1. Introduction
This policy explains what information blankee collects, how we use it, who we share it with, and the choices you have. It applies to the blankee app and our website. By using blankee, you agree to the practices described here.
2. Information We Collect
We collect the information you give us and a small amount of technical data needed to run the app. This includes:
• Account information: name, email, password (stored only as a secure hash), profile picture, and an optional multi-factor authentication secret.
• Budget data you enter: income and expense categories, individual entries, recurring rules, savings, credit accounts, and budget projects.
• Bank connection data (if you connect a bank): institution name, account names, account types, masked account numbers, current and available balances, and transaction history (date, amount, description, merchant, category). Banking login credentials are never seen or stored by us — they go directly to our aggregator (Quiltt).
• Notifications and feedback: messages we send you in-app, push notification tokens (if you enable push), and any feedback you submit.
• Usage and diagnostic logs: basic request and error logs used to keep the service running and diagnose problems.
3. How We Use Your Information
We use your information to operate, maintain, secure, and improve blankee. Specifically, to display your budget, sync transactions, send notifications you've opted into, respond to support requests, prevent abuse, and fix bugs. We do not use your data for advertising.
4. Bank Connections
If you choose to link a bank account, the connection is provided by Quiltt, a third-party financial data aggregator. We never see or store your banking login credentials. The connection is read-only — we cannot move money or initiate transactions on your behalf. Transaction details may be enriched (for example, with merchant names and category labels) by Ntropy, a service used by Quiltt. You can disconnect any linked account from your profile at any time.
5. Service Providers
We use a small number of trusted service providers to run blankee. They only receive the data they need to perform their service for us, and they're contractually bound to protect it.
• Amazon Web Services (AWS) — application hosting and database storage (US West region).
• Quiltt — bank account connections and transaction data.
• Ntropy — transaction enrichment (categorization, merchant identification), accessed via Quiltt.
• Fider — public feedback and feature-request board.
• Email delivery and push notification providers used to send messages you've requested.
6. We Do Not Sell or Share Your Data
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We will only disclose your information outside of the service providers above if required by law (for example, a valid court order) or to protect the rights, safety, or property of blankee or our users.
7. Data Storage, Security, and Retention
Your data is stored on AWS infrastructure in the United States. We use TLS encryption in transit, encrypted storage at rest, salted password hashing, and offer optional multi-factor authentication. Access to production systems is limited to authorized personnel. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
When you delete your account, we remove your data from our active systems within 30 days. Residual copies may persist in encrypted backups for up to 90 days before being overwritten. We may retain limited records longer if required by law (for example, for tax or fraud-prevention purposes).
8. Your Rights and Choices
You can view and edit most of your information directly in the app. You can also:
• Disconnect any linked bank account at any time from your profile.
• Turn email or push notifications on or off in your settings.
• Delete your account, which removes your data as described in Section 7.
• Contact us at info@blankee.io for help with any of the above, or to request an export of your data.
9. California Residents (CCPA / CPRA)
If you live in California, you have the right to know what personal information we've collected about you, request a copy, request that we correct or delete it, and not be discriminated against for exercising these rights. We do not "sell" or "share" your personal information as those terms are defined under California law. To exercise any of these rights, email us at info@blankee.io. We will verify your request using the email address on your account.
10. Children's Privacy
blankee is intended for users 18 and older, or 16–17 with the permission of a parent or legal guardian. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, please contact us at info@blankee.io and we will delete it.
11. Cookies and Local Storage
We use cookies and browser local storage only for things needed to run the app — keeping you signed in, remembering your preferences (such as "don't show this message again"), and maintaining your session. We do not use third-party advertising or tracking cookies.
12. Data Breach Notification
If a security incident affects your personal information, we will notify you and any required authorities as soon as reasonably possible, in accordance with applicable law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If the changes are material, we will let you know through the app or by email before they take effect. The "Last updated" date below reflects the most recent revision. Continued use of the app after changes take effect means you accept the updated policy.
14. Contact
If you have any questions about this policy or your data, contact us at info@blankee.io.
Last updated: June 1, 2026
