We never see a cent of it.
Most privacy policies are long because the company has a lot to account for. This one is short for the opposite reason.
Last updated 7 August 2026
The short version. Stuffed has no account and no login. There is no server holding your budget, because there is no server. Your envelopes, plans, goals and transactions live on your phone and in your own iCloud backup, and nowhere else. We cannot see your balances.
What we don't collect
We do not receive your name, email address, phone number, postal address, bank login, account numbers, or any transaction you record. None of it is sent to us, because there is nowhere for it to be sent.
Stuffed contains no advertising, no analytics SDK, and no third-party tracking of any kind. Nothing in the app watches what you tap and reports it elsewhere. The insights you see — what a cycle cost, what you have left, how a goal is tracking — are all computed on your device from data that never leaves it.
What stays on your device
Everything you enter is stored in the app's own local store on your iPhone, in an app group shared only with the Stuffed home-screen widget:
- Envelopes, their plans and their balances
- Transactions and the notes you attach to them
- Goals, and the amounts you have put toward them
- Your pay cycle, and your settings
That data is included in your iPhone's normal backups — iCloud Backup, or an encrypted backup made through a Mac or PC. Those backups are Apple's storage under your Apple Account, and we have no access to them. Deleting the app deletes the data with it.
Stuffed does not connect to your bank. Balances are typed and transactions are entered by hand, so there are no credentials to hold and no feed to intercept.
Purchases
Stuffed Plus is sold through Apple's In-App Purchase. Apple handles the payment and tells the app one thing: whether a subscription is currently active. We never see your name, your card, or your billing address.
Diagnostics
Stuffed sends no crash reports or usage statistics of its own. If you have turned on Share iPhone Analytics in iOS Settings, Apple may share aggregate crash and performance data with developers. That data is Apple's, it identifies no one, and it contains none of your financial information. You can turn it off at any time in Settings → Privacy & Security → Analytics & Improvements.
Children
Stuffed is not directed at children under 13, and collects no data from anyone — including children.
Australia and the United States
Under the Privacy Act 1988 and the Australian Privacy Principles, and under the CCPA and CPRA in California, you have rights to access, correct and delete personal information a business holds about you. Because Stuffed holds none, those requests are answered by the app itself: your data is on your device, you can read it, change it, export it to CSV, or erase it from Settings → Start fresh. We have nothing to hand over, nothing to correct, and nothing to sell — and we have never sold or shared personal information, because we have never had any.
Changes
If this policy changes in a way that matters, the app will tell you — a material change surfaces in Stuffed itself, not quietly on this page. The date above always reflects the current version.
Contact
Questions about privacy: [email protected]. A person reads it.