A private budgeting app: what is kept, what is deleted, who else is involved

What we hold

• Your account details, such as your email address and a hashed password. Passwords are never stored in plain text.
• The transactions extracted from the statements you upload, with the categories you confirmed.
• Your rules, budgets, savings goals and settings.
• A Stripe customer ID and your subscription status. Your card number is never stored by us.

What we delete or never do

• The original statement file is deleted right after a successful import. Keeping originals is an option in Settings, off by default.
• A file we cannot read is kept only if you choose to send it so we can add support for your bank. It is kept until that support exists and opened only by the developer for that purpose.
• No AI categorization. Categories come from rules you confirm, and your transactions are not sent to any AI service.
• No bank credentials are requested and no bank connection exists.
• We do not sell your data.

Why rule-based categorization matters for privacy

Many tools categorize transactions by sending them to an outside model. Home Budget Analytics does not. The first time a merchant appears, you pick a category, and that rule is applied whenever the merchant shows up again. Insights, recurring-payment detection and budgets are plain arithmetic on your own data, so the analysis stays inside the product.

It is a slower start than guessing for you, and the trade is deliberate: you see and approve every rule that touches your data.

Who else is involved

A small number of services handle limited parts of the product. None of them receives your transactions or statements.

• Stripe - subscription billing and card payment.
• Brevo - sending account, password and support emails.
• Google reCAPTCHA - spam protection on sign-up, sign-in, password reset and the contact form.
• Our hosting provider - runs the servers where your account and data are stored.
• Google Analytics - anonymous site usage, and only if you accept the cookie banner.
• A currency-rate service - receives a currency pair and a date, nothing about you.

What this does not claim

Home Budget Analytics is a small independent product, not a bank, and it does not hold certifications such as SOC 2 or ISO 27001. The commitments above are narrower and checkable: little data collected, original files removed by default, no outside AI, and no link to your bank. The [security page](/security) covers how accounts are protected and what is not claimed.

You can export your data to CSV or XLSX with filters at any time. To have your account and everything in it deleted, contact us through the contact form; a self-service button does not exist yet.