Skip Clean
Open the app →

Privacy Policy

Last updated: October 13, 2026

Skip Clean is built on a simple idea: your money business is yours. This policy explains what we collect, what we deliberately cannot see, and what we will never do with your information.

The short version

  • Your budgets, debts, income, and transactions are encrypted on your device before they reach us. We cannot read them — not even if we wanted to.
  • We show no ads, run no analytics trackers, and never sell or share your personal information.
  • The only emails we send are the ones you ask for: account emails and the optional Friday digest.

What we collect

Account information

  • Email address — used to identify your account and send the emails you request.
  • Password verifier — your actual password never leaves your browser and is never stored. Your device derives a cryptographic verifier from it (PBKDF2-SHA-256, 600,000 iterations); we store only that verifier plus a random salt to check future sign-ins.

Your encrypted data

Everything you enter into the app — cards, loans, bills, income, transactions, goals — is encrypted on your device with AES-256-GCM using a key derived from your password. We store only the encrypted blob. We do not hold your encryption key and cannot decrypt or read this data. A direct consequence: if you forget both your password and your recovery code, your data is unrecoverable — even by us.

Information you explicitly share for emails (all optional)

  • Friday reminders — labels, amounts, and due days you type into Settings → Friday email. Stored unencrypted so we can compose the digest. We tell you this in the app and ask you to use friendly labels (e.g. "Visa minimum"), never account numbers.
  • Due-next-week list — only if you turn on "Include my bills & debts due next week." Your app then sends us a short plaintext list of what's due so the Friday email can include it.
  • Display name — only if you save it in Settings, used to greet you in the Friday email.

Technical information

  • Session cookie — one strictly-necessary cookie (sc_session) keeps you signed in. It is HTTP-only and SameSite=Lax. We use no tracking, analytics, or advertising cookies.
  • Our servers automatically log basic request data (e.g. IP address, timestamps) for security and debugging, as virtually all web hosts do.

What we never do

  • No advertising on our website or in our app — there is nothing to opt out of because there is nothing running.
  • We never sell, rent, or share your personal information with third parties for marketing.
  • We run no third-party analytics, pixels, or cross-site trackers.

Who else touches your data

Our website and app are hosted by HostGator (servers in the United States), which stores the data described above on our behalf and does not use it for its own purposes. Emails are sent directly from our own mail server (hello@skipclean.com) — we do not route your mail through third-party marketing platforms.

Your rights and choices

  • Access & correction — your data lives in your account; what you can see, you can edit.
  • Deletion — Settings → Danger zone → "Delete my account" permanently erases your account and all server-side data. You can also email us and we'll do it for you.
  • Email preferences — the Friday digest is opt-in and can be switched off anytime in Settings; every digest also explains how to stop it.
  • Canada (PIPEDA) — if you are in Canada, you may request access to or correction of your personal information, or withdraw consent (subject to legal limits), by contacting us below.

Children

Skip Clean is intended for adults (18+). We do not knowingly collect information from children.

Data retention

We keep your account data only while your account exists. Delete your account and it is gone — including the encrypted blob, which is useless to anyone without your password anyway. Sign-in sessions expire automatically.

Changes to this policy

If we make material changes, we'll update the date above and, where appropriate, tell you in the app or by email. Continuing to use Skip Clean after changes take effect means you accept the updated policy.

Contact

Questions about privacy? Email hello@skipclean.com — a human reads every message.