Security and privacy

Your budget says a lot about you. This is how it’s looked after.

In brief#

• Your bank logins never reach us. You import statements yourself, or the Sync extension downloads them in your own browser while you’re logged in.
• Your data lives on one server in Sydney, behind Cloudflare, with no ports open to the internet. See where your data lives.
• It’s encrypted in transit, on disk and in backups. It isn’t end-to-end encrypted. The encryption page explains why and what that means.
• Nightly backups, encrypted before they leave the server, kept off-site. See backups.
• Nobody else looks inside your account unless you give them a Lifeguard pass. Pool members see what their role allows.
• No ads, no trackers, no selling data. The few services we use are listed on third parties, with what each one gets.
• It’s yours to take. Download everything or delete your account from Settings › Profile, any time.

Protecting your account#

Most account break-ins come from reused passwords. Turn on two-step sign-in or a passkey and you’re well ahead. Budget Smugglers emails you about new sign-ins and security changes, so you’ll know if something’s off.

The details#

Page	What it covers
Signing in safely	Passwords, two-step sign-in, passkeys, app lock, sessions and alerts
Where your data lives	The server, the network, and who runs it
Encryption	In transit, at rest, in backups, and what isn’t encrypted
Backups	How often, how long they’re kept, and how they’re protected
Who can see your data	Pool members, admins, Lifeguard passes and the audit log
Third parties	Every outside service and what it receives
Download your data	What’s in the zip
Delete your account	What goes, what stays, and how long backups hang on
Reporting a problem	Where to send a security bug
FAQ	Quick answers to the common questions

The privacy policy is the formal version of all this.