Privacy policy
Effective October 21, 2026 (bank connections added the same day) · BudgetLab+ is made by Lab Architect.
BudgetLab+ is a budgeting app for one household (one or two people). This page says what we keep, why, and how to remove it. Short version: we keep what you type into your budget so it can sync between your devices and your partner's, we never sell it, and there are no ads or trackers.
What we keep
- Your account: your email address, and your name if you give it. If you sign in with Apple or Google, we receive your email (Apple may give us a private relay address instead) and, the first time, your name. We never see your Apple or Google password.
- Your budget: the plans, categories, amounts, accounts, transactions, payees and notes you enter, and who in the household added or changed them.
- Your household: who is a member and invite links you create.
- Bank data, only if you connect a bank: the names of your bank and its accounts, their balances, and transactions (date, amount, payee or description, pending or not, and the merchant category code when the bank sends one). This comes read-only through SimpleFIN Bridge, a separate service you sign up for yourself. We never see or keep your bank passwords, and BudgetLab+ can't move money.
- Your SimpleFIN link: the private access link SimpleFIN gives BudgetLab+ when you connect. We encrypt it the moment it arrives (AES-256, with its own key that is itself encrypted by a key only our server holds). It is never sent to your devices, never shown, and never written to logs. We record each time our server opens it and each request it makes to SimpleFIN (when, why, and the result, never the link itself or any amounts).
- Security records: sign-in sessions (stored as one-way hashes), the device type, and a one-way hash of your IP address, used to stop abuse such as repeated wrong codes. Sign-in and security logs store emails only as one-way hashes.
On the website we set one cookie, which keeps you signed in. We don't use analytics, advertising or tracking cookies, and we don't build a profile of you.
Why
To run the app: sign you in, keep your budget in sync across your devices and with the partner you invite, keep your account secure, and answer you when you contact us. Bank data is used only to bring your transactions and balances into your budget, suggest where each belongs, and spot transfers between your own accounts. It is never used for ads, sold, used to train AI, or used for credit decisions.
Who can see it
- The partner you invite to your household sees the same budget. Nobody else does.
- Service providers that run parts of the app for us, only for that purpose: Cloudflare (hosting and storage, United States), SimpleFIN (the bank connection, under your own agreement with them; only if you connect a bank), Apple and Google (only if you choose to sign in with them), and an email provider for sign-in codes.
- We don't sell or rent your data, and we don't share it for advertising. We'd only disclose it if the law requires us to.
How it's protected
Everything travels over encrypted connections (HTTPS). Every request for budget data is checked against your household membership on the server. On phones, your sign-in is kept in the device's secure storage (Keychain / Keystore).
Keeping and deleting
- Your data stays while your account exists. Deleted transactions can be restored from "Recently deleted" for 30 days.
- You can delete your account in the app: Settings & household › Delete account. That removes your account and signs you out everywhere. If you were the only member, the household's budget is deleted too; otherwise it stays with your partner. If you signed in with Apple, we also tell Apple to revoke BudgetLab+'s access to your Apple Account.
- Removing a bank: Accounts › the bank's card › Remove this bank. We delete the encrypted SimpleFIN link at once and stop importing; you choose whether its imported transactions stay in your budget or are deleted. Deleting your account, or leaving a household, removes your bank links the same way. If SimpleFIN reports that access was turned off, we delete the link by ourselves.
- SimpleFIN keeps its own copy under its own policy. To end their access too, disable BudgetLab+ (or the token) on SimpleFIN Bridge, or close your SimpleFIN account.
- Deleted data leaves our backups within 30 days. Records of bank requests are kept for 13 months.
- We keep a small record that an account was deleted, and the hashed security logs described above, to protect the service. They don't contain your budget.
Children
BudgetLab+ is for adults (18 and over), since it can hold bank data. We don't knowingly collect children's data.
Changes and contact
If we change this policy, we'll update this page and the date above, and tell you in the app if the change matters. Questions or requests (including a copy of your data): [email protected].