Privacy
The short version
Budget Bandit stores your budget so you and the people you share it with can see it on any device. It never sells your data, shows ads, or tracks you across the web. You can download everything it holds, and delete it, at any time from Settings.
What it keeps
- Your email address, to sign you in. Sign-in links are emailed; there is no password to store.
- Your budget: envelopes, targets, transactions, accounts and their balances, and your settings. Everyone in your household sees all of it.
- Bank connections, if you link a bank (below). The token that lets Budget Bandit read your accounts is stored encrypted.
- Signed-in devices, so you can sign out of all of them at once.
It lives on Cloudflare's infrastructure. Deleted data is gone from the live copy at once; a disaster-recovery history is kept for up to 30 days and then is gone too.
Linking a bank
Bank connections go through Plaid. You sign in at your bank inside Plaid's window; Budget Bandit never sees your banking password. It receives your accounts, balances and transactions, and nothing else. Disconnecting a bank in Settings, or deleting your household, removes the connection at Plaid as well.
Smart sorting and questions
If you use the features that sort transactions or answer questions about your month, the relevant merchant names, amounts, dates and envelope names are sent to Anthropic's Claude API to produce the answer. That happens only when you use those features. Anthropic does not train its models on this data.
Budget Bandit emails you sign-in links and, if you turn them on, a weekly digest, bank alerts and a backup of your budget. Emails are sent through Resend. The backup email contains your whole budget, so treat it as you would a bank statement.
Errors
When something breaks, a report goes to Sentry so it can be fixed. Amounts, email addresses and page contents are stripped before it leaves your browser; the report carries an anonymous account id and the technical details of the failure.
Cookies
One cookie, which keeps you signed in. Nothing for advertising or analytics.
Your data is yours
Settings › Backup downloads everything as a file you can keep or import elsewhere. Settings › Household deletes your household or your whole account. Deleting removes the data, the bank connections and the sign-in; shared households stay with the other members.
This is a beta
Budget Bandit is early software, shared with a small group. Things will change and some will break. Keep a downloaded backup if the budget matters to you, and tell hello@budgetbandit.app when something is wrong.