Privacy Policy
Last updated 7 July 2026
Prowl is a personal budgeting tool that helps you import bank and card statements and see
where your money goes. This policy explains what we collect, how we use it, and the choices
you have. It covers the hosted app at prowl.money.
What we collect
- Your account: your email address and a securely hashed password
(we never store your password in plain text).
- Financial data you import: the transactions extracted from statements
you upload — dates, descriptions, amounts, account names and currencies — plus the
categories, tags, budgets, renames and rules you create on top of them.
- Technical basics: one essential cookie that keeps you signed in, and
standard server logs (timestamps, the page requested, IP address) used only to keep
the service secure and to fix problems.
What we do not do
- We never store your raw statement files. Uploaded PDFs, CSVs and
spreadsheets are read in memory to pull out the transactions, then discarded — the
original files are never written to our disk.
- We never ask for or store your bank login details — you provide statements yourself.
- We do not sell or share your data, and there is no advertising or third-party
tracking/analytics.
How we use your data
Only to provide the app to you: importing and cleaning statements, categorizing spending,
and showing you reports. That's it.
Where it's stored and who processes it
- Hosting & storage: the app and your data run on Render's
infrastructure (United States). Each account's data is kept in its own isolated area.
- Email: we use Resend to send transactional email (only password-reset
links). Only your email address and that message are shared with Resend.
- Currency conversion: to convert amounts into your home currency, the
app queries public exchange-rate services with currency codes only — never your
personal or transaction data.
Security
Passwords are hashed (PBKDF2), the site is served over HTTPS, session cookies are
HttpOnly, and each account's data is isolated from others. No system is perfectly secure,
but we take reasonable measures to protect your information.
Keeping and deleting your data
We keep your data until you delete it. You can export it (Excel), edit or remove individual
items, or delete your entire account and all its data at any time from
My Profile → Delete account. Server backups are retained for up to 7 days,
after which deleted data is also gone from backups.
Children
Prowl isn't intended for anyone under 16, and we don't knowingly collect their data.
Changes
We may update this policy; when we do, we'll change the date at the top.
Contact
Questions about your privacy? Email kimcamenzuli@icloud.com.