Privacy Policy — OpenBook

Summary

OpenBook is an envelope-style budgeting app. To provide its core function, it connects to your bank accounts via Plaid (with your explicit consent) and stores a copy of your transaction history and budget categorizations on a private backend you control.

Data we collect

• Plaid account access tokens — issued by Plaid when you link a bank account. Stored encrypted on the OpenBook backend.
• Account balances and transaction history — fetched via Plaid. Stored on the OpenBook backend so the app can render it offline and apply your budget categorizations.
• Budget categories and envelope assignments — your own data, created in the app. Stored on the OpenBook backend and synced to the device.
• Email address — only if you contact us for support.

How it is stored

Data is stored in Cloudflare Workers KV (a key-value store hosted by Cloudflare in the United States). The connection between the app and the backend is HTTPS-encrypted. Plaid access tokens are encrypted at rest with a session secret unique to your install.

Third-party services we use

• Plaid — bank-account connectivity. Subject to Plaid's privacy policy at plaid.com/legal.
• Cloudflare — backend hosting (Workers + KV). Subject to Cloudflare's privacy policy at cloudflare.com/privacypolicy.
• Apple TestFlight — for beta distribution. Crash logs and basic install metrics are reported to Apple.

What we do NOT do

• We do not sell your data to anyone.
• We do not share your data with advertisers.
• We do not use your data to train AI models.
• We do not retain your data after you delete the app and request deletion.

Your rights

You can request deletion of all your data by emailing gsorvala@gmail.com with the subject "OpenBook delete my data". We will permanently delete all server-side data within 30 days and confirm by reply.

Children

OpenBook is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Changes

If this policy changes, the effective date at the top updates and beta testers are notified via TestFlight.