Data & permissions

Exactly what we see. And what we never will.

Balance only asks for the data it needs to help you manage money. Here is all of it, why we need it, and how you stay in control.

Your controls How we protect it

What we access

Transactions you add

Date, amount, merchant, category and notes, from quick add, CSV and statement files, Apple Pay, card SMS or receipt scans.

Accounts you create

A name, a type such as checking or cash, the opening balance, and the last 4 digits of cards you import.

Plans you set up

Budgets, goals, round-up settings, smart rules, installment plans, and your overdraft credit line, rate and payoff plan.

Household sharing, if you join one

Its members, the accounts you choose to share, and shared budgets and goals.

Your email address

To sign you in and send password reset emails, invites and the notifications you allow.

Basic session info

The browser your session came from, so you can recognize your sign-ins.

Error reports and feedback you send

When the app crashes: the error, the screen path and the app version, never your money data. Feedback: only what you write and choose to attach.

What we never access

Your bank login

Balance never connects to your bank or card company and never asks for a bank password.

The ability to move money

No payments, transfers or changes. Round-ups and goals are counted inside Balance; no money moves.

Your full card number

At most the last 4 digits, to match charges to the right account. Never the full number or security code, even when you pay for Plus.

The text of your SMS

Balance keeps the charge it read from a card message, not the message itself.

Your fingerprint

Touch ID stays on your Mac. Balance only stores a public key to check the unlock.

AI reading your data without asking

Ask Balance and receipt reading run on your device. Nothing goes to an AI service unless you turn on Smart mode, and receipt photos never do.

Data for advertising

No ads, no data selling, no sharing for targeted marketing.

Purpose and retention

Every piece of data has a reason.

If we cannot explain why we need something, we do not collect it.

Data Balance uses, why, and how long we keep it
Data	Why we use it	How long we keep it
Transactions	Categorize spending, power budgets, goals, round-ups, forecasts and insights, and show shared accounts to your household.	While your Balance account is open. Deleted transactions are purged after 7 days; all data is deleted when you delete your account.
Accounts	Show balances, net worth and its history, and match imported cards (last 4 digits) to the right account.	Until you delete the account in Balance or delete your Balance account.
Installments and overdraft settings	Show charges still to come, and estimate overdraft interest and a payoff plan. General information, not advice.	Until you end or delete the plan, or delete your Balance account.
Household	Share the accounts you choose, household budgets and goals, and work out who paid what.	Until you leave or the household is deleted. Invite links expire after 7 days.
Receipts	Keep a photo or PDF of a receipt with its transaction, if you attach or scan one.	Until you remove the receipt, its transaction is permanently deleted, or you delete your Balance account.
Email address	Sign-in, password reset and invite emails, and the notifications you allow.	While your Balance account is open.
Smart mode (optional AI, part of Balance Plus)	Only if you have Plus (or its free trial) and turn it on: send the minimum needed (for example your question, dates, amounts, merchants and category names) to Anthropic so Claude can answer. Never your name, email, account names, notes or card numbers.	We never store the questions or answers. Usage records (tokens, cost, outcome) are deleted after 40 days. Anthropic deletes API data within 30 days, with legal and safety exceptions.
Balance Plus subscription	Give you Plus while your trial or plan is active: status, plan, renewal date and the payment processor’s ids (Stripe on the web, Apple on iPhone). Never your card number.	While your Balance account is open. Payment records needed for accounting and tax are kept as long as the law requires.
Shortcut keys	Let your iPhone Shortcuts send Apple Pay payments and card SMS to your account. Only a hash of each key is stored.	Until you revoke the key in Settings or delete your Balance account.

Transactions
Why we use it
Categorize spending, power budgets, goals, round-ups, forecasts and insights, and show shared accounts to your household.
How long we keep it
While your Balance account is open. Deleted transactions are purged after 7 days; all data is deleted when you delete your account.
Accounts
Why we use it
Show balances, net worth and its history, and match imported cards (last 4 digits) to the right account.
How long we keep it
Until you delete the account in Balance or delete your Balance account.
Installments and overdraft settings
Why we use it
Show charges still to come, and estimate overdraft interest and a payoff plan. General information, not advice.
How long we keep it
Until you end or delete the plan, or delete your Balance account.
Household
Why we use it
Share the accounts you choose, household budgets and goals, and work out who paid what.
How long we keep it
Until you leave or the household is deleted. Invite links expire after 7 days.
Receipts
Why we use it
Keep a photo or PDF of a receipt with its transaction, if you attach or scan one.
How long we keep it
Until you remove the receipt, its transaction is permanently deleted, or you delete your Balance account.
Email address
Why we use it
Sign-in, password reset and invite emails, and the notifications you allow.
How long we keep it
While your Balance account is open.
Smart mode (optional AI, part of Balance Plus)
Why we use it
Only if you have Plus (or its free trial) and turn it on: send the minimum needed (for example your question, dates, amounts, merchants and category names) to Anthropic so Claude can answer. Never your name, email, account names, notes or card numbers.
How long we keep it
We never store the questions or answers. Usage records (tokens, cost, outcome) are deleted after 40 days. Anthropic deletes API data within 30 days, with legal and safety exceptions.
Balance Plus subscription
Why we use it
Give you Plus while your trial or plan is active: status, plan, renewal date and the payment processor’s ids (Stripe on the web, Apple on iPhone). Never your card number.
How long we keep it
While your Balance account is open. Payment records needed for accounting and tax are kept as long as the law requires.
Shortcut keys
Why we use it
Let your iPhone Shortcuts send Apple Pay payments and card SMS to your account. Only a hash of each key is stored.
How long we keep it
Until you revoke the key in Settings or delete your Balance account.

Backup and log retention periods are listed in our Privacy Policy (draft, to be confirmed before launch).

Controls you have

You hold the keys.

Everything you give Balance can be taken back. Try the switches to see how it feels.

Revoke a Shortcut key

Revoke a key in Settings and that iPhone can no longer send payments or SMS. Everything already logged stays editable.

Export everything

Download your data as CSV or JSON whenever you like, straight from Settings.

Delete your account

Permanently delete your account and personal data. No retention tricks, no hoops to jump through.

Privacy & data

Illustrative demo

Shortcut keys

My iPhone
Key ···· 4f2a · Can log payments
Work iPhone
Key ···· 9c1e · Can log payments

Touch ID lock

On a Mac, asks for your fingerprint each time Balance opens.

Demo only, nothing is saved. 2 of 2 example keys active, Touch ID lock on.

Want the full detail?

Read the Privacy Policy Cookie settings