Private by design.
Your workspace belongs to you
Personal records are scoped to your account. Joining a household does not automatically share your accounts, transactions, income or debts.
You control sharing
Choose which accounts, bills and debts to share. Household roles control who can view, edit and manage members.
Protected credentials
Optional creditor logins are encrypted with AES-256-GCM and require password re-entry to reveal. Financial exports exclude those secrets.
Smart Import without bank connections
BalanceOS never connects to your bank. Statements, exports and banking screenshots are read on your own device and never uploaded or stored; only the transactions you approve are saved. Account numbers are cut to their last four digits before anything is sent. Nothing is added until you review and approve it, and text inside a document is never treated as an instruction.
Payments
Subscription payments use Stripe-hosted checkout. BalanceOS does not collect or store card numbers. BalanceOS never pays your bills or transfers money through your bank.
Your data remains yours
Download a JSON backup or CSV from Settings. Protect those downloads: they may contain sensitive financial records and receipts.