives in its own separate database.
- Bank connections (optional): a token from Plaid that allows read-only access to your transactions and balances. We never receive your bank username or password.
- AI keys (optional): if you add your own AI provider key, it's stored with your family's data and used only for the AI features you trigger.
Where it's stored
Your data is stored on servers in the United States (Google Cloud, Oregon), encrypted in transit with HTTPS. Data stored outside Canada may be subject to the laws of that country.
Who else sees it
- Plaid connects to your bank when you choose bank sync. See Plaid's end-user privacy policy.
- AI providers (Anthropic, OpenAI, Google, DeepSeek) receive the transactions or receipt images you ask the AI to read, only when you use an AI feature.
- Google Analytics counts visits to the public website and blog (pages viewed, rough location, device). It never runs inside the app.
- We don't sell your data or use it for advertising.
Your choices
- Export all transactions (CSV) or a full backup from Settings at any time.
- Disconnect a bank at any time; the connection is also removed at Plaid.
- Delete your account from Settings. For a family owner this permanently deletes the family's data.
Cookies
One cookie keeps you logged in. No advertising cookies. Our public pages (this website and the blog, not the app) use Google Analytics, which sets its own cookies to count visits anonymously. Nothing from your budget is ever sent to it.
Contact
Questions? Contact us through the app.