Snowballer ("the app," "we," "us") is a personal habit, spending, and debt-payoff tracker. This policy explains what information the app collects, how it's used, and the choices you have. The short version: your data is yours, it's used only to run the app's features, and we never sell it or share it for advertising.
Account information. When you create an account, we collect your email address. If you sign up with an email and password, the password is handled by our authentication provider (Supabase) and is never visible to us in plain text. If you use Sign in with Apple or Google instead, we never receive a password at all — only the confirmation that they signed you in, and your email address.
Content you create in the app. This includes:
Purchases. If you subscribe to Snowballer Plus, the purchase is processed by Apple and by our subscription provider (RevenueCat). We receive whether your subscription is active and which plan you chose. We never receive your card number or payment details — those go to Apple, not to us.
Diagnostics. If the app crashes or hits an error, a diagnostic report (device model, OS version, app version, and the technical details of the error, along with your device's IP address as part of delivery) is sent to our crash-reporting provider, Sentry. We configure these reports to exclude your identity, your entries, and the contents of your requests. We also record basic product usage tied to your account — such as onboarding steps completed and how many times AI features are used — to operate and improve the app; this stays in our own database and is not shared.
Website waitlist (optional). If you leave your email on snowballerapp.com's Android waitlist, we store that address (via our website host, Netlify) and use it for exactly one thing: a single note if an Android version ships. It is never sold, shared, or added to any other list, and you can ask us to delete it anytime.
Information we do NOT collect. Snowballer does not collect your precise location, does not use advertising trackers, does not sell data, and does not access your contacts, your photo library beyond the specific images you pick, or your microphone beyond voice entry you initiate.
If you choose to connect a bank account, Snowballer uses Plaid Inc. to link your account and retrieve transaction and balance information, and — for credit cards and loans — the debt details used to keep your payoff plan accurate, such as the balance owed, interest rate, minimum payment, and due date. You select your bank and sign in through Plaid's own secure interface — Snowballer never sees or stores your bank username or password. Plaid provides us read-only access: we can see balances and transactions to show you your own money picture, and we cannot move money, make payments, or change anything in your account.
We store only what the feature needs: your linked account names, balances, and transaction history, protected the same way as data you enter by hand. Because synced transactions become part of your spending history, summaries of them (amounts, categories, merchant names) may be included when you use AI features like Coaching — sent to Anthropic under the same service-provider terms described below, and never for advertising. The credential that links your bank is stored server-side, is readable only by our own secure server functions, and is never sent to your device or included in analytics. Like the rest of our database, it is covered by our host's encrypted daily backups, which are kept for seven days, so a removed credential is gone from backups within a week.
You can disconnect a bank at any time in the app, which removes our access at Plaid. Deleting your Snowballer account removes it as well.
Plaid's handling of your information is described in their end-user privacy policy: https://plaid.com/legal/#end-user-privacy-policy
Disconnecting a bank does not erase what it already imported. Transactions and debts that were pulled in stay in your history, because they are part of your spending record and your payoff plan. Disconnecting stops future syncing. To remove imported entries, delete them individually, or delete your account to remove everything.
If you add the Snowballer widget, the app stores a small summary of your payoff progress — a percentage, your remaining and paid-off totals, your projected debt-free month, and the nickname of the debt you're targeting — in a private storage area shared between the app and the widget on your device. This stays on your device and is never sent to us or anyone else. Remove the widget and the data stops being used.
You can set up an automation in Apple's Shortcuts app so that tap-to-pay purchases log themselves into Snowballer. If you do, iOS passes Snowballer only the amount and the merchant name for each purchase. Snowballer never receives your card number, and no card data is involved at any point. You create this automation yourself in Shortcuts, and you can delete it there at any time without opening Snowballer — after which nothing further is logged.
We do not sell your personal information. We do not share it with third parties for marketing or advertising. There are no ads in Snowballer.
We share data only with the service providers needed to run the app, and only for that purpose:
No third parties other than those listed above receive your personal information. We would disclose data if legally required to (for example, a valid court order), and we'd tell you unless prohibited from doing so.
Your data is encrypted in transit. Database access is enforced per-account with row-level security, so your records are only readable by your own login. Login sessions on your device are kept in secure platform storage. No system is perfectly secure, but we've designed the app so that even we have no routine access to your individual entries.
Your data is stored in our database and file storage hosted by Supabase. Access is protected by row-level security, meaning your data is only readable by your own authenticated account. Receipt images and statement files are stored in private storage buckets readable only by your account and by the server functions that process them for you.
A copy of your data is also cached on your device so the app works quickly and offline.
Your data is kept as long as your account exists. When you delete a transaction, its receipt image is deleted with it. When you delete your account, or disconnect a bank, the data is removed from our live database immediately; copies may remain in our host's encrypted daily backups, which are kept for seven days, and are gone once those expire. We do not restore deleted data from backups.
If you have a privacy question or request you can't complete in the app, contact us at the email below.
Getting a copy of your data. CSV export is a Snowballer Plus feature, but your right to a copy of your data is not. Email us and we will send you a machine-readable copy of everything in your account, free, within 30 days, whether or not you subscribe.
Do Not Track. Snowballer does not track you across other companies' websites or apps, so there is nothing for a browser Do Not Track signal to change. We do not respond to it differently.
We do not sell or "share" personal information as those terms are defined by the California Consumer Privacy Act, and we do not use your data for cross-context behavioral advertising. You can exercise your rights to access, correct, and delete your data directly in the app (see "Your choices and rights" above) or by contacting us. We will not discriminate against you for exercising any privacy right.
Snowballer is offered in the UK and Ireland, so UK GDPR and EU GDPR apply to you. This section sets out what those laws require us to tell you.
Who is responsible for your data. Snowballer is operated by Broc Mayo (transitioning to Snowballer LLC, a California limited liability company). You can reach us at snowballer.app@gmail.com about anything in this policy.
Why we are allowed to process your data.
Your rights. You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw a consent you gave. Viewing, correcting and deleting are all self-service inside the app. For anything else, email us and we will respond within one month, free of charge.
Where your data goes. Our servers are in the United States, so using Snowballer means your data is transferred there. Where a provider listed above processes your data outside the EEA or UK, our agreement with that provider relies on the European Commission's Standard Contractual Clauses, and the UK Addendum to them, to protect that transfer. Plausible, our analytics provider, stores its data in the European Union.
If you think we have got something wrong, please tell us first — but you also have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is your national authority, listed at edpb.europa.eu.
Snowballer is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.
If we make material changes, we will update the effective date above and note the change in the app or its store listing. Continued use of the app after changes means you accept the updated policy.
Questions or requests: snowballer.app@gmail.com