Security
Locked down. No bank login. Yours.
Your financial life deserves care. Balance never connects to your bank, keeps passwords and sessions only as hashes, and lets you export or delete your data whenever you like.
Layers of protection
Security in every layer. Not bolted on.
No bank login. Ever.
Balance never connects to your bank or card company. Transactions come from files you import, Apple Pay payments and card SMS your iPhone Shortcuts send, or what you type.
- No bank passwords
- Cannot move money
Hashed passwords and sessions
Passwords are stored only as salted scrypt hashes. Sessions use an httpOnly cookie, and we keep only a hash of each session token, Shortcut key and invite link.
- Rate-limited sign-in
- Cross-site writes blocked
Touch ID lock on Mac
Turn on the app lock and Balance asks for your fingerprint every time you open it, with your password as a fallback.
- Asks on every open
- Password fallback
Private by design
We never sell your data and there are no ads. Ask Balance and receipt scanning run on your device. AI (Smart mode, part of Balance Plus) is off unless you turn it on.
- No ads, ever
- No data selling
Your data, your call
Export everything as CSV or JSON, or delete your account and all of its data whenever you like.
- CSV and JSON export
- Permanent deletion
How data gets in
Data comes from you. Money never moves.
Your iPhone
You pay with Apple Pay, just like always. Balance is not part of the payment.
Shortcuts
Your automation sends the amount and merchant with your Shortcut key.
Balance
Logs the payment and sorts it with your rules.
Step 1
You pay
You pay with your own card or Apple Pay, just like always. Balance is not part of the payment.
Step 2
Your Shortcut sends it
A Shortcuts automation sends the amount and merchant (or the card’s charge SMS) to Balance with your Shortcut key.
Step 3
Balance logs it
Your rules sort it into a category. Revoke the key in Settings to stop it any time.
Found a vulnerability?Tell us first.
We welcome reports from security researchers. Please share details privately, give us reasonable time to fix the issue before disclosing it, and avoid accessing other people's data. We will acknowledge your report and keep you updated.