Privacy Policy

1. What this covers

This policy explains what information Bill & Debt Snowball, operated by Buried Fables LLC ("we," "us"), collects when you use the app, why we collect it, who helps us run it, and what control you have over it. By using the app, you agree to this policy.

2. Information you provide

When you use the app, you may give us:

• Account information: your email address and password, and optionally your name, the name you'd like us to call you, a profile photo, and a phone number. We also keep your time zone (detected from your browser when you set up, and changeable in Settings) and a record of which version of our terms you accepted and when.
• Financial information you enter yourself: income sources, bills, debts (including any amount you mark as past due, any payment arrangement you enter, and which bills or debts you mark as a priority), budget categories and amounts, savings accounts and contributions, goals, savings plans you make in "Can I Afford It" (the purchase's name, price and date, the pace you choose, and money you record as taken out of savings for it), net worth accounts and snapshots, money you set aside from one paycheck for a later one (the two paydays and the amount), notes you write in your Monthly Review, and any other figures you type into the app. We do not connect to your bank accounts, pull your transactions, or receive this data from anywhere except what you enter yourself.
• Files you import: if you use "Add bills & debts from a file," your spreadsheet or bank file is read on your own device and is never uploaded to us. Only the bills and debts you choose to keep on the review screen are sent and saved, like anything else you enter.
• Your settings: for example your color theme, reminder and email preferences, and which cards show on your Overview and in what order.
• Two-factor authentication: if you enable it, a shared secret used to verify codes from your authenticator app.
• Goals check-in: if you fill it out, your answers (what you're working toward, changes coming up in your life, and how often money runs short before payday), and whether you asked us to remind you later or not show it again. We use them only to suggest tools and plans in the app. You can change or delete them any time in Settings → Your goals; they're included in your backup and deleted with your account. We don't share them or use them for advertising.
• Where you're signed in: for each device signed in to your account, the kind of device and browser (for example "Safari on iPhone"), its approximate city, state and country (worked out from your internet connection when you sign in or use the app; we don't store your IP address), and when it signed in and was last active. You see this in Settings → Security, where you can sign out any device.
• Plan and billing information: your plan, and, if you subscribe, your Stripe customer record and subscription status. Your card details are entered on Stripe's own page; we never see or store your full card number. Stripe also collects your billing address (at least your country and ZIP code) to work out any sales tax. If we give you a free trial, we keep its end date.
• Questions you ask the AI assistant: your questions, its answers, and any thumbs up or down you give. For each answer we also record how much text the AI processed and what it cost us, so we can keep to our spending limits. If you add a picture to a question (such as a screenshot or a photo of a bill), we don't store it: it's sent to Anthropic with that question, and the chat only notes that a picture was shared. If you then choose "Report a problem" from the chat, its pictures are added to the report as screenshots, which you can remove before sending.
• Reports and messages to us: if you use "Report a problem," the category, your message, the page you were on, up to five screenshots you choose to attach, and, if a page just failed for you, its error code. If you email us, we keep that email.
• Launch list. If you ask on our site to hear when sign-up opens, we keep your email address (and which plan you tapped, if any) only to send you that one email. We don't share it or use it for anything else. You can remove it any time with the link in our confirmation email, and we delete the list after the launch email goes out.

3. Information we collect automatically

When you're signed in, we log which pages of the app you visit and when — for example, that you opened the Debts page — and whether you're on a phone, tablet or computer (worked out from your browser, without storing the browser details themselves). We also count a few actions: that a Can I Afford It check showed "yes", "tight" or "no" (never the amount or what it was for), how many items you saved from Add bills & debts from a file, your choice on the time-zone note, that a reminder email was sent to you, and that you unsubscribed from an email. This is stored in our own database, tied to your account, and used only to understand which parts of the app people actually use so we can prioritize what to build next. It's never used for advertising and doesn't involve any third-party analytics or tracking service.

We also keep a private log of security-relevant events (for example, a change to an account's plan or role) so we can spot tampering. To slow down password guessing, we count sign-in, sign-up, password-reset, two-factor and current-password attempts for each IP address, email address or account; these counters store only a one-way scrambled code (not the address itself) and are deleted after about a day. Our hosting provider keeps standard server logs. If the app hits an error, an error report may be sent to our error-monitoring service; before it is sent we remove your account details, cookies, form contents, and email addresses, and the report keeps only the technical error and the page address without its query string. We also keep a short technical record of errors (the error, the page address and a code) so a report can be matched to it. It's deleted after 30 days.

Your in-app inbox keeps the messages we send you (about new features, changes to your plan or our policies, and your account, such as a declined card or a trial ending) and whether you've read or cleared each one. When something about your account needs attention, such as a declined payment or a trial or demo ending, we also note it on our own internal to-do list so we can follow up with you.

4. How we use it

Mainly, to run the app for you — computing your available cash, your debt payoff plan, your budget, and everything else the app shows you. We also use it to sign you in and keep your account secure; to bill you if you subscribe; to send you the emails described below; to respond to reports and fix what you reported; to answer the questions you ask the AI assistant; and page-visit data to understand overall usage and decide what to build next. We do not use your information for advertising and we do not sell it. We share it only with the service providers listed below, who help us run the app.

5. Who helps us run the app

We use these providers. Each one handles your information only to provide its service to us.

