Your data never leaves your server

Where your data lives

Everything you enter — accounts, transactions, budgets, goals, pensions — is stored in your own Nextcloud's database, on the server you control. The app makes no calls to Otherworld Dev or any third party with your financial data, and there are no analytics, telemetry or tracking inside the app.

What the app talks to (and why)

• Exchange rates — if you use multiple currencies, the app can fetch reference rates (e.g. the European Central Bank). You can disable this or enter rates manually.
• Bank sync — optional, and only if you connect an aggregator (GoCardless / SimpleFIN). It's off unless you set it up.
• Nothing else leaves your server. No account to create, no sign-in to a cloud service.

The Android app (Budget Companion)

Budget Companion is the phone app for photographing receipts and checking where you stand. It talks to one place only: the Nextcloud server you sign in to. It never contacts Otherworld Dev or any third party, and it has no analytics, crash reporting, advertising or tracking of any kind. Otherworld Dev does not collect, receive or have access to anything you do in the app.

• Signing in uses Nextcloud's own login page, opened in your browser. The app is given an app password for your account, which it keeps in Android's encrypted storage on the phone. Signing out revokes that app password on your server.
• Receipt photos are taken with the camera, or shared to the app from another app, and sent to your server along with the transaction you save. Reading the receipt happens on your server, using whichever method its administrator has set up (see receipt scanning); the app itself never sends a photo anywhere else. A photo stays on the phone only until its transaction has been saved, then it is deleted.
• Offline copies. So the app works without a signal, it keeps a copy of your account names and balances, categories, budget figures, upcoming bills and recent transactions on the phone, and queues anything you capture offline until it can be sent. Signing out deletes all of it. Nothing is included in Android's cloud backup or device-to-device transfer.
• Permissions: internet, to reach your server; camera, to photograph receipts; and notifications, to tell you when a receipt is ready to review, or when one has been waiting in the queue too long.
• Plain http. The app allows a plain http:// address so that a server on your home network can be used. Anything sent to an http address is not encrypted in transit, so use https for a server reachable from the internet.

Uninstalling the app, or clearing its storage in Android's settings, removes everything it kept on the phone. Your data on your server is managed in Budget itself.

This website

budget.otherworld.dev is a plain static site. It sets no cookies, loads no third-party scripts or fonts, and runs no analytics. The screenshots here use generated demo data, not anyone's real finances.

Open source

Budget is free software under the AGPL-3.0-or-later licence. You can read every line, file issues, and contribute on GitHub. Translations are community-driven via Weblate.

About

Budget is built by Otherworld Dev Ltd. Questions or problems? Open an issue on GitHub.

Budget is an independent project and is not affiliated with, or endorsed by, Nextcloud GmbH. "Nextcloud" is a trademark of Nextcloud GmbH.