Terms of Service

Last Updated: July 22, 2026

These Terms govern your use of the SAFE Budget app (the “App”). By using the App you agree to these Terms. Your use of the App is also subject to Apple's Standard End User License Agreement (EULA), which applies in addition to these Terms.

1. The App

SAFE Budget is a personal-finance and budgeting tool for supported Apple devices. The local ledger is protected by Apple's app sandbox and device/platform protection. When CloudKit is available, designated ledger values use CloudKit encrypted fields and attachments use CloudKit assets. The developer operates no SAFE Budget account service or readable-ledger server and does not receive your private CloudKit ledger. Limited local and CloudKit routing, record, timestamp, deletion, and sharing metadata remains necessary for operation. Optional Apple, bank-provider, merchant-search, household-sharing, export, and support services work as described in the Privacy Policy.

            Not financial advice. SAFE Budget provides tools, calculations, projections, and insights
            for personal use. It is not financial, investment, tax, accounting, or legal advice. Ask SAFE and all other
            figures, forecasts, categorizations, and recommendations are estimates based on available inputs and may be
            incomplete or inaccurate. You are responsible for your financial decisions; consult a qualified
            professional where appropriate.
        

2. Your Responsibilities

You are responsible for reviewing the accuracy and completeness of information you enter, import, or receive from a provider before relying on it.
You are responsible for safeguarding device passcodes, your Apple Account, exports, and provider credentials.
SAFE Budget has no separate sync password. CloudKit access depends on your Apple Account and Apple services; keep an appropriate independent export or backup.
You are responsible for household invitations and roles. Authorize only people you trust and understand the revocation limits described below.
You are responsible for complying with the terms, permissions, and security requirements of Apple and any bank, SimpleFIN Bridge, Plaid developer account, browser/search provider, or export destination you use.

3. Third-Party Services

The App can communicate with services operated by others:

Apple: App Store distribution, iCloud, CloudKit, iCloud Keychain, system backup/restore, FinanceKit, and on-device Foundation Models where available.
SimpleFIN: optional direct bank-data connection through the Bridge and credential you select.
Plaid: optional advanced bring-your-own developer credentials, Plaid LinkKit, and direct device-to-Plaid lifecycle and data requests. SAFE Budget does not operate a Plaid relay, webhook receiver, or always-on refresh server.
DuckDuckGo and your browser: an optional, user-initiated merchant-cancellation search containing the merchant or payee name.
Email and support providers: information you voluntarily send to support.

Third-party terms, privacy policies, availability, retention, limits, fees, and data accuracy apply. We do not control those services and are not responsible for their acts, omissions, interruptions, security, or accuracy. Revoking a provider connection stops future App access through that connection but does not automatically delete ledger history already imported or data retained by the provider under its own rules.

4. Bring-Your-Own Plaid Credentials

If you enable Plaid, you supply and control your own Plaid client ID, confidential client secret, and related access. Storing this material in a distributed client and your Keychain differs from Plaid's conventional server-held-secret architecture. You are responsible for confirming that your configuration and use are allowed by Plaid, protecting the credentials, restricting their permissions, monitoring the Plaid account, and rotating or revoking them when appropriate.

5. Household Sharing

A household owner can grant a named participant access through Apple's private CloudKit sharing system. Authorized participants receive the shared CloudKit records on their devices. Revoking a participant removes server-side share access going forward, but cannot recall information the participant already viewed, exported, screenshotted, or otherwise copied. Share only with people and devices you trust.

6. Exports, Backups, Reset, and Erasure

Plaintext JSON/CSV exports are readable after creation. Encrypted backups depend on the export passphrase you choose. You are responsible for the security and deletion of exported files and their destinations.
CloudKit sync, iCloud Keychain, operating-system backups, and the App's platform-protected local safety snapshots are separate recovery paths and can have different availability and retention.
Reset this device leaves the CloudKit household available and may retain a sanitized, platform-protected local recovery snapshot.
An owner using Erase all data removes local App data and requests deletion of the private CloudKit zone. An unavailable cloud deletion is retained for retry; Apple service timing remains outside the developer's control.
A participant can remove the local copy but cannot delete the owner's CloudKit household. Third-party providers, exported files, backups, and support messages remain subject to their own deletion and retention rules.

7. Acceptable Use

You agree not to misuse the App, including attempting to interfere with or circumvent its security or using it for an unlawful purpose. Nothing in these Terms limits rights that cannot lawfully be limited, including rights that may apply to security research or software interoperability.

8. Disclaimer of Warranties

To the extent permitted by law, the App is provided “as is” and “as available,” without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the App or any third-party service will be uninterrupted, error-free, secure, complete, or accurate for your circumstances.

9. Limitation of Liability

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for loss of data, profits, or goodwill, arising from use of or inability to use the App or a third-party service, including provider errors, sharing by an authorized participant, exported files, or data that becomes unavailable after credentials, Apple Account access, a device, or a third-party service is lost.

10. Changes

We may update these Terms from time to time. Material changes will be reflected here with a revised “Last Updated” date. Continued use after the updated Terms become effective constitutes acceptance where permitted by law.

11. Contact

Questions about these Terms? Email support@aitodoplus.app or visit SAFE Budget Support.