Privacy

The app

Collects nothing. There is no account, no server to sync to, no analytics SDK, and no crash reporter. Your transactions, budgets, categories and goals live in a SQLite database on your device and are never transmitted.

Bank SMS is read on device to extract transactions, and the messages themselves are never uploaded, stored in full, or shared. Backups are encrypted with AES-256-GCM using a passphrase you choose and stay wherever you put them. If you lose that passphrase, nobody, including us, can recover the file.

Uninstalling deletes the database. There is no copy anywhere else.

This website

If you join the waitlist, we store your email address and the time you joined. That is the entire record. We send you one message when there is a build worth installing. It is not sold, shared, or added to any other list.

To stop signups being abused, requests are rate-limited. That check needs to recognise a repeat sender, so your IP address and email are salted and hashed before anything is written down, the stored value can identify a repeat, and cannot be turned back into you. Those records are deleted after 24 hours.

The verification code is sent through Supabase, which hosts the database and mail delivery. There are no advertising trackers, no third-party analytics, and no cookies beyond what the theme switch stores in your own browser.

Removing yourself

Every email we send includes a way to be removed, and asking directly works too. It is a single row; deleting it takes one query and we'll do it without asking why.