Balance Window home · Desktop web app

Balance Window Privacy Policy

Last updated: August 22, 2026 · Native iOS app and open-source web app

In short: Balance Window works locally without an account. Cloud sync is optional. We do not sell personal data, run ads in the app, or track you across apps and websites.

Data you enter

Balance Window stores the accounts, balances, categories, one-time entries, recurring entries, notes, and preferences that you choose to enter. The native iOS app stores this data on your device by default. You can import and export a JSON backup at any time.

Optional Apple sign-in and cloud sync

You can use the core app without signing in. If you choose Sign in with Apple and enable cloud sync, we process an account identifier, the name and email address Apple may provide, session information, and an encrypted snapshot of your Balance Window data. Apple may provide a private relay email address instead of your personal address.

These items are associated with your account and are used only to authenticate you, operate cloud backup and synchronization, resolve sync conflicts, and support account deletion. They are not used for advertising, marketing, profiling, or cross-app tracking.

What we do not collect in the iOS app

• No advertising identifier, advertising data, or cross-app tracking.
• No location, contacts, photos, microphone, health, or fitness data.
• No third-party advertising, analytics, or crash-reporting SDK.
• No bank connection, payment-card processing, trading, or credit scoring.
• No transfer of your financial data to an AI service in version 1.0.

Retention, export, and deletion

Local data remains on your device until you delete it or remove the app, subject to your device backups. Exported JSON files are controlled by you. When signed in, you can delete the cloud copy or delete your account from Settings. Account deletion removes the account, active sessions, and cloud vault; the app also clears its local data after the deletion succeeds.

Service providers

Sign in with Apple provides authentication. Cloudflare Pages, Workers, and D1 host the website, API, account records, and encrypted cloud vault. GitHub hosts the public web source and issue tracker. These services participate only when the relevant feature or website is used. The native iOS app does not offer GitHub login.

Contact

For privacy questions or deletion assistance, open an issue in the Balance Window issue tracker. Do not include financial data, Apple credentials, session cookies, tokens, or private keys in a public issue.