Privacy Policy
Last updated 29 August 2026
Your financial data is personal, and we treat it that way. This policy explains what Snugtab collects, why, how we protect it, and the choices you have. We do not sell your data and we do not run advertising.
1. Information we collect
Account details you provide (your name, email, a hashed password, and optionally a gender and an avatar) and the data you enter — expenses, categories, budgets, ledgers, notes, comments, reactions, chat messages and activity events. Receipt images you upload are STORED as attachments on the entry, not just scanned and discarded. If you link WhatsApp, we store the phone number you verify. If you enable notifications, we store a push token per device so we can deliver them. We also record basic usage events (sign-in, sign-out, page views and their paths, and feature use) to understand how the app is used and to operate the admin console — never for advertising. When you use AI features such as natural-language entry or receipt scanning, the text or image is sent to our AI provider to generate a structured result; it is not used to train models.
2. How we use it
Your data is used only to operate Snugtab: to display your journal, power budgets, trends, splits and settlements, generate recurring and scheduled entries, keep your ledger in sync with members, run the activity feed, and deliver AI-assisted features. We never use your entries for advertising or sell them to anyone.
3. Encryption of sensitive entries
Any entry you mark as private has its amount and details sealed with AES-256-GCM. The key is derived from your password using PBKDF2 with a per-entry salt and is never stored, so what we hold at rest is ciphertext we cannot read. To be precise rather than flattering: this is not end-to-end encryption. Sealing and unsealing happen on our servers, so your password and the plaintext pass through them in memory for the moment it takes to complete the operation. It protects the stored data and anyone who might reach it; it does not put the contents beyond our reach at the instant you unlock them.
4. How your account is protected
Passwords are hashed with bcrypt and never stored in plain text. Sessions use signed JWTs: you are automatically signed out after a period of inactivity (configurable in Settings), and every session cookie has an absolute lifetime cap of 15 days. Every database query is checked against your ledger membership, so you can only ever read or write data for ledgers you actually belong to.
5. Who can see your data
Everything in a shared ledger is visible to the members of that ledger, and chat messages to all current members of the ledger they were sent in. A small number of authorised staff can access account data through an internal admin console — used for support, abuse investigation and legal requests, gated behind a second authentication step, and every action is written to an audit log. We do not sell your data or share it with outside parties except with the service providers listed below, or where required by law.
6. Your choices
You can edit, clone or delete any entry at any time, and export your full journal to CSV. Deleting an entry in the mobile app moves it to a recycle bin so it can be restored from the activity feed; it is removed for good when the bin is cleared or the entry is permanently deleted. To delete your account, use Delete Account in Settings → Account, on the web or in the app. This removes your profile, the entries you paid for, your receipt uploads, and any ledgers where you were the only member; ledgers shared with others survive and ownership passes to another member. You may also request access to, correction of, or a copy of your data, or object to a particular use, by writing to us.
7. Service providers
We do not sell your data. We do rely on a small number of providers to run Snugtab, each of which processes only what their function needs: Neon (database hosting), Vercel (application hosting and storage for uploaded receipt images), Resend (transactional email such as codes, digests and notifications), Expo (delivery of push notifications), and an AI provider for natural-language entry and receipt scanning. These are processors acting on our instructions, not parties we share your data with for their own purposes.
8. How long we keep things
Your entries and ledgers are kept for as long as your account exists. Notifications are purged after 21 days. Entries you delete in the mobile app sit in a recycle bin until it is cleared. When you delete your account we remove your data as described above and retain only a pseudonymous record — a one-way hash of your email address, the account’s standing when it closed, and the reason — so that an account closed for abuse cannot simply be recreated. That record holds no name, email or content: it is kept for 30 days for an account in good standing, and up to two years where the account was blocked or suspended, then deleted automatically.
9. Age
Snugtab is not directed at children and is not intended for anyone under 13 (or the minimum age of digital consent where you live, if that is higher). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
10. Changes to this policy
When we change this policy in a way that affects what we collect, why, who receives it, or how long we keep it, we will show you a summary of the change in the app and on the web the next time you sign in, and record the version you were shown. Minor corrections such as typos or clearer wording will not interrupt you.
11. A note on encrypted entries
Because encryption keys are derived from your password and never stored, resetting your password means previously encrypted entries can no longer be decrypted. Keep your password safe — or export your data before a reset if you need access to encrypted records.
12. Contact
Questions about privacy? Reach us at hello@snugtab.com and we will be glad to help.
This page is provided for general informational purposes and does not constitute legal advice.