Security, in plain English
You're trusting us with a window into your finances. Here is exactly how that window is built — every claim below restates what's already published in our Privacy Policy and enforced in the product.
Bank access is read-only
Connecting a bank is optional and goes through Plaid. We can see balances and transactions — we cannot move money, make payments, or change anything at your bank.
We never see your bank credentials
When you link an institution, your username and password go directly from your device to Plaid. They are never sent to, seen by, or stored on Budgeteer Pro's servers.
No full account numbers
We store the last four digits your bank provides — never full account or routing numbers, and never your Social Security number or government ID.
Your data is not for sale
No advertisers, no data brokers, no cross-site tracking cookies. The subscription is the business model; your data is not.
Encrypted in transit and at rest
All traffic is served over TLS, and our managed infrastructure encrypts stored data at the platform level.
Every request is authorized
Each backend request is checked against your identity, and household data is scoped per member — accounts you mark private are unreachable by anyone else, in every view, export, and report.
Bank tokens stay server-side
The token that lets us read your bank data is readable only by internal server functions. It is never returned to any app or browser.
Webhooks are verified
Incoming events from Plaid and our authentication provider are cryptographically verified before anything acts on them.
No session replay
Screen-recording is deliberately disabled in our error-monitoring tools, because this app displays balances and transaction history.
Deletion is real
Delete your account from settings on web or iOS: bank connections are revoked at Plaid, and after a 30-day grace window your data is permanently erased.
Found something?
If you believe you've found a security issue, email privacy@budgeteerpro.io and we'll respond promptly. No security program is perfect — if a breach ever affects your information, we will notify you as required by law.