How your data is kept

Short version below. The privacy policy has every detail.

It stays on your devices

Receipts, budgets and photos live on your Mac and your paired iPhone. Without the optional account, none of it is stored on a WholeBudget server.

Your phone talks to your Mac at home

The iPhone syncs with your Mac over your home network, encrypted, and trusts only the Mac it was paired with. That sync never passes through our cloud.

The optional account is end-to-end encrypted

The account is optional and still in testing. If your household uses it, what it syncs is encrypted on your devices with a key we never receive, so we can’t read it. It is stored in Canada.

AI sees only what a feature needs

With your key, a request goes straight to your provider. With Plus, it passes through WholeBudget AI, which doesn’t store the photo or the text. OpenAI, Anthropic and TypeSafe process requests in the United States.

No tracking, and you can delete it all

No analytics, no ads, nothing sold. A crash report is sent only after a crash and only if you say yes. Delete the data on your devices, or delete your account in the app.

Read the privacy policy

Get WholeBudget

Download the Mac app now. The app updates itself when a new version ships. The iPhone app is in TestFlight, with the App Store release coming.