It stays on your devices
Receipts, budgets and photos live on your Mac and your paired iPhone. Without the optional account, none of it is stored on a WholeBudget server.
Short version below. The privacy policy has every detail.
Receipts, budgets and photos live on your Mac and your paired iPhone. Without the optional account, none of it is stored on a WholeBudget server.
The iPhone syncs with your Mac over your home network, encrypted, and trusts only the Mac it was paired with. That sync never passes through our cloud.
The account is optional and still in testing. If your household uses it, what it syncs is encrypted on your devices with a key we never receive, so we can’t read it. It is stored in Canada.
With your key, a request goes straight to your provider. With Plus, it passes through WholeBudget AI, which doesn’t store the photo or the text. OpenAI, Anthropic and TypeSafe process requests in the United States.
No analytics, no ads, nothing sold. A crash report is sent only after a crash and only if you say yes. Delete the data on your devices, or delete your account in the app.