Privacy Policy

We don't collect anything

Beanie Budgets has no servers, no user accounts, and no analytics. There's nothing set up to receive your data even if it tried to send any, which it doesn't. We can't see your transactions, balances, or account names, because none of it ever leaves your device.

Where your ledger lives

Your ledger is a folder of plain text files stored wherever you chose to keep it, typically your own iCloud Drive. Beanie Budgets reads and writes those files directly, the same way any app you grant folder access to would. If you sync it with iCloud, that's Apple moving data between your own devices under your own account, encrypted in transit and at rest. By default Apple holds the encryption keys for standard iCloud Drive. Advanced Data Protection for iCloud, in your Apple ID settings, can make it end-to-end encrypted so not even Apple can read it, though it isn't available to everyone; check your own device to see whether it's offered to you. Either way, Beanie Budgets isn't part of that path and has no separate copy anywhere else.

Face ID

If you turn on the optional app lock or Stealth Mode, Beanie Budgets asks iOS to confirm you're the device owner using Face ID or your passcode. That check is handled entirely by Apple's own LocalAuthentication framework: the app itself only ever receives a yes or no, never your biometric data.

Exporting your data

The CSV export feature hands the file to iOS's own Share Sheet. From that point on, where it goes is entirely your own choice, not Beanie Budgets'.

Reporting a line we couldn't read

If Beanie Budgets meets a line of your ledger it can't read, Settings lists it so you know what's missing, and offers to send us a report. That report is never the line itself. Each entry is a code saying what kind of line it was, the file and line number so you can find it in your own copy, and the shape of the line with your account names, payees, amounts and dates taken out. A cost written {1,200.00 GBP} is reported as {9,999.99 XXX}, which tells us where our parser went wrong and nothing about what you own.

Nothing is sent automatically. The report opens as a draft email or in the Share Sheet, so you can read every word of it before deciding whether to send it, and to whom.

Unlocking Pro

The optional Pro unlock is a one-time in-app purchase handled entirely by Apple's own StoreKit. Beanie Budgets never sees your payment details, they go straight to Apple. All the app itself ever stores, on your own device, is a single yes-or-no flag recording that the purchase was made.