Privacy policy

Last updated October 27, 2026

The short version

Your budget is yours. There are no ads, no tracking, and your data is never sold or shared for marketing.
Only the people in your household can see your budget. Other households can't, and the database itself enforces that.
The person who runs this app can technically reach the database, as with most apps. They only look at a household's data when that household asks for help, or as explained below.
You can export everything at any time, for free, and ask for your data to be deleted.

Your login: your email address and password. The password is stored scrambled (hashed) by our login provider, so nobody can read it, including us.
Names: your household's name, the name you go by, and the names of people you add to the Income plan.
What you enter: transactions, categories, income and plans, subscriptions, savings goals, money moves and month closings.
Sharing records: household codes and invite links, who used them and when.
Sign-in cookies: small files that keep you signed in. They aren't used for anything else.
Server logs: our hosting providers record basic details of each visit, such as your IP address, browser and the time, to keep the service running and secure. They keep these for a limited time.

No bank logins. The app doesn't connect to your bank; you enter transactions yourself.
No card or account numbers are asked for.
No advertising, analytics or tracking tools of any kind.

Your household. Everyone in your household sees and can change the same budget. While you're both signed in, they also see which screen you're on and a new transaction as you type it.
Not other households. Each household's data is walled off in the database, not just hidden on screen.
The person who runs this app. Your data isn't encrypted in a way that stops the app's operator from reading it, so we want to be clear about when we would: only when your household asks for help, to fix a problem affecting your household, or if the law requires it.
Service providers. The app runs on Supabase (database and logins) and Vercel (hosting). They store and process data only to run the service, under their own privacy policies.

Everything travels over an encrypted connection (HTTPS) and is encrypted where it's stored.
Passwords are hashed and never visible to anyone.
The accounts that run the app (database, hosting and code) are protected with two-step sign-in.

Export: download all of your household's data from the Household page at any time, for free.
Change it: anything you entered can be edited or deleted in the app.
Remove someone: the household owner can remove a member on the Household page.
Delete everything: to delete your login or your whole household, contact the person who gave you your household code. It will be deleted within 30 days. Copies in our providers' backups are removed when those backups expire.

Your data is kept for as long as your household uses the app, and deleted when you ask.

This app is meant for adults managing a household budget, and isn't intended for children under 13.

If this policy changes, the date at the top changes too. Anything significant will also be announced in the app before it takes effect.

For any question about your data, contact the person who gave you your household code.