Privacy Policy — Loaf Budget
Effective date: July 24, 2026 Provider: Moeed Faisal ("we", "us", "our") Contact: support@loafbudget.com
Loaf Budget ("the app") helps you understand your daily cost of living. We built it to collect as little as possible. This policy explains what we collect, why, and the choices you have.
1. Information we collect
Account information. When you create an account we collect your email address. If you sign in with Apple or Google, we receive your email and, optionally, your name from that provider. We do not receive your Apple/Google password.
Financial information you enter. The app stores the budgeting data you create: expenses (amounts, descriptions, merchants, notes, tags, dates, and a reimbursable flag), income, accounts, "loaves" (savings envelopes) and the "bread" groups they belong to, and cash-balance entries. This is the core content of the app and is tied to your account.
AI spend logging (only if you use it). When you use the "describe a spend" feature to log a spend in plain language, the text you enter is sent to Google's Gemini API to turn it into a structured spend (amount, date, merchant, and which loaf it belongs to). To help it map your words correctly, we also send limited context: your loaf and account names, your recently used merchant names, your currency symbol, and today's date. We do not send Google your name, email, or account identifier. If you never use this feature, nothing is sent to Google's AI — spends you enter by hand stay within the app and our database provider.
Voice input (only if you use it). If you speak a spend instead of typing it, your device's built-in speech recognition converts your speech to text. Depending on your device and OS settings this may be processed by Apple. The resulting text is then handled exactly like text you typed (including the AI step above, if enabled). We do not store audio.
Technical information. Standard information needed to operate the service (for example, authentication tokens to keep you signed in, and basic error/connection state). On your device, authentication tokens are encrypted at rest in the system keychain.
We do not collect: advertising identifiers, your location, your contacts, or analytics/usage-tracking data. The app contains no third-party analytics, advertising, or tracking SDKs. Reminders, if you enable them, are scheduled locally on your device — we do not run a push-notification server.
2. Bank data (Plaid) — optional, Baker's Club only
Loaf Budget offers optional bank-account linking through Plaid, a bank-data connection service. This feature is available only to Baker's Club subscribers, and the app is fully usable without ever linking a bank.
We never see your bank login. When you link a bank, you enter your bank username and password inside Plaid's own interface, not ours. We never receive or store your bank credentials.
Access is read-only. Linking a bank cannot move money, initiate payments, or make transfers of any kind. It only lets us read the account information described below.
What we receive from Plaid: for each account you choose to link — the account's name, mask (its last few digits), and type (e.g. checking, savings); its balance; and its transaction records (date, amount, description, merchant, and category).
What we use it for: showing you your linked accounts' balances, and showing you their transactions so you can review them and, if you'd like, import one into your budget. Nothing from a linked bank is ever added to your budget automatically — every import is a deliberate action you take.
Plaid as a service provider. Plaid processes this data on our behalf and has its own privacy policy covering how it handles your information: Plaid's end-user privacy policy. We do not sell bank data, share it for advertising, or use it to track you — the same rule that applies to the rest of your information (see Section 5).
Removing bank data. You can unlink a connected bank at any time from within the app, which removes that institution's account and transaction data from our systems. Deleting your account removes any remaining bank data as well (see Section 6).
3. How we use your information
- To provide the app: authenticate you, store and sync your budget across your devices.
- To parse a spend you describe in words or voice, when you choose to use that feature.
- To show balances and transactions for any bank account you optionally link via Plaid, so you can review them and choose whether to import them into your budget.
- To operate and secure the service (e.g. keep you signed in, prevent unauthorized access).
- To respond to support requests you send us.
We do not use your information for advertising, profiling, or tracking across apps or websites, and we do not sell your information. This includes bank data from Plaid.
4. How your information is stored and protected
Your data is stored with our cloud database provider, Supabase (hosted in the United States). Access is restricted per-account using row-level security, so your data is only accessible to your authenticated account. When signed out, the app runs on local device storage only.
5. Sharing and disclosure
We do not sell or rent your information. We share it only with service providers that operate the app on our behalf, and only as needed:
- Supabase — database, authentication, and sync.
- Google (Gemini API) — only when you use AI spend logging, to parse the text you describe into a structured spend (see Section 1). Google processes this input under its own API terms.
- Apple and Google — only if you choose to sign in with them (identity). This is separate from the Gemini API above.
- Plaid — only if you choose to link a bank account, to retrieve the account and transaction data described in Section 2. See Plaid's end-user privacy policy.
We may disclose information if required by law, or to protect the rights, safety, or security of our users or the service.
6. Data retention and deletion
We keep your data for as long as your account exists, and we review this policy and our data-retention practices at least once a year, or sooner if what we collect changes.
Bank data. If you link a bank account, its account and transaction data is kept only for as long as that link stays connected. You can unlink a bank at any time from within the app, which removes that institution's data from our systems.
You can delete your account at any time from Settings → Delete account in the app, or from loafbudget.com/delete-account. Deleting your account permanently removes your account and all associated data — expenses, income, loaves, accounts, cash history, and any linked-bank data — from our systems. This cannot be undone.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You can export your data or delete everything yourself from within the app (Settings → Delete account), or contact us at support@loafbudget.com for any request.
8. Children
The app is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their information.
9. Changes to this policy
We may update this policy from time to time. We will update the "Effective date" above and, for material changes, provide notice within the app.
10. Contact
Questions about this policy or your data: support@loafbudget.com.