Balance holds the parts of a household that two people have to keep in step: what needs
doing, what is already in the diary, what the house needs, and where the important
documents are. One place, both phones, the Mac, kept in sync.
CalendarYour real diary. Connect Google, and the calendars already on your phone appear beside it.
TasksWith who's doing them, how long they take, and what repeats.
A daily planToday's work laid into the gaps between your appointments. Worked out on your device — nothing is sent to an AI to make it.
GroceriesA list that learns the rhythm of what you actually buy, and never changes it without asking.
Notes & documentsWritten, scanned, or brought in from Google Drive and Apple Notes. Shareable by link when you want them to be.
A vaultPasswords, policies, account numbers — encrypted on your device before it ever leaves.
Privacy
Last updated 31 August 2026
The short version
Balance keeps your household's information so your household can use it. That is the
whole purpose. There is no advertising, no analytics, no tracking, nothing is sold or
shared for marketing, and nothing you write is used to train an AI model. You can delete
everything from inside the app, and when you do, it is gone.
What Balance stores
Your name and the account identifier Sign in with Apple gives us. Apple lets you hide your real email address, and Balance works perfectly well if you do.
Everything you put into the app: tasks, notes, documents, photos you attach, shopping lists, the things you own, and the household you belong to.
A copy of the calendar events Balance needs to plan around — see below.
Device tokens, so notifications can reach your phone, and nothing else about your device.
What it does not do
No advertising, and no advertising identifiers.
No analytics or usage tracking of any kind. Nobody is watching which screens you open.
Your information is never sold, rented, or shared with anyone for their own purposes.
Nothing you write is used to train an AI model — not ours, not anybody's.
Balance's daily plan is worked out on your own device. It is arithmetic, not artificial intelligence, and your day is not sent anywhere to produce it.
Your calendar
If you connect Google Calendar, Balance asks for permission to read your events and to
create the ones you make in Balance. It keeps the times and titles it needs to show your
day and plan around it. If you also point Balance at a Google Drive folder, it reads only
the folder you choose. You can disconnect at any time in Settings, which deletes the
connection and hands the access back to Google. Calendars already on your Apple device are
read on the device itself.
Balance's use of information received from Google APIs follows the
Google API Services User Data Policy,
including its Limited Use requirements.
The vault
Anything you put in the vault is encrypted on your own device, with a key derived from
your passphrase, before it is uploaded. What is stored is unreadable without that
passphrase — including to us. That also means we cannot recover it for you if you forget
it, which is the trade you are making and the reason the app says so before you start.
Who else is involved
Supabase — the database and file storage that hold your household's information, hosted in the United States (Northern California).
Apple — Sign in with Apple, and the delivery of notifications to your devices.
Google — only if you connect a Google account, and only for the calendars and the one Drive folder you choose.
Each of these holds information because Balance needs them to work. None of them is given
anything for their own purposes.
How your information is protected
In transit. Everything that moves between the app, Balance's servers, Apple and Google travels over an encrypted connection (HTTPS, TLS 1.2 or better). There is no unencrypted route in or out.
At rest. The database and the files you upload are encrypted on disk (AES-256) by Supabase, our hosting provider.
Kept apart. Every table enforces row-level security, so a request can only ever return rows belonging to the signed-in person and their household. The database itself checks this on every single query, so a mistake in the app cannot hand one household another household's information.
Your Google connection. The token that lets Balance reach your Google Calendar is stored where no signed-in account can read it — including your own. The database grants read access to it only to Balance's own server-side functions, and it is deleted the moment you disconnect the account or delete your Balance account. From your calendar Balance keeps only what it needs to show and plan your day: the title, the start and the end. If you point Balance at a Google Drive folder, it reads only that one folder, only when you ask, and only to bring those documents into your notes.
Limited use. Information received from Google APIs is never used for advertising, never sold or transferred, and never used to train an AI model. Balance's use of it follows the Google API Services User Data Policy, including the Limited Use requirements.
Signing in. Balance uses Sign in with Apple and never sees, handles, or stores a password.
The vault. Encrypted on your own device with a key derived from your passphrase, before it is uploaded — unreadable to anyone without that passphrase, including us.
Keys and credentials. The credentials Balance uses to talk to Google and Apple live in a server-side secret store. They are never shipped inside the app on your device and never written into the source code.
People. Administrative access to the production systems is limited to the people who operate Balance, protected by two-factor authentication, and used only to keep the service running or to answer a request from you.
Keeping it that way. Permissions and access rules are reviewed before each release and the software Balance depends on is kept up to date. If we ever find that information has been exposed, we will tell the people affected promptly, by email and in the app.
How long it is kept
Until you delete it. Deleting a note deletes it; deleting your account deletes your
account. If you are the only person left in your household, deleting your account deletes
the household and everything in it as well — the app tells you which of those two things is
about to happen before you confirm.
Deleting everything
In the app: Settings → About → Delete your account. It happens
immediately and it cannot be undone. If you would rather ask us to do it,
write to us and we will.
Children
Balance is made for adults running a household and is not directed at children under 13.
We do not knowingly collect information from them.
Changes
If this policy changes in a way that matters, the date at the top changes and the app will
say so. It will not change retroactively for information already collected.
Terms of use
Last updated 27 August 2026
Balance is young software
Balance is new software, used by a small number of households. It will have bugs. Features
will change and some will be removed. Please keep your own copy of anything
you could not stand to lose, and do not rely on Balance alone for something with real
consequences — a medication schedule, a legal deadline, a flight.
Your account
One account, one person, and you are responsible for what happens under it. Everyone in a
household can see and change everything in that household — that is the point of it — so
only invite people you mean to share your life with.
What you write is yours
Your content belongs to you. You give us only the permission needed to store it, sync it
between your devices, and show it to the people in your household. Nothing more, and
nothing after you delete it.
Using it reasonably
Don't use Balance to break the law, to store other people's information without their
knowing, or to attack the service. Don't try to get at other households' data.
No promises, and no liability
Balance is provided as it is, without warranty of any kind. It may be unavailable, it may
lose data, and it may be discontinued. To the fullest extent the law allows, we are not
liable for any loss arising from using it. Nothing here limits liability that cannot be
limited by law.
Ending it
You can delete your account at any time, from inside the app. We can end access to
Balance — with notice where we reasonably can, and immediately where the terms above are
being broken.
Where this applies
These terms are governed by the laws of the State of California, United States.
Getting in touch
Questions, problems, a request to delete your information, or a feature you wish existed —
a real person reads all of it.
From inside Balance
Settings → Tell us something. This is the fastest route and the one to
use if you can: it sends your build number along, which usually saves a round of
questions about which copy of the app you are looking at.
Or if you cannot reach the app — locked out, or you have already deleted it: