Privacy

Without an account, we hold nothing about your budget. A draft stays on this device, and in any file you link. No request carries those numbers to us.

When you sign in we hold an account record — an email address and, if you add one, a phone number — and the budget itself, stored securely on our servers so the same numbers open on every device you use. We do not sell this data or use it for advertising.

Aggregate page views on the marketing pages, without cookies and without a profile. Nothing inside the app is instrumented: we do not know how many groups you have, what they are called or what they cost.

Error reports from the app carry a stack trace and a browser version. They are scrubbed of budget values before they are sent, and they are sent only if you opt in.

A mail provider, to send the handful of transactional emails an account requires. A host, which serves the app and stores signed-in budgets. Paid plans, if we offer them, use a payment processor for card details we deliberately never see.

No advertising networks, no data brokers, no analytics vendor with access to your numbers.

Export the whole budget at any time, in the format the app reads. Delete an account from the account page; the record and the budget saved to it are removed within thirty days, and a draft on this device is left as it is.

Write to [email protected] with any request about your data, and you will get an answer from a person.