Privacy Policy
Last updated August 2, 2026
Our Privacy Promise in One Sentence
We don't have your financial data, so we can't sell it, share it, lose it, or hand it over.
What BalVault Stores
BalVault is desktop software that runs entirely on your computer. It stores two things locally: your SimpleFIN setup token in a SQLite database on your PC, and your account balances in a CSV file you specify. That's it. Nothing is uploaded to BalVault servers, because we don't operate servers that collect or store your financial data.
What BalVault Does Not Do
BalVault never sends your financial data anywhere except to SimpleFIN. There is no telemetry, no analytics, no usage tracking, and no crash reporting. Your balances, account names, and SimpleFIN token are never sent to BalVault, and no financial data is ever transmitted to our servers. BalVault makes exactly two kinds of network connections: to SimpleFIN's API to fetch your balances, and to our license activation service to check your activation key (see below). Nothing else leaves your computer.
License Activation
When you activate BalVault, your license key and a machine identifier (your computer's hostname and CPU model) are sent to our activation service, which runs on Cloudflare Workers. The service records how many machines a key has been activated on so we can enforce the 2-simultaneous-machine limit and detect key sharing. It does not receive your SimpleFIN token, account names, or balances. Routine license checks send only your license key. If you contact us about a lost or exhausted activation, we may ask you for your license key to verify ownership — nothing else.
Your SimpleFIN Setup Token
To fetch balances, BalVault needs a SimpleFIN setup token. You obtain this token from bridge.simplefin.org. BalVault stores it locally only, in a SQLite database on your PC — we keep no copy of it on any server. The token is only ever transmitted from BalVault directly to SimpleFIN's API, never to BalVault or any other third party. You can revoke this token at any time through your SimpleFIN account.
Your CSV Data
BalVault writes your account balances to a CSV file on your computer, at a location you choose. This file is never uploaded, transmitted, or accessed by BalVault. You control where it lives, how you protect it, and who else has access to it.
This Marketing Website
The website you're reading right now is hosted on Cloudflare Pages and does not use tracking cookies, analytics scripts, or advertising pixels. The only cookies that may be set are those required by Cloudflare (our hosting provider) and our payment processors (Stripe and PayPal) to function — for example, Stripe and PayPal may set cookies during checkout to prevent fraud. We do not use these cookies for tracking or analytics. As with any site on the internet, Cloudflare may process standard request data (such as IP addresses and access logs) to operate its network, under Cloudflare's own privacy policy.
Contact Form
When you submit a message through our support page, your message is delivered to us via MailChannels, an email delivery service integrated with Cloudflare. We use your contact information solely to respond to your inquiry. We do not add you to a mailing list, send marketing emails, or share your contact details with anyone else.
Payment Processing
Payments for BalVault are processed by Stripe (card payments) and PayPal (PayPal payments). When you purchase a license, you interact directly with the processor's secure checkout. BalVault does not receive or store your credit card number or full payment details. Stripe's and PayPal's use of your personal information is governed by their own privacy policies.
Third-Party Services
BalVault and this website depend on a small number of third-party services, each with their own privacy practices, and each of which may process data under its own policy: SimpleFIN Bridge (bank account aggregation — bridge.simplefin.org), Stripe (card payment processing — stripe.com), PayPal (PayPal payment processing — paypal.com), Cloudflare (website hosting and the license activation service — cloudflare.com), and MailChannels (email delivery for contact form submissions — mailchannels.com). Their handling of your information is governed by their own policies, not ours. We encourage you to review them if you have questions.
Data We Don't Have
Because all your financial data remains on your computer, BalVault cannot access it, cannot disclose it in response to legal requests, and cannot lose it in a data breach. We have no database of user balances, no server logs of your financial activity, and no backup of your SimpleFIN token. If you lose your token or CSV file, we cannot recover it for you — because we never had it.
Children's Privacy
BalVault is not directed at children under 13, and we do not knowingly collect personal information from children. Since BalVault collects no personal information at all, this is largely academic — but we state it for completeness.
Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we'll note them here with an updated date. Since we don't have your email address or any way to contact you, please check this page occasionally.
Contact Us
If you have questions about this privacy policy or how your data is handled, reach out through our support page. We'll respond within 24 hours.