Privacy Policy
Last updated: October 28, 2026
In short.
- Your finances are stored in your account so they can sync and be restored. We do not sell them, show ads or use trackers.
- The AI helpers (typed phrases, voice, receipts, bank screenshots, the advisor and import help) are off until you agree to each one. Only what a helper needs is sent, and you can switch each one off in Settings.
- Receipt photos, bank screenshots and voice recordings are not stored by toBalance.
- You can delete your account and all its data at any time in the app: Settings › Delete account.
1. Who we are
toBalance (“the app”, “we”, “us”) is a personal income and expense tracker made by an independent developer in California, USA. This policy covers the toBalance app for iPhone and Android and the website tobalance.app. Questions: support@tobalance.app.
2. What we keep
Your account
When you sign in with Google, Apple or a code sent to your e-mail, we receive your e-mail address and, from Google, your name and the link to your profile picture. We also keep which way you signed in and when the account was created. If you use Apple’s “Hide My Email”, we only see the address Apple makes for us.
What you enter
Your accounts (names, types, balances, credit limits, icons and card designs), categories, transactions (amount, currency, date, category, store and note), transfers, recurring payments and their reminders, budgets, savings goals and their top-ups, the rules that remember which category a store belongs to, the advisor chat (your questions and its answers), and the date you gave each AI consent (it is cleared when you withdraw it).
This data is kept on your phone and copied to our server so that it syncs between your devices and comes back when you sign in again. When you delete something in the app, it is marked as deleted on the server (so your other devices learn about it) and is removed for good when you delete your account.
Usage counters
For the AI helpers we count how many requests you make per day and per month, so that the service stays fair for everyone. The counters hold numbers, not the text of your requests.
Technical records
Like any server, ours records technical information about requests (such as the time, the IP address and error codes) for security and to fix problems. Our server code does not write your phrases, photos, screenshots, recordings or questions into these records.
What stays only on your phone
Your default currency, the app lock setting, the theme, which tips you have seen, and the payments you hid from “Found in your transactions” stay on your phone. Face ID or Touch ID is checked by your phone itself: the app only learns whether the check passed and never sees your face or fingerprint. Reminders are local notifications scheduled on your phone; we run no push notification service. Excel, PDF and backup files you make are created on your phone and go only where you send them.
3. AI helpers
Some features use outside AI services. Each one is off until you agree to it in the app, and the consent screen says what will be sent. You can withdraw any of them in Settings; the rest of the app keeps working without them.
| Feature | Sent to | What is sent |
|---|---|---|
| Typed phrase | Anthropic | The phrase, today’s date, the names and currencies of your accounts and categories. |
| Voice | OpenAI, then Anthropic | The short recording you make (to OpenAI, to turn it into text), then the text as for a typed phrase. |
| Receipt photo | Anthropic | The photo, today’s date and your category names. A receipt can show a store address, the last digits of a card and what you bought. |
| Bank screenshots | Anthropic | The screenshots you pick, today’s date and your category names. A screenshot can show a balance, the last digits of a card, stores, people you paid and amounts. |
| Advisor | Anthropic | Your question, the earlier messages of the chat, today’s date and only the figures that question needs (totals, category and store names, and for questions about specific purchases a short list of them). The figures are worked out on your phone. |
| Import help | Anthropic | The column titles and about twenty sample rows of the file, the names of its categories and accounts, your category names and, if you ask to sort by stores and notes, those short texts. |
Your whole transaction history, your account balances (except what a screenshot shows), your e-mail and your other personal details are not sent. Requests go through our server, which checks your consent and limits and passes them on without saving them.
toBalance does not keep receipt photos, bank screenshots or voice recordings: they are read once, and their temporary copies are deleted from your phone right after. Anthropic and OpenAI process the data under their terms for API customers: they do not use it to train their models and keep it only for a limited time, for example to detect abuse. See the Anthropic and OpenAI privacy policies.
AI answers can be wrong. The app shows what the AI found so you can check it before anything is saved. The advisor gives general information, not investment, tax or legal advice.
4. Phone permissions
- Camera and photos: only when you photograph or pick a receipt or bank screenshots.
- Microphone: only while you record a phrase.
- Face ID: only if you turn on the app lock.
- Notifications: only for reminders and budget warnings you switch on.
You can turn any of these off in your phone’s settings.
5. Who else gets data
We do not sell or rent your personal information and do not share it for advertising. It is handled only by the services the app runs on:
- Supabase stores your account and data and runs our server code (servers in the USA).
- Anthropic and OpenAI handle the AI helpers you switched on, as described above.
- Google and Apple confirm who you are when you sign in with them.
- Apple and Google handle payments if you buy a subscription in their stores; we do not receive your card details.
We may also disclose information if the law requires it.
6. Security
Data travels over encrypted connections (HTTPS). On the server, every table is locked so that a signed-in person can read and change only their own rows. The keys of the AI services are kept on the server and never in the app. No system is perfectly secure, so please also protect your phone with a passcode; the app lock adds Face ID on top.
7. How long we keep data, and deleting your account
We keep your data while your account exists. To delete the account and everything in it, open the app and go to Settings › Delete account. Your accounts, transactions, categories, recurring payments, budgets, goals, rules and the advisor chat are deleted from the server at once, and the app’s database is deleted from that phone. You can make a backup first in Settings › Data.
If you can no longer open the app, write from the e-mail you sign in with to support@tobalance.app with the subject “Delete my account”, and we will delete the account and its data within 30 days. Technical records and the hosting provider’s routine backups may keep traces for a limited time before they are overwritten.
8. Your rights
You can see and change everything you entered in the app, export it to Excel, PDF or a backup file, withdraw any AI consent and delete your account. Depending on where you live (for example in California, the EU or the UK), you may also have the right to ask what personal information we hold, to correct it, to get a copy, to object to or limit its use, and to complain to your data protection authority. We will not treat you differently for using these rights. Write to support@tobalance.app.
For people in the EU and UK: we use your data to provide the app you asked for (contract), the AI helpers only with your consent, and technical records for security (legitimate interest). Your data is stored and processed in the USA.
9. Children
toBalance is not meant for children under 13, and we do not knowingly collect their data. If you think a child has made an account, write to us and we will delete it.
10. The website
tobalance.app has no cookies, analytics or ads. It remembers the theme and language you pick in your own browser (local storage). Its fonts are loaded from Google Fonts, so your browser asks Google’s servers for them.
11. Changes
If this policy changes, we will update the date at the top, and for important changes we will tell you in the app before they apply.