Security & Privacy: Everything You Need to Know

Keeping your data secure and private while using Bilance is our highest priority. Here are the key principles we follow.

We don’t sell your data.

Our business model is simple - create a product that people are willing to pay for. This ensures that our interests are aligned with our users’ interests. We don’t sell your personal or financial data. All the usage data we collect is only used for improving the product.

We have read-only access to your financial data.

When you set up your bank accounts to automatically sync with Bilance, you need to authorize the access through your bank. Bilance never sees your bank login credentials – we only receive an authorization token with a limited lifetime.

Importantly, we access all bank account information in a read-only mode. We can not access your money or make any changes to your bank account. Additionally, you can revoke the data access at any time.

We use secure data infrastructure & servers.

To keep your data as safe as possible, we don’t manage our own servers. Instead, we use the Google Cloud Platform for data storage and encryption.

The Google Cloud Platform is one of the most secure solutions available in the industry, compliant with ISO/IEC 27001 information asset security standards and SOC 2 reporting standards for security, processing integrity, confidentiality, and privacy.

Additionally, all data transfers between the server and your device are protected by SSL/TLS encryption.

We rely only on trusted 3rd parties to deliver our services.

We use two regulated open banking providers to access your bank account information, only with your explicit consent and in compliance with personal data protection regulations:

• GoCardless — GoCardless SAS, registration No.834422180, is a limited liability company registered under the laws of the French Republic, operating as an authorized Account Information Service Provider supervised by the French Financial Conduct Authority (Autorité de Contrôle Prudentiel et de Résolution).
• Enable Banking — Enable Banking Oy is a Registered Account Information Service Provider regulated by the Finnish Financial Supervisory Authority (FIN-FSA).

How we use AI.

Bilance uses AI to clean up transaction titles, categorize your spending, and power AI Chat.

AI Chat runs on Google Gemini models inside the Google Cloud Platform — the same place that already stores your Bilance data, so chatting doesn’t make your data available to any new third parties. Google does not use your data to train its AI models, and chat data held by Gemini is deleted within 24 hours.

For transaction categorization we also use the OpenAI API under a strict data processing agreement: OpenAI may retain data solely for abuse monitoring for a limited period and is not allowed to use data submitted by Bilance to train or improve its models.

You are in control of your data & privacy.

You can protect the privacy of the Bilance app on your phone by adding a PIN code or biometric authentication, such as Face ID to unlock the app.

If you decide to delete your account and financial data, you can do so at any time in the app. Navigate to the Account tab, tap your name at the top, and then tap Delete Account. Alternatively, you can contact us for assistance at hello@bilanceapp.com.

If you delete your Bilance account, your login info and all financial data, including bank account information, transactions, and budgets, will be permanently and irreversibly deleted.

Do you have any questions about security & privacy?

We would be happy to answer – just contact us at hello@bilanceapp.com.

For more information, you can also read our Terms of Use and Privacy Policy.