Privacy Policy
How's My Balance is made by Mohammad Pourshahabadi, Konepajakatu 11 P, 65100 Vaasa, Finland, who is the controller of your personal data. This policy explains what we hold, why, and how to get rid of it. Effective 15 November 2026.
What we hold
Your account: your email address, the username you choose, and when your free period started. The email address is how you log in and how we send you a code or a password reset.
Your entries: amounts, dates, categories, notes, spending caps and monthly repeats. These are held in your own account in the cloud, and a copy is kept on each device you use, your phone or your browser, so the app still works with no signal and catches up afterwards. Log in somewhere else and your entries are there.
Your password is never seen by us. It is checked and stored, hashed, by our login provider.
Receipt photos stay on the phone that took them. They are never uploaded, and the browser version does not handle photos at all.
If you write to support: your email address, your message and, only if you tick the box, technical details about the app such as its version and when it last synced. Never your amounts, notes or categories. Support messages arrive as email and are kept only in that inbox.
If you switch the assistant on: the question you ask and a summary of the figures on your screen - category names, the totals for the period and the one before, and any limit you set. Never your entries, your notes, the dates you spent on, or where you shopped. It is off until you switch it on, and switching it off stops it at once.
No advertising, no tracking, no analytics, no profiling, and nothing is ever sold or shared for marketing.
Where it is kept, and by whom
The database is hosted by Supabase in the European Union, acting on our instructions as our processor. Data is encrypted in transit and on their disks.
If you use the app in a browser, that copy of your entries is stored by the browser itself, on your own computer, along with the token that keeps you logged in. Logging out removes it. On a shared computer, log out when you finish.
The website, the browser version of the app and the support form are served by Cloudflare. Email - your verification code, a password reset, our reply to a support message - is delivered by Resend. Both act only on our instructions, under a data processing agreement.
Cloudflare and Resend are companies in the United States, so an email or a page request may be handled outside the EU. Their agreements with us include the European Commission’s standard contractual clauses, which is what allows that.
The assistant, if you switch it on, is run by Anthropic. Your question and the summary of figures described above go to them through our own server, and come back as an answer. They are not used to train anything. If you never switch it on, nothing of yours ever reaches them.
Only you can read your entries: the database itself enforces that each account sees only its own rows, plus those of a household you have joined.
If you join a household, the other members can see the entries you record, which is the point of a household, and you can leave it at any time.
Why we are allowed to hold it
To give you the service you asked for (a contract between you and us), and to keep the service secure and working. There is no other use.
The assistant is the one thing that runs on your consent rather than on the contract, because it involves somebody else: nothing is sent unless you switch it on, and you can withdraw that at any time by switching it off.
We keep your entries for as long as your account exists. Delete the account and they go, as described below.
Support messages are kept in the support mailbox until the question is settled, and deleted at the latest after 12 months.
When an account is deleted, we keep a one-way hash of the email address, never the address itself and never reversible into it, so that the same address cannot start a second free trial. The basis for that one is our legitimate interest in not having the free period taken repeatedly, and it is kept for as long as the app offers a free period.
When the app uses the internet
Syncing: your entries are sent to and from your own account as described above.
Exchange rates: once a day the app asks exchangerate-api.com (and, as a backup, frankfurter.dev) for the day’s rates. It sends no information about you - just the request for the rates.
Logos: only when you tap “Search logos” for a category, the app sends that category name to DuckDuckGo to find the company’s website, then downloads that site’s icon. Your amounts and notes are never part of this.
Both can be turned off in the app: More → Privacy & legal, under "What leaves this phone". The app works without the internet.
As with any internet request, those services see your device’s IP address. They are independent companies with their own privacy policies.
Photos and permissions
Camera and photo library: used only when you attach a receipt to an entry. The photo is copied into the app’s private storage and never uploaded.
Notifications: used only for reminders you set yourself and cap warnings you switch on.
Fingerprint or face: checked by Android itself. The app is only told yes or no; it never receives your fingerprint.
Sharing and selling
We do not sell or rent your information, and we share it with nobody except the hosting provider named above, who only stores it for us.
When you export a report or save a backup, the file is created on your own device and you decide where it goes.
Deleting your data
In the app: More → Settings → Delete my account. This erases your account and every entry, both on the phone and in the cloud, immediately and permanently.
Uninstalling the app removes the copy on the phone. The app is excluded from Android’s automatic cloud backup, so no copy is kept in your Google account.
If anything goes wrong, write to howsmybalance@gmail.com and we will delete it for you within 30 days.
Your rights
Under the GDPR you may see, correct, export and delete your data, object to how it is used, and complain to a supervisory authority - in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).
You can do the important ones yourself, in the app, at any time: everything is visible on screen, editable, exportable as a spreadsheet or an encrypted backup, and deletable.
Children
The app is not directed at children and we do not knowingly collect information from anyone, of any age.
Changes and contact
If this policy changes, the new version appears here and in the app with a new date.
Questions: howsmybalance@gmail.com.