Built to keep your money data safe
Budgetsplit holds a household's money records, so we treat every number as if it matters. Here's how, in plain words.
Built to keep your money data safe
Stored in the EU
Your data lives in Frankfurt, Germany. Our API runs in Frankfurt too.
Encrypted in transit and at rest
Every connection is encrypted, and so is the database on disk. Budgetsplit is not end-to-end encrypted yet, and we say so plainly.
Rules in the database
Who may see or change what is checked by the database itself on every request, not just by the screens. Only a group's members can open it.
No ads, no trackers
No analytics, no advertising tools and no third-party trackers, on this website or in the apps. We don't sell your data.
Protecting your account
Two-step sign-in
Add an authenticator app and every sign-in asks for a code as well as your password.
Sign-out that means it
Signing out ends the session straight away, and you can sign out of every device at once.
A fresh sign-in for big steps
Deleting your account or downloading your data needs a recent sign-in.
Limits on guessing
Invite codes and sign-in codes can only be tried a few times, so they can't be guessed.
Hidden amounts and app lock
Amounts stay hidden until you show them, and the phone app locks the moment you leave it.
Error reports without you in them
When something breaks, the report we receive carries nothing about who you are.
Who helps us run Budgetsplit
A small number of providers, all named in our privacy policy.
- SupabaseDatabase and sign-in, in Frankfurt, Germany
- VercelHosting for this website, the web app and our API
- MailjetEmails such as invitations and password resets, in the EU
- SentryError reports without personal details, in the EU
- GoogleOnly if you choose to sign in with Google
Your data, your rights
- Download everything we hold about you, as a file
- Export a group's entries as a CSV file
- Delete your account at any time
- Ask us anything about your data: we answer within one month
What we don't do yet
Budgetsplit is not end-to-end encrypted. It's on our list, starting with personal spaces. Until then, we protect who can reach the database: only our API can, and only for the person who is signed in.
Found a security issue?
Please tell us privately at contact@budgetsplit.app before telling anyone else. We'll reply quickly and keep you posted while we fix it.