Nearly every money app now opens by asking you to log into your bank through an aggregator, which means handing a third party read access to every transaction you make. Plenty of people would rather not, and then find there is nothing left to use.
There is no bank integration to turn off
Keep the Diff has no bank connection feature, not one that is optional or off by default. There is no aggregator, no credentials field and no transaction feed. The app physically cannot read your spending, which is a stronger promise than a setting.
So where do the numbers come from?
You type them, and only when you want to. Two per entry: what you were ready to spend and what you actually spent. The difference is recorded as money you kept. That is a smaller amount of data than any aggregator app holds about you, and it is the only data there is.
What else it does not do
- No account. Nothing to sign up for, no password to create, nothing to be leaked in someone else's breach.
- No analytics. No usage tracking, no crash reporting SDK, no session recording.
- No advertising and no advertising identifier. Nothing is sold or shared, because nothing is collected to sell.
- No third-party SDKs that phone home.
The one time it uses the network
Unlocking Premium on a Mac or a PC, and only if you ask it to. That request carries a short code and the opaque receipt number your app store issued, so the server can ask Apple, Google or Stripe whether the subscription is live. It carries nothing you have logged. If you only use a phone or a tablet, the app makes no network request at all.
The privacy policy says the same thing at greater length, and it is one page.
Where your data lives
In the app's own private storage, on the device you logged it on. On Apple and Android it is included in your own iCloud or Google device backup, the same as any other app's data, which belongs to you and your device maker rather than to us. Premium exports the lot as a CSV whenever you want it.