Privacy Policy

Last updated: October 11, 2026

BalmyMoney is a family budgeting app for people in Canada. This policy explains what personal information we collect, why we use it, who processes it for us, how long we keep it and what choices you have. BalmyMoney is operated by [Legal name], [Business address], Canada ("we", "us"). Questions about privacy go to [email protected].

In short: we use your information only to run BalmyMoney for you and your family. We have no ads, we do not track you across other apps or websites, and we never sell or rent your personal information. Our access to your bank is read-only.

1. What we collect

Your account

• Your name and email address, and how you sign in: a one-time code by email, Sign in with Apple or Sign in with Google. If you choose Apple's "Hide My Email", we receive only Apple's relay address.
• Your family: the name and email of each person an admin invites, and their role (admin, member or viewer).

Your bank data, through Plaid

• When you connect a bank, Plaid sends us your accounts' names, types and last four digits, their balances and credit limits, and your transactions: date, amount, merchant, the bank's description and category.
• Only if you allow it for a bank: your credit cards' statements — statement balance, due date and minimum payment.
• We never see or store your bank username or password. You sign in to your bank inside Plaid's own screen.

What you choose to add

• Bank alert emails you forward to your BalmyMoney address (the "Instant purchases" feature): we read the purchase from the alert — amount, merchant, the card's last digits, date and time — and keep those fields and a short log of each delivery. We do not keep the email itself.
• Statement files you import (CSV, OFX or QFX): we keep the transactions read from them, not the file.
• What you set in the app: categories, names for your cards, budgets and savings goals, which payments are obligations, refunds you are waiting for, and what you tell Balmy AI about money your bank has not sent yet.
• Your Balmy AI chats, if you turn Balmy AI on.

Subscription and device

• Whether your family has an active subscription and its status, from Apple through RevenueCat. Apple handles payment; we never receive your card details.
• A device key the app uses to fetch your notifications. Your app PIN and Face ID never leave your phone.
• When you dictate a question, your phone's speech recognition (Apple) turns your voice into text; we receive only the text.

We do not use advertising or analytics tools, and we do not collect your location, contacts or photos.

2. How we use it

• To run the app: show your family's spending, balances, budgets and forecasts; keep your bank data up to date; match forwarded alerts with your bank's purchases; and send the notifications you choose.
• To share within your family according to each person's role.
• To answer your Balmy AI questions, if you turn it on.
• To give you support, keep the service secure, prevent abuse and meet our legal obligations.

We do not use your information for advertising, and we do not build profiles of you for anyone else.

3. Balmy AI

Balmy AI is optional and off until you allow it. To answer a question, we send Anthropic's Claude model the dates, amounts, stores and categories of the purchases you can see in the app, your cards' names, balances and statements relevant to the question, and your question. We never send your bank sign-in, full card or account numbers, or purchases hidden from you.

While Balmy AI is on, the same model may also read the text of a forwarded bank alert our rules could not read (up to 4 KB), and the first rows of a statement file you import when our rules cannot tell its columns. Anthropic processes this data to produce the answer and does not train its models on it. You can turn Balmy AI off and delete your chats at any time in Chat history.

4. Who processes your information for us

We use these service providers. Each may process your information only to provide its service to us.

Connecting a bank is also subject to Plaid's End User Privacy Policy. These providers store or process information outside Canada, including in the United States, where it may be accessible to courts and authorities under local law.

5. Sharing within your family

BalmyMoney is built for households. Members and viewers see the family's purchases and balances; admins can hide some purchases from others and manage the family. Your Balmy AI chats are visible only to you. We share your information with no one outside your family except the providers above, or when the law requires it.

6. How long we keep it

• We keep your account and your family's data while your account exists, so the app keeps working.
• Purchases read from forwarded alerts are removed 60 days after they are matched with your bank's purchase or expire, the log of alert deliveries after 90 days, and an unconfirmed email-forwarding link after 7 days.
• When you delete your account in the app, we remove your sign-in and disconnect the banks you connected at Plaid. If you are your family's last admin, the whole family and all its data are deleted. Otherwise your family keeps the purchases already brought in from your banks.
• Copies in our providers' backups are deleted as those backups expire.

7. Your choices and rights

• See and correct your information in the app, or ask us for a copy at [email protected].
• Delete your account any time: Settings → Account → Delete account.
• Withdraw consent: turn Balmy AI off, disconnect a bank in the app or at my.plaid.com, or stop forwarding bank alerts.
• We answer requests within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

8. Security

Data travels encrypted. Bank access tokens are kept apart from the rest of the data, where the app cannot reach them. Each family can read only its own data, and the app can be locked with a PIN or Face ID. No system is perfectly secure, so please tell us at [email protected] if you notice anything wrong.

9. Children

BalmyMoney is for adults managing a household's money. It is not intended for children under 16, and we do not knowingly collect their personal information.

10. Changes

We will post any change to this policy on this page with a new date, and tell you in the app before a significant change takes effect.

11. Contact

[Legal name], [Business address], Canada · [email protected]