Legal
Security
How the product is built to hold as little of your money data as possible, and what happens to the little it does hold.
Template copy. It describes how this app is actually built, but it has not been near a lawyer — have your own read it before you rely on it.
The design
The app is static files with no server-side rendering and no session. On the free plan there is no network call that carries your budget, because there is no network call at all after the page loads.
Sync encrypts each budget on your device with a key derived from your passphrase using a modern password-based KDF. We store ciphertext and a version number. A compromise of our storage yields blobs, not budgets.
The practice
TLS everywhere, HSTS, a strict content security policy, and no third-party script on any page that can see your data. Dependencies are few on purpose: no chart library, no component library, no analytics SDK.
Access to production is limited to the people who operate it, behind hardware keys, and every access is logged.
Reporting something
Write to security@whatisthebudget.app. You will get a human acknowledgement within one business day and an assessment within five. We will not threaten you for telling us, and we will credit you if you want the credit.
Please do not test against other people's accounts. If you need a target, make one; the free plan costs nothing and requires no account.
Questions about any of this go to the contact page. The other documents are privacy and terms.
Back to the start