• Supabase — our database, sign-in system, and file storage (profile photos and report screenshots). Your password is never stored in readable form; Supabase's authentication system handles it.
• Vercel — hosts the app, so your requests pass through it, and it keeps standard server logs.
• Stripe — processes payments and holds your billing records. Stripe keeps payment records for as long as the law requires.
• Resend — sends our emails (it receives your email address, your first name, and the content of each message).
• Cloudflare and our email provider — Cloudflare manages our domain and forwards messages sent to our support address to our mailbox, where they are stored.
• Cloudflare Turnstile — the "are you human?" check on the log-in, sign-up and password forms (and when you confirm your password in Settings). To tell people from bots, Cloudflare receives your IP address and technical details about your browser and device while the check runs. It doesn't see what you type into our forms, and we don't use it for advertising or tracking.
• Anthropic — runs the AI assistant. Only when you ask it a question, ask it to fill in a bill, debt or savings account, or tap Walk me through my plan, we send Anthropic your message (and any pictures you add to it), the recent messages in that chat, the Help articles that match, and a summary of the figures you've entered (such as the names, amounts, and due dates of your income, bills, debts and savings, and your payoff plan). That summary includes the names you typed for those entries (and the titles of your savings plans). We don't send your email address, your name, your password, or any payment details. Under its commercial terms, Anthropic doesn't use this data to train its models, and it keeps it only for a limited time under its own policies (for example, to detect misuse).
• GitHub — where our code is kept. To fix a problem you report, we may share it with Anthropic without the details that identify you, and use Anthropic's AI to suggest a reply, also without them. We may also use Anthropic's AI coding tool on our own computer to look into a report; it can then read the whole report, including your name and email.
• Sentry — error monitoring, with your personal details removed from each report as described above.

We don't use any advertising, analytics, or tracking services. The page-visit logging described above is entirely first-party: it lives in our own database.

6. Emails we send

We send emails needed to run your account: invitations, password resets, security notices, billing messages, and confirmations of reports you send. If you're invited with a code, we keep a record of that code: the address it was emailed to (if it was emailed), any short note we added about the invitation, and when it was used, so we can tell whether an invitation was accepted. If you turn them on, we also send bill and goal reminders, a single reminder to finish setting up if you stopped partway through, and occasional product updates. Reminders and updates can be turned off any time in Settings, or with the unsubscribe link in the email. Account and security emails can't be turned off while you have an account. Reminder emails contain the bill or goal names you entered. Emails are sent in English.

7. How it's protected

• All traffic between your device and the app is encrypted (HTTPS).
• Data is encrypted at rest by our hosting provider.
• Every table in the database is locked down so your account can only ever read or write its own data — not other users'. Sensitive account settings, such as your plan, can only be changed by our own servers.
• You can enable optional two-factor authentication for your login.
• Settings → Security shows every device signed in to your account and lets you sign out any one of them, or all of them at once.
• Report screenshots are stored privately and are only visible to us. Screenshots you upload but don't send are deleted after a day.

No system is perfectly secure, and we can't guarantee absolute security — but we don't cut corners on the basics above.

8. Your control over your data

• Download a backup: the Pro plan lets you download your financial data — income, bills, debts, budgets, goals, set-asides, and more — as one backup file (JSON), or one part as a spreadsheet (CSV), from Settings → Data. You can bring a backup into another account with "Restore a backup" on any plan. If you're on another plan and want a copy of your data, contact us. Issue reports aren't included in the backup, since they're support correspondence rather than financial data.
• Correct: update your profile, or edit or delete any bill, debt, budget item, or other entry, any time.
• Emails: turn reminders and product updates off in Settings.
• AI assistant chats: delete any chat with "Delete chat" in the assistant. Its questions and answers are erased right away; we keep only a record, with no text, of what each answer cost and when, which our spending limits count.
• Delete: permanently delete your entire account and everything in it from Settings, including your photo and any screenshots. If you have a subscription, deleting your account ends it right away and removes your billing profile. This is irreversible — once confirmed, we cannot recover it, even on request.

9. Cookies and browser storage

We use essential cookies to keep you signed in and to remember your language setting (the app is English-only for now). We also store a few choices in your browser: your light or dark theme, whether your Focus Debt's progress shows as a ring or a bar, whether you kept your time zone, and which payoff method you use (Snowball or Avalanche, so our maintenance page can show the matching picture, even after you log out). If you tap “Save this” on one of our free tools (the debt snowball calculator or the paycheck planner), what you typed there is kept in your browser for up to 30 days, so it can be added to your account when you sign up. It isn't sent to us unless you choose to add it, and you can remove it any time with “Don't add them”. For the current tab only, we also note that you closed a maintenance notice. The app also keeps a small offline page so it can tell you when you're not connected. We don't use cookies for advertising or tracking, and we don't use any third-party analytics.

10. Data retention

We keep your information for as long as your account exists — including page-visit logs, issue reports, and AI assistant chats (until you delete them). If you delete your account, your data is permanently removed from our systems right away, and we don't keep it for later recovery. Copies may remain for a limited time in database backups (ours or our providers') until they expire; Stripe keeps payment records as the law requires; and emails you sent us stay in our support mailbox until we delete them. Security-log entries that identify an account only by an internal ID may be kept. Records of where you're signed in are deleted after 90 days without use; one you signed out from another device is kept until that device is logged out (at most 400 days). If you were invited, the invitation record (the address it was emailed to, any note we added, and when it was used) is kept after your account is deleted until we remove it.

11. Children's privacy

Bill & Debt Snowball is not intended for anyone under 18, and we don't knowingly collect information from children.

12. Changes to this policy

If this policy changes, we'll update the date at the top of this page. If a change is significant — for example, adding a new service that processes your data, like bank-linking — we'll make that clear before it takes effect.

13. Contact us

Questions about this policy or your data? support@mysnowballplan.com.