Budgeture Privacy Policy

Last updated: May 8, 2026

Budgeture is a privacy-first iOS budgeting app. We do not collect, store, sell, or share any personal data.

What we don't do

No analytics or telemetry
No third-party SDKs or trackers
No advertising
No bank or financial-institution integrations
No accounts or sign-up

Where your data lives

All data you enter (accounts, transactions, budgets, attachments, etc.) is stored locally on your device using Apple's SwiftData framework. If you have iCloud enabled, your data syncs privately through your personal iCloud account using Apple's CloudKit. We have no access to it.

Optional outbound connections

If you turn on Live Prices in Settings, the app contacts Yahoo Finance to fetch current prices for the stock and crypto symbols you've added. Only the ticker symbol is sent — no personal identifier, no account information, no balances. This feature is off by default.

Optional integration: Claude Desktop (MCP)

The Mac version of Budgeture (Build 15+) includes an optional Model Context Protocol (MCP) server that lets Anthropic's Claude Desktop app read or modify your Budgeture data when you ask it to in a Claude conversation. The server is bundled inside the Budgeture app and is only invoked when Claude Desktop launches it as a local subprocess on your Mac.

Both Read tools and Write tools toggles are off by default. Enabling either requires explicit acknowledgement of a privacy disclosure inside Budgeture Settings. They can be turned off at any time in Settings → Mac → Claude Desktop, and disabling takes effect immediately — the server refuses tool calls when its toggle is off, even if Claude Desktop's config still references it.

What stays on your Mac: all of your Budgeture data. The MCP server runs locally and only opens database rows in response to a tool call from Claude.

What is sent to Anthropic: your conversation in Claude Desktop, including any data Claude reads from Budgeture to answer your question. This is the same data flow as any normal Claude Desktop conversation — the model sees your prompt and the tool result, and Anthropic processes them on its servers under its own privacy policy. We don't have a separate data-processing relationship with Anthropic; the integration uses your own Claude Desktop installation.

What never leaves: anything Claude doesn't read. Budgeture does not push data to Anthropic on its own. Your Apple ID, iCloud, full database, and any rows Claude doesn't open stay on your Mac.

Write protections: when "Write tools" is on, every action Claude attempts (add transaction, log transfer, mark subscription paid, log buy/sell trade) shows a confirmation sheet inside Budgeture before applying. The change does not happen unless you tap Approve. Decline returns an error to Claude. Closing Budgeture while a write is pending also blocks the change — write tools require the app to be running.

Permissions

Camera (optional): used only when you tap "Take Photo" or "Scan Document" on a transaction to attach a receipt. Photos are stored locally and synced through your iCloud only.
Face ID (optional): used to lock the app on launch. Apple handles biometric matching; we never receive your biometric data.

Contact

Questions or feedback: suggestions@budgeture.com