Privacy Policy
Last updated June 2026
Your financial data is personal, and we treat it that way. This policy explains what Snugtab collects, why, how we protect it, and the choices you have. We do not sell your data and we do not run advertising.
1. Information we collect
Account details you provide (your name, email, and a hashed password) and the data you enter in the app — expenses, categories, budgets, ledgers, notes, chat messages, activity events, and any merchants or descriptions you add. When you use AI features such as natural-language entry parsing or receipt scanning, the text or image you submit is sent to our AI provider to generate a structured result; we do not use this content to train models or share it beyond what is needed to serve the response.
2. How we use it
Your data is used only to operate Snugtab: to display your journal, power budgets, trends, splits and settlements, generate recurring and scheduled entries, keep your ledger in sync with members, run the activity feed, and deliver AI-assisted features. We never use your entries for advertising or sell them to anyone.
3. Encryption of sensitive entries
Any entry you mark as encrypted has its amount and details sealed with AES-256-GCM. The key is derived from your login password using PBKDF2 with a per-entry salt, so we store only ciphertext and cannot read those entries unless you re-enter your password to unlock them.
4. How your account is protected
Passwords are hashed with bcrypt and never stored in plain text. Sessions use signed JWTs: you are automatically signed out after a period of inactivity (configurable in Settings), and every session cookie has an absolute lifetime cap of 15 days. Every database query is checked against your ledger membership, so you can only ever read or write data for ledgers you actually belong to.
5. Who can see your data
Encrypted entries are visible only to you. Everything else in a shared ledger is visible to the members of that ledger and only to the extent needed to collaborate. Chat messages are visible to all current members of the ledger they were sent in. We do not share your data with outside parties except where required by law.
6. Your choices
You can edit, clone, or delete any entry at any time and export your full journal to CSV whenever you like. To delete your account and all associated data, use the Delete Account option in Settings → Account. This permanently removes your profile, entries paid solely by you, and any ledgers you created that have no other members.
7. A note on encrypted entries
Because encryption keys are derived from your password and never stored, resetting your password means previously encrypted entries can no longer be decrypted. Keep your password safe — or export your data before a reset if you need access to encrypted records.
8. Contact
Questions about privacy? Reach us at hello@snugtab.com and we will be glad to help.
This page is provided for general informational purposes and does not constitute legal advice.