Budget app privacy: what to check in the privacy policy, point by point

Read the privacy policy with eight questions in mind: data, purposes, recipients, transfers abroad, retention, bank connection, rights, changes. Some of the answers are required by the Federal Act on Data Protection (FADP, art. 19).

Updated October 2026. Sources: FADP (SR 235.1, status 7 July 2025); Federal Data Protection and Information Commissioner (FDPIC), guidelines on cookies and similar technologies (6 October 2025); Apple, App Privacy Details, Guideline 5.1.1(v); Google Play, Data safety, account deletion (viewed on 20 October 2026).

What should you check in a budget app’s privacy policy?

Check eight points, from the data to the changes. A privacy policy is the text in which the controller, whoever runs the app, explains how it handles your personal data. The FADP, in force since 1 September 2023, requires it to inform you appropriately when it collects data (art. 19 para. 1): at a minimum its identity and contact details, the purpose of processing and, if applicable, the recipients or categories of recipients (para. 2). According to the FDPIC the information must be given actively: it is not enough to hide it in a remote section or give it only on request. General information, not legal advice.

Which 8 points should you check?

1. Which data. The categories, feature by feature: bank transactions, receipts, loyalty cards, location, phone identifiers. If the data is not collected from you, the FADP requires the categories (art. 19 para. 3).
2. For what purposes. Separate purposes (app, statistics, advertising), each specific and recognisable (art. 6 para. 3). Automatically evaluating your economic situation or preferences is “profiling” (art. 5 let. f): read what it is for.
3. To whom. Recipients or categories (hosting, analytics, bank connection) and why. According to the FDPIC the policy must say whether data goes to a processor or a third party.
4. Abroad? The country and the safeguards (art. 16 para. 2) or the exception relied on, for example your explicit consent (art. 19 para. 4; art. 17).
5. For how long. A period per category or a clear criterion (“as long as the account exists”) and how you delete account and data. Data must be destroyed or anonymised once no longer needed (art. 6 para. 4).
6. The bank connection. Who connects to the bank (the app or an intermediary), what is read and from when, how you give and withdraw consent, how you disconnect and what happens to data already fetched.
7. Rights and contact. The controller’s name and contact details (art. 19 para. 2 let. a) and how to ask for access, correction and deletion: see the guide to your data rights.
8. Changes. A date or version and how you are told, in the app or by email, when purposes or recipients change.

Bank connection or receipts: what changes for your data?

What are the warning signs?

Vague wording where an answer should be.

• Data: “all the data we collect”, with no list.
• Purposes: everything in one block, or advertising accepted with the terms in a single box; where consent is required, it is valid only if voluntary, specific and informed (art. 6 para. 6).
• Recipients: “partners” or “third parties” with no categories and no purpose.
• Abroad: “worldwide”, with no country and no safeguards.
• Retention: “as long as necessary”, with no criterion.
• Bank: does not say who connects or how to withdraw access.
• Contact: no company, no address.
• Changes: “at any time”, with no notice.

How do you read a privacy policy in ten minutes?

Set aside ten minutes and follow these steps.

1. Find it before you install: it is on the store listing and inside the app; note the date and version.
2. Search for keywords with “find in page” (third parties, advertising, abroad, retention, bank) and mark the eight points: clear, vague or missing.
3. Compare with the store. The store’s privacy summary is filled in by the developer: any mismatch with the policy or with the permissions requested is worth asking about (see the questions to ask before installing an AI app).
4. Write to the contact about vague points. If no policy convinces you, there is the Excel household budget template.

Where do you start today?

First step today: open the privacy policy of the app you use and mark the eight points. Rappn, a free Swiss app (iOS and Android) that compares the current promotions of seven Swiss retailers and turns receipts into a spending overview, has its own privacy policy (version 2.0, 17 April 2026): among the content you provide it lists scanned receipts, when available, and it provides for deletion or anonymisation of the data within a reasonable period after you close your account, subject to the retention periods it lists and to legal obligations. You photograph a receipt, upload it from your gallery or enter a purchase by hand; the app sorts your purchases into categories and shows your spending by month, and you export the receipts as PDF or CSV. Rappn is free, has no subscription and covers groceries only, not rent, insurance or taxes. Rappn is building an AI assistant for groceries: you can join the waitlist.