dumblemon.Let’s talk

APPSSimple Budget

SIMPLE BUDGET / PRIVACY

Privacy Policy — Simple Budget

Effective

Who we are

Simple Budget is made by Dumb Lemon, an independent software studio (“we”). This policy explains what the app does with your information. Questions about it go to hello@dumblemon.com.

Summary

  • No analytics, no ads, and no tracking.
  • You sign in with Apple. Your budget is stored on our server so it syncs between your devices.
  • Connecting a bank is optional. You sign in to your bank through Plaid, and we never see your bank login.
  • Delete your account in the app at any time, and your data is deleted from our server straight away.

We don’t sell or share your data, and we don’t use it for advertising. We use it only to run the app for you.

Data the app uses

Your account: an identifier from Apple, and your email if you share it
WhyTo sign you in and keep your budget yours. If you choose “Hide My Email”, we get a private relay address from Apple instead.
Where it goesStored on our server. Also handled by Cloudflare.
How longUntil you delete your account.
Sign-in sessions: your device’s name and when you signed in
WhyTo keep you signed in on each device.
Where it goesStored on our server. Also handled by Cloudflare.
How longUntil you sign out on that device or delete your account. A session you don’t use for 60 days stops working.
Your budget: accounts and balances, categories, plans, transactions, payees, notes, repeating transactions, and rules
WhySo your budget syncs between your devices and is safe if you lose your phone. A copy is kept on your iPhone so the app works offline.
Where it goesStored on our server. Also handled by Cloudflare.
How longUntil you delete your account. Signing out removes the copy on that iPhone; the server copy stays so you can sign back in.
Bank connections, if you connect a bank: the bank’s name, account names and last four digits, balances, and transactions
WhyTo import your transactions and balances. Plaid sends them to our server, and we keep a Plaid access key, encrypted, so we can fetch new ones.
Where it goesStored on our server. Also handled by Plaid, Cloudflare.
How longUntil you disconnect the bank or delete your account. Either one also removes the connection at Plaid. Transactions already imported stay in your budget until you delete them or your account.
Your bank login
WhyTo connect your bank. You enter it in Plaid’s own screen, never in ours.
Where it goesSent to Plaid. Not to us.
How longPlaid handles it under its own policy.
Purchases you log with Siri or an Apple Pay automation
WhyTo add them to your budget. Siri and Shortcuts pass the app the amount, payee, and card name; the app saves them as a transaction like any other.
Where it goesStored on our server. Also handled by Cloudflare.
How longPart of your budget, as above.
Server request logs: your IP address, the request, and any error
WhyTo keep the service running and fix problems.
Where it goesStored on our server. Also handled by Cloudflare.
How longKept by Cloudflare for up to 7 days.
Settings and Quick Log tiles
WhyTo remember your choices, such as appearance, and the purchases on your widget.
Where it goesStays on your device.
How longUntil you remove the app.
Transaction exports
WhyWhen you export a CSV, it’s made on your iPhone and goes only where you share it.
Where it goesStays on your device.
How longUntil you delete the file.

Third-party services

These services receive only what’s listed here, and only to provide the feature described. Their own terms and privacy policies also apply.

Permissions

Simple Budget doesn’t ask for any permissions.

Keeping and deleting your data

  • Disconnect a bank: your profile → Accounts, then swipe left on the bank and choose Disconnect. It’s also removed at Plaid.
  • Remove your budget from one iPhone: your profile → Sign Out.
  • Delete everything: your profile → Delete Account. Your account, every budget you own, and your bank connections are deleted from our server and from Plaid.
  • Backup copies that Cloudflare keeps so our server can recover from a failure expire within 30 days. We never use them to bring back data you deleted.

When you delete your account, we delete your data from our server straight away. If you can’t open the app, email us and we’ll help you delete it.

Security

  • Everything between the app and our server travels over encrypted connections (HTTPS).
  • Only you, signed in to your account, can read your data through the app. We look at it only if you ask us to help with a problem.
  • Data on your phone is protected by your device’s own security, such as its passcode and encryption.
  • Your bank login goes straight to Plaid. The app and our server never see it.
  • Plaid access keys are encrypted on our server and never sent to a device.
  • Sign in with Apple means there’s no password of ours to steal.

More detail, and how to report a security problem, is on the security page.

Children

The app isn’t meant for children under 13, and we don’t knowingly collect personal information from them. If you think a child has made an account, email us and we’ll delete it.

Changes to this policy

If our practices change, we’ll update this page and its effective date before the new version of the app is released. We won’t start collecting new data without updating this policy first. This version is effective October 31, 2026.

Contact

Dumb Lemon
hello@dumblemon.com