Privacy Policy

Last updated: 30 July 2026

Balance is a small app for keeping track of money you lend to and borrow from the people in your life, available at balance.transactor.app. It is part of Transactor and run by the same people. This page explains what Balance stores, why it stores it, and what it never does. The short version: your records are yours, nobody else can see them, Balance has no ads and nothing to sell, and no measurement of any kind runs on the pages that show your records. The public pages — this one, the terms and the front page — do count visits, and section 7 says exactly how.

1. Signing in — what Balance receives

Balance has no password of its own. You sign in on Transactor, and Transactor tells Balance who you are. Balance never sees your password — not while you type it, not afterwards, and it holds no Transactor token that could be used to act as you on Transactor.

What comes back from Transactor, and what Balance keeps, is:

Your Transactor account id. This is the link between the two apps, and it never changes.
Your email address and name, if you have set one. These are display copies only — Balance refreshes them from Transactor each time you sign in, and shows your email back to you in the account sheet so you can tell which account you are in.
Whether your email address has been verified.

Balance then creates its own account record for you, with its own id. Every record you make belongs to that id — not to your Transactor one — so the two products stay genuinely separate.

2. What you put into Balance

Everything else Balance stores, you typed in yourself:

People. The name you give each person you lend to or borrow from.
Entries. For each entry: whether you sent or received the money, the amount, the date, and an optional short remark.

That is the whole list. Balance asks for no phone numbers, no addresses, no contact list access, no bank details and no card details. It cannot move money and is not connected to any bank or payment system.

3. The people you record

Balance is unusual in one way worth being direct about: the names in it belong to other people, and those people did not sign up for anything.

Those names are visible to you and to nobody else. Balance does not contact the people you record, does not look them up anywhere, does not try to match them to real accounts, and does not build any profile of them. There is no sharing feature, no invitations and no way for another user to see your list.

In return, please only record what you actually need — a first name is usually plenty — and treat the remark field as somewhere for "Diwali advance", not for anything private about somebody else.

4. How Balance uses all this

To show you your people, your entries and the balance with each — which is the entire purpose of the app.
To keep you signed in, and to make sure every request only ever returns your own records.
To answer you if you write to support.

Balance sends no email of its own. Account email — verification, password resets, notices — comes from Transactor, and is covered by Transactor's privacy policy.

5. What Balance never does

It never sells, rents or shares your records with anyone.
It has no advertising, and nothing in it is used to build an advertising profile of you or of anyone you record.
It runs no analytics on any page that shows your records. No script from anyone else loads on the app or the sign-in page. The public pages count visits, which section 7 describes in full.
It uses no Google Analytics, no tracking pixels, no advertising scripts and no cross-site trackers, on any page.
Nothing you record is ever sent to the visit counter. It is told which page was opened, not what is on it — and it is not present on the pages your entries appear on.
Nobody reads your entries to train anything or to study them.

6. Cookies and browser storage

Balance uses two cookies, both strictly necessary, and no others. Neither is an advertising or cross-site tracking cookie, and there is no cookie banner because there is nothing optional to consent to.

A sign-in cookie that keeps you signed in. It lasts seven days and then expires — it does not quietly extend itself — so you sign in again about once a week. It cannot be read by JavaScript, and it is set on Balance's own API address so it never travels to Transactor or to any other site.
A short-lived handshake cookie during sign-in, which exists for ten minutes and holds only the random values that prove the sign-in you finish is the one you started. It is deleted the moment you come back.

Beyond those, Balance uses no local storage and no session storage at all. Nothing about your records is kept in your browser; every screen is fetched fresh from the server, which is also why closing the tab leaves nothing behind on the device.

The visit counter on the public pages adds nothing to this list — no third cookie, and no browser storage. Section 7 covers it.

7. Outside requests, and counting visits

Balance's pages reach out to exactly two others. Neither is told anything about you or about your records.

Google Fonts — the Inter and Caveat typefaces. Your browser contacts Google's servers, which see your IP address and the fact that a page asked for a font. Nothing more.
Cloudflare Web Analytics — counts visits to the public pages. It records which page was opened, where the request came from in broad terms, and how quickly the page loaded. Cloudflare sees your IP address in the process.

The visit counter runs on the three public pages only — the front page, this one, and the terms. It is deliberately absent from the app and from the sign-in page, so no outside script ever loads on a page that shows your money. That is a rule about where the script may go, not a setting that can drift.

It also leaves nothing behind on your device: no local storage, no session storage, and no cookie on Balance's own address. We checked that by running it rather than taking anyone's word for it.

Why it exists at all: to know whether anyone is finding Balance. Until 30 July 2026 there was no measurement here of any kind, and this page said so; when that changed, this page changed with it on the same day.

8. Where your data lives

On Amazon Web Services infrastructure in the Asia Pacific (Mumbai) region. Traffic between your browser and Balance is encrypted in transit with HTTPS.

9. Who else is involved

Balance relies on a very short list of others to work at all:

Transactor — identifies you at sign-in. Same operator as Balance; see its privacy policy.
Amazon Web Services — hosting, storage and delivery of the pages.
Google Fonts — the two typefaces, as described in section 7.
Cloudflare — counts visits to the three public pages, as described in section 7. It is not present on the app, so it sees nothing behind sign-in.

There is nobody else. No ad network, no data broker, no email provider of Balance's own, and no analytics on any page that shows your records.

10. Keeping and deleting your data

Your records are kept for as long as you want them. You can delete any entry or any person from inside the app at any time, and deleting a person deletes all of their entries with them.

To have your whole Balance account and everything in it deleted, or to ask for a copy of your data, email support@transactor.app from your registered address. It will be done — there is no retention trick here. Deleting your Balance account does not delete your Transactor account, and deleting your Transactor account means you can no longer sign in to Balance; ask for both if that is what you want.

Expired sign-in sessions are cleared out as they lapse. They contain no records — only a scrambled fingerprint of the session and its dates.

11. Your rights

At any time you can:

See and change every record you have made, directly in the app.
Ask for a copy of your data, or for it to be corrected or deleted.
Sign out, which ends that session immediately.

For anything that is not a button in the app yet, email support@transactor.app.

12. Security

Balance is built so that the most likely mistakes are not the dangerous ones. Every request for your data has to carry a valid session, and every answer is filtered to your account before it leaves the server — asking for a record that is not yours gets the same "not found" as asking for one that does not exist, so the app cannot be used to fish for other people's records. Session tokens are stored only as a one-way hash, so even the stored session list cannot be used to sign in as you. Connections are encrypted, and Balance holds no password of yours to lose in the first place.

No system is perfectly secure. Since Balance is entered through Transactor, the strength of your Transactor password is what protects your Balance records too — make it a strong and unique one.

13. Children

Balance is not directed at children. You need a Transactor account to use it, and you must be at least 18 years old, or the age of majority where you live.

14. Changes to this policy

If this policy changes in a way that matters, this page will be updated and the date at the top will change with it. Continuing to use Balance after that means you accept the updated policy.

15. Contact

Any question about privacy — including anything on this page you think is wrong — email support@transactor.app.