Your household's data.
Yours alone — no exceptions.
No jargon, no vague promises — here's exactly what we do (and don't do) with your financial data.
Isolation enforced by the database, not just the app
Every household's data is walled off at the database level using row-level security — the same rule applies no matter which screen, API route, or bot message tries to read it. It's not "the app happens to only show you your own data"; the database itself refuses to hand over anyone else's.
We only read what you send us
When you message the ChillarFlow bot, we read only that specific message to log your expense. We have no access to your other WhatsApp or Telegram conversations — ever.
No bank passwords. No ads.
We never ask for your bank login or internet banking password. ChillarFlow works only from the entries you type, scan, or forward — and we will never show you ads or sell your spending data to anyone.
Your partner needs your permission to join
Adding a partner to your household requires a unique invite link or join code that only you can generate. No one can access your household without that explicit invitation from you.
Optional PIN lock, with real lockout protection
Add a 4-digit PIN for quick, private access — stored hashed, never in plain text. Repeated wrong attempts don't just get slower; the lockout escalates (1 minute, then 5, then 30, then 2 hours, then 24), the way a real threat model for a lost or borrowed phone should work.
See your own security activity
Settings shows your last 20 account-security events — logins, PIN changes, and the like — so you're never left guessing whether something happened on your account without you.
Our data guarantees
Your records belong exclusively to you. If you ever decide to close your account, deleting it permanently removes your entire transaction history from our systems — immediately, not "eventually." We don't keep a shadow copy to sell or analyze later.
Added a guest to a group who doesn't have a ChillarFlow account yet? Their personal claim link only ever shows their own balance — never anyone else's. If they later sign up for real, their history migrates over atomically, with no duplication and no gap where their data was briefly exposed.
Start tracking with complete privacy
Set up your household in under 2 minutes. No bank passwords, no ads, no data sharing.
Set up your household free