Privacy policy

Last updated: October 16, 2026

The short version

• Your budgets live in a database on your own computer. We never receive them unless you turn on Sync, and then only in a form encrypted on your device that we can't read.
• There are no analytics, advertising or tracking tools on this website or in the app.
• We collect only what we need to sign you in, deliver your license, run Sync and answer your emails.
• Payments are handled by Polar, our merchant of record. We never see your card details.
• You can delete your account, and everything synced to it, from your account page at any time.

Budgets on your computer

UrBudget stores each budget in a SQLite database in the app's data folder on your computer, along with its backups and exports. You don't need an account to use the app, and without Sync, your budget data is never sent to us.

The app contacts our servers only when it needs to:

• Activate or check a license. It sends the license key (or the license's ID) and, if you provide one, a name for the device, so we can confirm the license is valid and hasn't been refunded.
• Sign in and sync, if you turn on Sync (see below).

Some optional features connect your computer directly to other companies, under your own account with them, and nothing passes through us. Importing from YNAB's API connects to YNAB. The budget assistant sends your messages, the files you attach and the budget details it looks up to answer you to OpenAI or Anthropic, whichever you choose, using your ChatGPT plan or your own API key. Those companies' privacy policies apply to what you send them.

What we collect, and why

Your account (only if you create one)

An account is needed only for Sync and for seeing your license keys on this website. We keep your email address, when the account was created, and the sign-in sessions you have open (for the app, with the device name you choose, if any). We send a one-time sign-in code to your email address instead of using a password; codes expire after a short time.

Purchases

Polar processes your payment as the merchant of record and collects the details it needs for that, including your payment details, name or country where required for tax, and email address. From Polar we receive what we need to deliver your purchase: your email address, what you bought, transaction and subscription identifiers, and their status (for example active, canceled or refunded). We never see or store your full card number.

Licenses

For each license we keep the key, its status, when it was created and the email address it was bought with. When the app activates a license, we may also record when that happened and the device name the app sends, if any.

Sync (only if you subscribe)

Each device encrypts your budgets with a key made from your sync passphrase before uploading them. We store:

• the encrypted budget files and their encrypted names, which we cannot read;
• each file's size, a revision number, the time it was uploaded and the device name that uploaded it;
• a random salt and an encrypted check value that lets your devices test a passphrase. We never receive your passphrase or the key made from it, so we cannot decrypt your budgets or recover them if the passphrase is lost.

Email

We send only the email you need: sign-in codes, license keys and messages about your account or subscription. No newsletters or marketing unless you ask for them. If you write to us, we keep the conversation so we can help you.

Technical data

Like any website, our hosting provider processes your IP address and basic request information (such as the page requested, browser type and time) to deliver the site, keep it secure and limit abuse, for example by rate-limiting sign-in attempts. We don't use this to build profiles or follow you around the web.

Cookies

This website sets one cookie, and only when you sign in: ub_session, an HttpOnly session cookie that keeps you signed in to your account page. It is strictly necessary for that, and it's removed when you sign out. There are no analytics or advertising cookies.

This website loads no payment scripts. Checkout happens on Polar's own site, where Polar may use cookies or similar technologies needed to process the payment and prevent fraud; see Polar's privacy policy.

Our legal bases

Where data protection laws such as the GDPR apply, we process personal data to perform our contract with you (sign-in, licenses, Sync, support), to meet legal obligations (such as tax and accounting records), and for our legitimate interests in keeping the service secure and preventing abuse.

Who processes data for us

We use a small number of service providers, each only for the job described:

• Cloudflare hosts the website and the API, including the account database and the encrypted Sync storage. Cloudflare's privacy policy
• Polar (Polar Software, Inc.) is our merchant of record for payments: checkout, payment processing, tax, receipts, subscriptions and refunds. For payment data, Polar acts as an independent controller. Polar's privacy policy
• Resend delivers our emails (sign-in codes and license keys), so it processes your email address and the message. Resend's privacy policy

We don't sell your personal data, and we don't share it for advertising. We may disclose information if the law requires it, and we would tell you unless legally prohibited.

International transfers

Our providers may process data in the United States and other countries. Where required, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

• Account and Sync data: for as long as you keep your account. When you delete your account, we delete it along with its sessions and synced budgets.
• License and purchase records: kept so your license keeps working, and for as long as tax and accounting laws require. Polar keeps its own records as merchant of record.
• Sign-in codes expire within minutes. Checkout lookups, which show your key right after you pay, expire after two hours.
• Support emails: for as long as needed to help you, and then deleted.

Your choices and rights

You can see your account and licenses on your account page, and delete your account there at any time (Delete account, at the bottom). You can also email support@urbudget.app to ask for a copy of your data, a correction or deletion, or to object to or restrict processing. Depending on where you live, you may have further rights under laws such as the GDPR, the UK GDPR or the California Consumer Privacy Act, and the right to complain to your data protection authority. We'll answer within one month.

Deleting your account doesn't remove anything from your computer: your budgets stay where they are, and licenses you bought keep working.

Security

Everything between your device and our servers travels over HTTPS. Synced budgets are end-to-end encrypted (XChaCha20-Poly1305, with a key derived from your passphrase using Argon2id). Sign-in uses one-time codes, and the website's session cookie can't be read by scripts. We keep as little data as we can, because data we don't have can't leak.

Children

UrBudget isn't directed at children under 16, and we don't knowingly collect their personal data.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant and you have an account, we'll also tell you by email before it takes effect.

Contact

Questions or requests about privacy: support@urbudget.app.