Security and privacy
Security and privacy FAQ
Quick answers about your data in Budget Smugglers. Is it safe, where is it, who can see it, and what happens when you leave?
Do you need my bank password?#
No, never. You import statements yourself, or the Sync extension downloads them in your own browser while you’re logged in. Your bank login never reaches us.
Can Budget Smugglers move my money?#
No. It only reads statements you give it. It has no way to make payments or transfers, and the Sync extension won’t click payment buttons.
Where is my data stored?#
On a server in Sydney, Australia, with encrypted backups kept off-site in Cloudflare’s Asia-Pacific storage. See where your data lives.
Is it encrypted?#
Yes: in transit (HTTPS), on the server’s disk, and in backups. It isn’t end-to-end encrypted, because the server has to read your transactions to do the maths. See encryption.
Can you see my transactions?#
Our admins can’t see inside your account unless you give them a Lifeguard pass, and you’re emailed when they use it. The person who maintains the server could technically read the database, and only touches it to keep the service running.
Do you sell my data or show ads?#
No. There are no ads or tracking scripts, and your data isn’t sold. The services that help run the app are listed on third parties.
Does AI read my data?#
Only if you choose it. AI categorising is off until a pool owner turns it on, and then it only sees merchant text and a rounded amount. AI assistants like Claude only get in if you connect them, with the access you pick.
Who in my household can see what?#
Each member of a pool has a role that decides what they see and do. A Kid only sees the accounts you share with them. See who can see your data.
What if I lose my phone?#
Sign in on another device with your password and a backup code, or an emailed code. Then remove the lost phone’s passkey and sign out its session under Settings › Security. See signing in safely.
How do I get my data out?#
Settings › Profile › Download my data gives you a zip of everything you own, as CSV and JSON. See download your data.
How do I delete my account?#
Settings › Profile › Delete account. Pools only you use go with it. Backup copies age out within 12 months. See delete your account.
What happens if Budget Smugglers shuts down?#
The terms promise reasonable notice first, so you can download your data before anything is switched off.
I found a security bug. Who do I tell?#
Email [email protected] with “Security” in the subject. See reporting a security problem.