Privacy Policy

Last updated: September 28, 2026 · Applies to the BetterBudget web and mobile apps.

What we collect

Your email address and authentication credentials (we store only salted password hashes and passkey public keys); financial transactions you import or connect (via CSV upload, manual entry, or Plaid bank connections); budgets, bills, notes, and tags you create; conversations you have with the assistant; and notification contact details you opt into (email address, phone number).

If you sign in with Apple or Google, we receive the account id that service gives us, your email address (with Sign in with Apple this can be Apple's private relay address, which forwards our email to you) and your first name if you share it. If you sign up this way, the first name you share becomes the name the app calls you, which you can change in Settings on the web or on the You tab in the app. We keep the account id and the email to sign you in. With Sign in with Apple we also keep a token Apple issues, used only to revoke the sign-in when you delete your account. We never receive your Apple or Google password.

We email a 6-digit code to confirm that an email address is yours: when you sign up (your account is made only once you enter it; a sign-up with Apple or Google at an address that service provides, Gmail or Google Workspace, iCloud or Apple's private relay, needs no code), once for an account made before we started asking whose address is not yet confirmed (one whose Apple sign-in uses its own iCloud or private relay address, or whose Google sign-in uses its own Gmail address, already is), when you change your email, and before alerts go to an address that has never been the confirmed address of your account. A code works for 10 minutes. Until a sign-up that needs a code is confirmed, we hold what you signed up with, encrypted: your email address, country, invite code and the terms you accepted, and either a salted hash of your password or, with Apple or Google, the account id that service gives us, your first name if you shared it and, with Apple, the token Apple issues. A sign-up nobody confirms is deleted a day after its code expires. When you confirm one, your account is made from it and the sign-up's record is deleted the same way.

How your data is protected

All traffic is encrypted in transit (TLS). Databases are encrypted at rest, and particularly sensitive fields (MFA secrets, contact addresses, bank-connection identifiers) carry an additional layer of application-level AES-256 encryption. We never see or store your bank username or password, bank connections use Plaid, and the resulting access tokens are held in a secrets vault, not our application database.

What we never do

We do not sell your data. We do not share your financial data with advertisers. We do not use third-party advertising or tracking analytics.

To understand which features are useful, we record first-party product usage events (for example, that a budget was edited or a page was viewed) tied to your account. These events never include your financial data or free-form text, never leave our systems, and are never shared or sold. You can turn this off any time in Settings → Privacy.

Service providers (subprocessors)

Plaid (bank connections), Anthropic and OpenRouter (AI assistant processing, only after you allow it), Stripe and RevenueCat (payments and subscriptions), Resend (email delivery), Twilio (text messages), Expo (push notification delivery), Sentry (error reports), Cloudflare (network security), and our hosting providers (Vercel, Fly.io, Neon). Each receives only what it needs to provide its function.

AI assistant

The assistant (Ask, and Help) asks for your permission before anything you type is sent to our AI providers, Anthropic and OpenRouter. Once you allow it, your question, the name you gave the assistant, and relevant summaries of your financial data (such as transactions, balances, budgets, bills and debts) are processed by them to generate the answer. You can turn this off any time in Settings on the web or on the You tab in the app, and the assistant will ask again before sending anything. Conversations are stored in your account so you can revisit them, and you can delete any conversation at any time.

Text messages

If you turn on text alerts, we use your mobile number only to send the alerts you asked for. No mobile information is shared with third parties or affiliates for marketing or promotional purposes, and text-message opt-in data and consent are never shared with any third party. Our messaging provider, Twilio, processes the number only to deliver those messages. You can turn texts off or remove your number in Settings, or reply STOP to any text. See our SMS terms.

Your rights

You can export your data, delete individual conversations, disconnect bank connections, and delete your entire account in Settings on the web (Delete account) or in the mobile app (You → Delete account). Account deletion revokes bank connections and permanently purges your data.

Your rights: United States (CCPA/CPRA and similar state laws)

You may request to know, correct, or delete the personal information we hold, and to receive a portable copy (Settings → Download my data does this instantly). We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. We will never discriminate against you for exercising these rights. Requests: privacy@getbetterbudget.com.

Your rights: Canada (PIPEDA)

We collect, use, and disclose personal information only with your meaningful consent and for the purposes described here. You may withdraw consent (disconnect banks or delete your account at any time), access the information we hold (Settings → Download my data), and challenge its accuracy. Complaints may be directed to our privacy contact below and to the Office of the Privacy Commissioner of Canada.

Contact

privacy@getbetterbudget.com