Security
The safest data is the data we never ask for.
Encryption and certified infrastructure matter, and Balance has them. They are covered further down. We start somewhere simpler: what we hold about you in the first place, because nothing can leak that was never stored.
You type in what you own and what you owe, and we keep those figures. We never ask for a bank login, a card number or an account number. There is no feature that pays, transfers or trades, so there is no route from your Balance account to your money.
Balance is meant to be paid for by subscriptions and nothing else. No adverts, no referral fees, no data sold or rented. Your balance sheet will never be part of how we make money.
What we do keep is still private. The rest of this page lists all of it and how it is protected.
What we keep, and what we don't.
This is everything Balance stores about you. If it is not on the left, we don't have it.
Kept, so Balance works
- Your email address
- To sign you in and send the emails your account needs.
- Your password, scrambled
- Stored in a form that cannot be turned back into your password, by anyone, us included.
- Your name
- First and last, for your account and the greeting on your dashboard.
- Your country and time zone
- To suggest a currency and to date your history by your own day.
- Your base currency
- Pounds or dollars: the currency your totals are added up in.
- The rows you add
- Each one's name, who holds it, amount, currency, and any note you write.
- One net-worth figure a day
- Your totals on each day something changed, to draw your history.
- Your Google profile, if you use it
- The name, email and photo Google passes on when you continue with Google.
- Your email, if you join the waitlist
- Only to tell you when new features open or the full site is ready. It needs no account. To be taken off, write to admin@taplab.agency.
Never asked for
- Bank or investment logins
- Card numbers
- Sort codes and account numbers
- Passport, driving licence or other ID
- Date of birth
- Home address
- Phone number
Bank logins we hold0
How it's protected.
What is in place today, in plain terms.
Your rows are yours alone
Every row is tied to your account, and access is checked on every request. Another person's sign-in cannot open your balance sheet.
Encrypted in transit and at rest
Every connection to Balance is encrypted, and so is everything we store. Our infrastructure is independently audited and certified to recognised security standards.
Passwords we cannot read
New accounts confirm their email before they can sign in. You can skip the password altogether and continue with Google.
Prices fetched without you
When Balance looks up a share or crypto price, it asks for that price alone. Nothing about you, and not how much you hold, goes with it.
No trackers
No advertising pixels, no third-party analytics, no session recording. The only cookies are the ones that keep you signed in.
Delete means delete
Deleting your account in Settings signs you out on every device, then removes your profile, every row and every daily figure in one step. We don't keep a copy.
Questions worth asking.
Found a security problem? Email admin@taplab.agency with what you found and how to reproduce it. Please don't access other people's data or run tests that slow Balance down for others.
Report a problemBalance has no screen that shows our team anyone's balance sheet, and nothing in how we make money depends on looking at it.