Privacy Policy
How's My Balance is made by Mohammad Pourshahabadi, Konepajakatu 11 P, 65100 Vaasa, Finland, who is the controller of your personal data. This policy explains what we hold, why, and how to get rid of it. Effective [DD Month 2026].
What we hold
Your account: your email address, the username you choose, and when your free period started. The email address is how you log in and how we send you a code or a password reset.
Your entries: amounts, dates, categories, notes, spending caps and monthly repeats. These are stored on your phone and copied to your own account in the cloud, so that they survive a lost phone and appear on a second phone when you log in there.
Your password is never seen by us. It is checked and stored, hashed, by our login provider.
Receipt photos stay on your phone only. They are never uploaded.
If you write to support: your email address, your message, and — only if you tick the box — technical details about the app such as its version and when it last synced. Never your amounts, notes or categories. Support messages arrive as email and are kept only in that inbox.
No advertising, no tracking, no analytics, no profiling, and nothing is ever sold or shared for marketing.
Where it is kept, and by whom
The database is hosted by Supabase in the European Union, acting on our instructions as our processor. Data is encrypted in transit and on their disks.
The website is served by Cloudflare, and support email is delivered by Resend. Both act only as our processors, and both are used in Europe.
Only you can read your entries: the database itself enforces that each account sees only its own rows, plus those of a household you have joined.
If you join a household, the other members can see the entries you record — that is the point of a household — and you can leave it at any time.
Why we are allowed to hold it
To give you the service you asked for (a contract between you and us), and to keep the service secure and working. There is no other use.
We keep your data for as long as your account exists. Delete the account and it goes, as described below.
When an account is deleted, we keep a one-way hash of the email address — never the address itself — purely so that the same address cannot claim a second free trial.
When the app uses the internet
Syncing: your entries are sent to and from your own account as described above.
Exchange rates: once a day the app asks exchangerate-api.com (and, as a backup, frankfurter.dev) for the day’s rates. It sends no information about you — just the request for the rates.
Logos: only when you tap “Search logos” for a category, the app sends that category name to DuckDuckGo to find the company’s website, then downloads that site’s icon. Your amounts and notes are never part of this.
Both can be turned off in Settings → Privacy. The app works without the internet.
As with any internet request, those services see your device’s IP address. They are independent companies with their own privacy policies.
Photos and permissions
Camera and photo library: used only when you attach a receipt to an entry. The photo is copied into the app’s private storage and never uploaded.
Notifications: used only for reminders you set yourself and cap warnings you switch on.
Fingerprint or face: checked by Android itself. The app is only told yes or no; it never receives your fingerprint.
Sharing and selling
We do not sell or rent your information, and we share it with nobody except the hosting provider named above, who only stores it for us.
When you export a report or save a backup, the file is created on your phone and you decide where it goes.
Deleting your data
In the app: More → Settings → Delete my account. This erases your account and every entry, both on the phone and in the cloud, immediately and permanently.
Uninstalling the app removes the copy on the phone. The app is excluded from Android’s automatic cloud backup, so no copy is kept in your Google account.
If anything goes wrong, write to [email protected] and we will delete it for you within 30 days.
Your rights
Under the GDPR you may see, correct, export and delete your data, object to how it is used, and complain to a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).
You can do the important ones yourself, in the app, at any time: everything is visible on screen, editable, exportable as a spreadsheet or an encrypted backup, and deletable.
Children
The app is not directed at children and we do not knowingly collect information from anyone, of any age.
Changes and contact
If this policy changes, the new version appears here and in the app with a new date.
Questions: [email protected].