Privacy

No bank credentials. No card, routing or account numbers. No Social Security or other government ID numbers. There is no connection to your bank at all: importing a statement file is the only way transactions get in, which is a slower design chosen specifically so that none of that has to exist.

There are no advertising trackers, no analytics or crash-reporting tools, no cookies, and no third-party embeds. Nothing in Switchback tracks you across other apps or websites.

Your browser or phone does keep a few things on the device itself: the sign-in session that keeps you logged in, which household you last opened, and a handful of settings such as when to sign you out automatically and whether you have seen the tour. These stay on that device, and signing out removes the session.

If you add the Switchback widget to your iPhone’s Home Screen, the app keeps a short summary on the phone for it to show: what’s left this paycheck and the next few bills, with their amounts and dates. That summary stays on the phone, is never sent anywhere, never includes anything from the vault, and is cleared when you sign out.

Stored passwords are encrypted on your device with AES-256-GCM, under a key derived from your household’s master passphrase. The passphrase is never transmitted and never stored — not in the database, not in a log, not in a backup.

Every field is sealed, including the name of the account and its website — so a copy of the database does not even reveal which companies you deal with. This means Switchback genuinely cannot read your stored logins, and neither could anyone who obtained that copy. It also means the passphrase cannot be reset or recovered by anyone, including us. If everyone who knows it forgets it, those entries are unrecoverable. That is the trade, and it is deliberate.

People you invite. Data belongs to a household. Anyone you add to a household can see that household’s budget, at the permission level you gave them. Someone invited to one household cannot see another — that boundary is enforced by the database, not by the interface. Vault access is a separate grant on top of a role, and a view-only member can never hold it.

The Everyday Compass. Switchback shares one login and one household with the other Everyday Compass apps (Operation Pathfinders, Cairn, Chuckbox and Haversack). The adults in your household are the same people in every app, and the household’s name and people are shared between them. Your budget, transactions and vault stay in Switchback: the other apps cannot read them, and only people in your household with access in Switchback can. The other apps can only add spending to Switchback, never read it back, with one exception: Operation Pathfinders shows each child what they’ve earned since their last allowance (one amount, to that child and the household’s adults only). To show allowance and upkeep costs, Switchback reads three things from the other apps for the adults in your household: the teamwork rewards each child has earned in Operation Pathfinders, the days each child finished their Pathfinders daily mission, and the upkeep jobs coming due in Cairn with their cost. It copies nothing else.

Service providers. All acting on our instructions: Supabase hosts the database and handles sign-in; Resend delivers account emails; Cloudflare serves the application files and sees request metadata; Stripe takes payment if you buy an Everyday Compass membership on the web; and RevenueCat, Inc. processes App Store and Google Play purchase and subscription records to confirm whether a household has Plus or the Everyday Compass bundle. What RevenueCat receives is the purchase history described above and an anonymous app user ID, which is your household’s ID; it does not receive your name, email or budget, and payments themselves are handled by Apple or Google, so it never sees card details either. None of them is permitted to use your data for their own purposes.

App stores. If you use the iPhone or Android app, Apple or Google distributes it and processes any subscription payment, under their own privacy policies. They do not receive your budget.

Nobody else. Your data is not sold, rented, shared with advertisers, used for targeted advertising, or used to train machine-learning models. There is no circumstance in which it is disclosed for money.

Switchback may be required to disclose data in response to a valid legal demand. If that happens and we are permitted to tell you, we will. If Switchback is ever transferred to a new owner, your data would go with it only under this policy, and you would be told first.

Your data is kept for as long as your account exists. Deleting a bill, a household or a vault entry removes it from the database.

Deleting your account is self-serve: Settings → Delete account, in the app or on the website. It takes effect immediately:

• your login is shared by every Everyday Compass app, so deleting it ends your access to all of them;
• a household that only you sign in to is deleted, with everything in it, in every app;
• a household you share keeps its data — it is the other members’ budget too — but your name, email and access are removed from it;
• your login, and any two-step sign-in enrolment, are deleted.

If you can no longer sign in, the account deletion page explains how to ask us to do it instead. Deleting your account does not cancel an App Store or Google Play subscription; cancel that in your store account.

For a copy of everything held about you, in a machine-readable format, email support@everydaycompasslife.com from the address on the account. It will be sent within 30 days.

Backups kept by our database provider may retain deleted data for a short period before ageing out.

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to its processing, and to complain to a data protection authority. Exercising any of them starts with an email to the address above, and Switchback will not treat you differently for asking.

Switchback is not directed at children and accounts are not knowingly created for anyone under 13. If you believe a child under 13 has an account, email us and it will be removed.

Our providers store and process data in the United States. If you use Switchback from elsewhere, your data is transferred there.

If this policy changes in a way that affects how your data is handled, the date at the top changes and anyone with an account is emailed before it takes effect. Minor wording fixes will not trigger a notice.

Privacy questions and requests: support@everydaycompasslife.com.