Privacy Policy

Effective May 2026 · BalanceBuddy

What we collect

BalanceBuddy stores the data you give us directly (username, the credit cards and bank accounts you add manually, your salary and expense entries) and, when you choose to connect a bank through Plaid, the balances and transactions Plaid returns for those accounts.

How we store it

Plaid access tokens are encrypted at rest using AES-256-GCM. The database is served over HTTPS with HSTS preload and a content security policy in place. Sessions are protected by CSRF double-submit cookies and a rolling 30-minute idle timeout.

Who we share it with

Plaid receives your bank credentials directly through their hosted Link flow — we never see them. We do not sell, rent, or share your financial account data with advertisers or analytics vendors.

Advertising & cookies

BalanceBuddy displays ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this site or other sites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to BalanceBuddy and/or other sites on the Internet.

You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalized advertising at aboutads.info. These advertising cookies are separate from the financial account data described above, which is never shared.

Your rights

You can delete your account at any time from Settings → Delete account in the app. Your linked banks are disconnected immediately, and all remaining data is permanently erased after a 7-day grace period — signing in again within those 7 days cancels the deletion. You can also request deletion by emailing support@balancebuddy.us; we respond within 7 days.

You can download a copy of all the data we hold about you at any time from Settings → Your data in the app, as a JSON file.

Contact

Questions? Reach us at support@balancebuddy.us.