Where your data is stored
Your data is stored with DigitalOcean in the EU, the app and database in Frankfurt, Germany, and uploaded files in Amsterdam, the Netherlands. Every connection to Balans.finance uses HTTPS.
Kept apart from other accounts
Your financial records, such as accounts, transactions, categories, budgets, receipts and imports, are stored with your account, and the database itself refuses to return them to any other account. That check sits beneath the app's own permission checks, so a mistake in those checks returns nothing rather than someone else's records.
What is encrypted
Before they are stored, the app encrypts your name, the email address on your account and your country; the names of your accounts, categories and merchants; account descriptions and merchant notes; and the lines of the bank statements you import.
Amounts, dates, currencies and the description shown for each transaction, including one brought in from an imported statement, are not encrypted this way. They are protected by the database's access controls and by the separation between accounts described above.
Signing in
There is no password to steal or reuse. You sign in with a one-time code sent to your email, or with Google or Apple, and a web sign-in lasts 90 days at most.
An AI assistant you connect reaches your data only after you approve it, and you can disconnect it at any time under Connected apps.
Your bank login stays with you
Balans.finance never connects to your bank and never asks for your bank login. You choose which statement file to upload, and the file is deleted once the import no longer needs it.
Receipt photos
Receipt photos are held in private storage that only you can open once you are signed in, and each one is deleted once it has been read. A photo that could not be read is kept so you can try again, until you delete the receipt. Location and camera data are removed before a photo is stored or sent to be read.
What AI models see
Some features send data to AI models: a receipt photo or a sample of a bank statement goes to OpenAI, and single imported statement lines go to TypeSafe to match them to transactions you recorded. Account and card numbers are masked before a statement is sent. We ask OpenAI not to store the requests; it may still keep them for up to 30 days to check for abuse, and does not use them to train its models. TypeSafe does not use them to train its models either. The Privacy Policy lists each provider and what it receives.
Taking your data with you
Under My Data you can download everything your account holds as one spreadsheet. The download stays available for 7 days.
Deleting your data
Also under My Data, you can delete all your financial data and keep the account, or delete the account itself. Either one asks for a code we email you. Deleting the account cancels a paid subscription first, so you are not charged again.
Reporting a security problem
If you find a security problem, write to support@balans.finance.