Privacy Policy

This policy describes what information Arbikeep collects, how it's used, and who else (if anyone) has access to it.

Information I collect

Account information: your email address, used to sign you in and to contact you about your account. If you sign in with Google instead of a password, Google confirms who you are and passes me your email address and basic profile information. I never see your Google password.

Your financial ledger data: everything you enter or import, including accounts, transactions, categories, budgets, reminders, rules, and goals. This is the core content of the app, and it's stored so it can be shown back to you and synced across your own devices.

Linked bank data (only if you choose to subscribe to Arbikeep Sync): if you connect a bank or credit card account through Plaid, I store a Plaid-issued access token. It's used only to fetch your data from Plaid on your behalf, and it's never exposed to Arbikeep's own web app or visible in your browser. I also store the transactions and masked account identifiers (e.g., last few digits, never a full account or routing number) that sync from it. I do not receive or store your online banking username or password. That's handled entirely by Plaid.

Billing information (only if you choose to subscribe to Arbikeep Sync): your subscription status and renewal date, and identifiers issued by Stripe to reference your customer/subscription record. I do not receive or store your card number or other payment credentials. Stripe's own hosted checkout and billing portal handle that directly.

Diagnostic/crash data: if the app encounters an error, I automatically log the error message, a technical stack trace, the page you were on, and your browser's user-agent string, to my own database, just to help me find and fix bugs. This is first-party only: it goes to Arbikeep's own systems, not to any third-party analytics company.

What I do not collect: I do not use any third-party analytics, advertising, or tracking service of any kind (no Google Analytics, no ad pixels, nothing similar), and I do not use tracking cookies. The only things stored in your browser are your own session/sign-in token, a cached copy of your own ledger (see Backups below), and local app preferences (e.g., a dismissed banner). All of it stays on your device.

How I use this information

• To provide the ledger, syncing, and reporting features you're using the app for.
• To process payments and manage your subscription, via Stripe (if you choose to subscribe to Arbikeep Sync).
• To sync your linked bank transactions, via Plaid (if you choose to subscribe to Arbikeep Sync).
• To back up your data so it can be recovered if something goes wrong (see below).
• To diagnose and fix bugs.
• To email you about your account, like verification codes, billing receipts, and service notices. Never for marketing without your separate consent.

I do not sell your data, and I do not use your financial data to train any AI model or share it with advertisers.

Backups

Your data is protected by three layers of backup:

• On your own device: your ledger is cached locally as a crash-safety backup, with rotating daily snapshots. You can also choose a folder on your own computer for Arbikeep to write additional backups to, with optional password-based encryption that only you hold the key to.
• Cloud version history: before major changes, a snapshot of your ledger is archived, with older snapshots gradually thinned (kept in full for 30 days, then weekly, then monthly, then yearly), so a mistake can be undone without keeping every version forever.
• Off-site disaster recovery: a full copy of your data is exported automatically once a week to my own backend servers, kept for 60 days, just as a safeguard against catastrophic data loss.

Who can access your data

• You, through the app.
• Me. I built and run Arbikeep myself, for support and maintenance purposes. I have database access to operate the service. I won't browse your data without your consent, except where I'm legally required to.
• Google, only if you choose to sign in with a Google account, and only to confirm who you are at sign-in, governed by Google's own privacy policy. Google never receives any of your financial data.
• Plaid, to the extent necessary to maintain your bank connection, governed by Plaid's own privacy policy.
• Stripe, to the extent necessary to process payments, governed by Stripe's own privacy policy.
• I do not share your data with any other third party, and I do not sell it.

Data export and deletion

You can export your data at any time in QIF, OFX, CSV, PDF, spreadsheet (XLSX), or a complete raw JSON backup format. See the Data Ownership Pledge for details.

You can permanently delete your account and all associated data yourself, at any time, from Preferences → Delete account. This is immediate and permanent. There is no recovery period, so export anything you want to keep first. If you'd rather I do it for you, email arbikeepsupport@gmail.com.

Children's privacy

Arbikeep is not directed at children and is not intended for use by anyone under 18.

Changes to this policy

I may update this policy from time to time. Material changes will be communicated by email or an in-app notice before they take effect.

Contact

Questions about this policy or your data: arbikeepsupport@gmail.com