Privacy Policy

• Your account: your email address, password (stored hashed, never readable), your name if you add it, and two-factor settings.
• Bank data, when you link a bank: each account's name, type and balance, its balance over time, and its transactions (date, description, amount, and with Plaid the merchant name and a category). We don't get or store full account or card numbers, and we never see your bank sign-in.
• What you enter: budgets, categories, bills, transactions you add or import, nicknames, your household's name and people, and your answers in guided setup (who it's for, your income and your regular bills).
• Your settings: things like which tips you've seen and whether AI features are on.
• Usage counts: how many times you used each AI feature in the last day, to apply daily limits.
• For the live demo only: a one-way hash of your IP address, to limit how many demos one visitor can start. It's deleted with the demo.

We don't use advertising trackers or third-party analytics. The site uses cookies only to keep you signed in, and your browser's storage for small preferences (like which view you last picked).

To run UnderBudget for you: show your budget and spending, sync your banks, find your bills, and answer what you ask the AI features. We also use it to keep the service secure and working (for example, rate limits and error reports that leave out your financial details).

We don't sell your data, share it for advertising, or use it to advertise to you.

These services handle data on our behalf, only to provide UnderBudget:

• Plaid: Connects your bank. Your bank sign-in, which you enter in Plaid's own window; UnderBudget never sees it. Plaid sends us your accounts' names, types and balances and their transactions. Their privacy policy.
• Anthropic: The AI (Claude) behind Start with AI, Suggest bills and AI Auto-Categorize, only when you click them. Transaction descriptions, merchant names, bank categories, amounts and dates, your category and bill names, and the bills and income you told us about. Never account numbers, bank logins or passwords. Their privacy policy.
• Supabase: The database and sign-in. Everything you store in UnderBudget, and your email address and password (stored hashed). Their privacy policy.
• Vercel: Hosts the website. Your requests to the site, including your IP address, as any web host does. Their privacy policy.
• Logo.dev or Google: Company and bank logos. Only a company's website address (like netflix.com), requested by our server, never by your browser. Their privacy policy.

When you link a bank with Plaid, Plaid's End User Privacy Policy also applies to the data Plaid collects from your bank.

Three features use Claude, an AI model made by Anthropic: Start with AI (drafts your first budget), Suggest bills and AI Auto-Categorize. Nothing else in UnderBudget uses AI: bills, budgets, pace and projections are worked out by the app itself.

• Only when you click, and you see what's sent first. Each time, before anything leaves, the app shows what that request will include and what it never does; the first time, it also asks you to allow AI features. You can turn them off any time in Settings → Account & help, and nothing more is sent.
• What's sent: only what the feature needs, all things you can see in the app: transaction descriptions, merchant names, bank categories, amounts and dates, your category and bill names, and for Start with AI the bills and income you told us about.
• What's never sent: account or card numbers, bank logins, passwords or other credentials, or other people's data. Long numbers inside a description (which can be part of a card or account number) are masked before anything leaves.
• Limits: each feature has a daily cap (Start with AI 5, Suggest bills 10, AI Auto-Categorize 20 times a day).
• At Anthropic: the data is processed to answer the request under Anthropic's commercial terms, which don't allow it to be used to train their models. See Anthropic's privacy policy.

AI suggestions can be wrong. Nothing is saved until you review and confirm it.

Your budget, categories, bills and expected income belong to your household, so everyone with a login in your household can see and change them. Your accounts and transactions stay your own. We don't share your data with anyone else except the processors above, or when the law requires it.

• Bank credentials are encrypted (AES-256-GCM) before they're stored, and never sent to your browser.
• Every table is locked down so a signed-in user can only reach their own (or their household's) rows.
• Connections are encrypted (HTTPS), and you can turn on two-factor sign-in under Profile.
• UnderBudget only reads your bank data. It can't move money or make payments.

• We keep your data while your account exists.
• Disconnecting a bank stops syncing and deletes the stored connection. The transactions you already have stay, so your history still adds up.
• Deleting an account (one bank or manual account) deletes its balance history; its transactions stay unless you tick Also delete its transactions.
• Deleting your UnderBudget account (Profile → Delete account) disconnects every bank and deletes everything: budgets, transactions, accounts, bills, settings and your sign-in. How to delete your account.
• Deleted data can stay in our database provider's encrypted backups until those backups expire on their regular schedule.
• The live demo is deleted after 24 hours, or when you choose Exit demo.

• See and change your data in the app at any time.
• Turn AI features on or off in Settings → Account & help.
• Disconnect a bank, or choose per account whether it fetches transactions, on the Accounts page.
• Delete your account and everything in it from Profile.
• Ask us for a copy of your data, or anything else about your privacy, at [contact email].

If we change this policy, we'll update the date at the top, and tell you in the app before a change that affects how your data is used takes effect. UnderBudget isn't meant for children under 13.

Questions: [contact email]. See also our Terms of Service.