Privacy Policy
Last updated 24 September 2026
This policy explains how Unladen Software Pty Ltd, ABN 18 700 213 181 (“Unladen Software”, “we”, “us”) handles personal information in connection with Unladen Money (the “Service”), a personal finance application. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
- Your email address and password, and the authenticator enrolment used for two-factor sign-in. A display name if you set one.
- The financial records you enter or import: accounts, transactions, categories, rules, assets, liabilities, valuations, balance-sheet snapshots and the assumptions behind your projections. The month and year of your birth if you enter them, used only to set a projection's horizon by age.
- Technical information: sign-in events, IP addresses and service logs, used for security and troubleshooting.
- Support correspondence when you contact us.
The Service uses only essential cookies (your sign-in session and interface preferences). There are no advertising trackers, and we do not sell personal information to anyone.
How your records are protected
Every field that describes your life or identifies an account, such as account names and numbers, transaction descriptions, asset and liability names and notes, is encrypted before it is stored, under a key that belongs to your account alone. That key is itself held in encrypted form and is unwrapped only by the Service’s own servers while doing work for you. Amounts, dates and category references are stored in a readable form so the Service can add them up and chart them. Every unwrapping of your key, and every meaningful change to your records, is written to an append-only audit log that never contains descriptions, names or amounts.
Sign-in requires a password and a code from an authenticator app, and the database itself refuses sessions that have not passed both.
Connections you choose
- Up Bank. If you connect Up, your personal access token is stored encrypted and used to fetch your accounts and transactions. Up sends new transactions to the Service through a signed webhook. Disconnecting deletes the token and the webhook; records already imported stay.
- Your financial adviser. If you make a connection code in Settings and give it to your adviser, their practice’s software can send the Service the account numbers, balances and dates of the investment accounts they administer for you, and nothing else. You decide which asset each account updates. If you also switch on sharing for that connection in Settings, the practice’s software can read your assets, liabilities and accounts: their names, values, dates, ownership shares and a loan’s interest rate, never your notes, account numbers, transactions or holdings. Sharing is off unless you switch it on, and every read is recorded and shown to you. You can switch sharing off, or revoke the connection, at any time; what the practice read before then stays in its own records under its own privacy policy.
- Coin prices. If you hold a coin priced from a feed, the Service asks CoinGecko for that coin’s price. Only the coin’s public identifier leaves the Service, never your holding.
- Receipts. A receipt you attach to a transaction, whether shared from a scanner app, photographed or chosen as a file, is stored encrypted under your key in the Service’s file storage in Sydney; nobody operating the Service can open it. A file shared to the app but not attached to a transaction within a day is deleted. Removing a receipt, or its transaction, deletes the file. Receipts leave the Service only in the export you download for your accountant.
- Your household. If you invite someone into your books from Settings and they accept, they open the same books as you: every account, transaction, asset, liability and setting, under their own sign-in. The Service records which of you made each change. You can remove them, and they can leave, at any time; they then return to books of their own, and nothing in yours is deleted. Their email address is stored encrypted so the household list can show it.
Who else handles the data
The Service runs on Vercel and stores its data with Supabase, both in Sydney, Australia. Emails such as password resets are sent through Resend. These providers process data on our behalf under their own security commitments. Encrypted weekly backups of the database are kept for disaster recovery; their decryption key is held offline. We do not send your records overseas except as those providers may route infrastructure traffic.
Access, export and deletion
You can export everything the Service holds for you at any time from Settings, in a readable form. Deleting your account removes your records and your encryption key, after which the encrypted copies in backups cannot be read. To ask for a correction, or to delete your account, contact us at the address below.
Changes and contact
We will update this page when the Service changes in a way that affects your information, and note the date above. Questions and requests go to privacy@unladensoftware.com. You can also complain to the Office of the Australian Information Commissioner if you are not satisfied with our response.