Privacy policy

The short version

• Your transactions, statements, receipts, budgets and jars stay on your device. We never receive them in a form we can read.
• We keep your account (email, display name, passkeys), your plan, the percentage you share in a group, a minimal alert schedule and, on paid plans, an encrypted backup we cannot open.
• We send email codes, security alerts and, if you choose, push notifications with fixed generic wording. We never sell or share your data, and we set no advertising cookies.
• If you link a bank or card (Connected only), Plaid reads your transactions and card details read-only and they pass through our server to your device. We keep only an encrypted access token and the bank's name, never the transactions or your bank login. Disconnect any time and the token is revoked.
• You can export everything from the app and delete your account in two taps, or from this site. Deletion completes within 30 days (proposed until counsel confirms).
• Cookies: this website sets none. The app sets one cookie that keeps you signed in and keeps your data in your browser's storage on your device. Neither tracks you or shows ads, so there is nothing to accept or opt out of, and a Global Privacy Control signal changes nothing because we never sell or share data.
• Questions: privacy@qash.solutions.