Security

We don’t sell your info for ads

We only store and collect what’s necessary to give you the best experience on Lunch Money.

We don't go beyond this to figure out your address, gender, age, income level, etc., like how other financial apps such as Mint might, in order to show you targeted ads.

Read more about this in our Privacy Policy, and see why people are using Lunch Money as a Mint alternative.

Your data is protected and safe with us

Enable two-factor authentication for extra security.

File attachments are two-layer encrypted and stored in Google Cloud Storage. If the database is compromised, your files are still safe.

Files are only accessible via ephemeral-signed URLs (authenticated URLs that expire after a few minutes).

We only have read-only access to your bank data. We can’t move your funds or change your accounts in any way.

None of your personal credentials are stored, and your data is AES-256 encrypted. Your data is protected with bank-level security.

Trusted partners

We only use vetted service providers when handling your most sensitive data. Our partners include:

Heroku — protects customers from threats. They apply security controls at every layer from physical to application, isolate customer applications and data, and deploy security updates without customer interaction or service interruption.

Netlify — trusted by over 1,000,000 companies and developers, and uses only major cloud providers who regularly undergo extensive security audits and certifications. Content goes through ephemeral environments, reducing attack surface.

Plaid — uses secure cloud infrastructures that invest heavily in resilience-enhancing technologies that have been developed and hardened over time. Years of security enhancements better protect against security incidents.