Privacy notice

BalanceOS stores the account details and financial records you enter to provide your workspace. Records may include balances, bills, income, debts, transactions, uploaded receipts and optional encrypted creditor logins.

Personal finances are private to your account. Household membership shares household records; selected personal accounts, bills and debts are shared only when you choose. Member roles control access.

Hosting and database services process data to operate the app. Configured email services deliver verification, recovery and invitation emails. When billing opens, Stripe will process subscription payments through its hosted pages. BalanceOS does not store card numbers.

Smart Import reads bank statements, CSV exports and banking-app screenshots on your own device. The document is never uploaded or stored; BalanceOS receives only the transactions and balances found in it (for images, the recognized text, with account numbers reduced to their last four digits and emails, phone numbers and addresses removed). What was read is deleted when you approve or cancel the import, or after 24 hours; only the transactions you approve are kept. Receipt photos you import are kept with their expense unless you choose not to, and can be deleted with it. Categories you pick are remembered to suggest them next time. If an operator turns on the optional smart reader, that recognized, redacted text (never an image or file, and without your name or email) is sent to Anthropic's API to read it, under Anthropic's commercial API terms and data-retention policy.

Security records include sign-in attempts, hashed network addresses and credential access events. Financial pages and credentials are not cached by the offline service worker.

Use Settings to export or delete your personal financial records. Household records are managed separately by household owners. Cancelling a subscription does not delete records. Database backups and security records may persist separately; this notice does not promise immediate erasure from backups.

Public registration and live payments remain closed until launch verification is complete. This notice describes the app's current operation.