Privacy
Expense trackers that don't need your bank login
A budget app that connects to your bank feels like magic for about a week. Then you notice it also knows your salary, your rent, your pharmacy visits and roughly where you were last Tuesday. If that trade sits badly with you, there is a whole category of app built the other way — and a real cost to using it.
Why so many free apps want the connection
An app that reads your transaction feed doesn't need you to do anything, so you don't quit in week three. That's the product reason. The business reason is that a categorised, timestamped record of a person's spending is one of the most commercially valuable datasets there is — for the app, for its aggregation partner, and for whoever they share with.
That isn't automatically sinister. Many are upfront, regulated, and charge a subscription precisely so they don't have to monetise the data. The point is that the connection is the business model, which is why it's pushed so hard during onboarding.
What you're actually agreeing to
Connecting usually goes through an aggregator sitting between the app and your bank. Depending on the country and method, that can mean:
- Full transaction history, often years of it, not just from the day you connect.
- Balances across every account at that institution, including ones you didn't mean to share.
- Merchant, amount, date and location for each transaction — a detailed movement record.
- Your actual credentials, in older screen-scraping setups. Open-banking APIs and OAuth are much better; not every market has them.
- A third party you never chose, since the aggregator is usually a separate company with its own policy and breach history.
Worth knowing: revoking access in the app doesn't always delete what was already collected. Deletion is usually a separate request, often to the aggregator rather than the app.
A fair question to ask yourself: if this company were breached tomorrow and the contents published, what would it reveal? For a linked account the answer is "an unusually complete picture of my life". For a manual tracker it's "some numbers on my phone".
The honest case for linking anyway
Manual tracking has one enormous failure mode: people stop doing it. An abandoned tracker with three weeks of data is worth less than a linked account you ignore but which quietly records everything.
Link your bank if you've tried manual tracking twice and drifted off both times, if you need to catch fraud quickly, if you're managing many accounts, or if you simply want the numbers without the ritual. Choose a subscription app with a clear data policy over a free one that won't say how it earns.
What manual tracking is actually like
The stereotype is a spreadsheet and an evening lost. In practice it's roughly ten seconds per transaction, done in the queue right after paying — amount, category, done. Five to eight transactions a day is about a minute.
Three things make the difference between sticking with it and quitting:
- Enter it immediately. Not at the end of the day, when it becomes a reconciliation chore you'll avoid.
- Keep categories few. Eight or ten. Every extra category is a decision at the till, and decisions are what cause drift.
- Accept approximation. Rounding to the nearest note is fine. You're looking for patterns, not preparing accounts.
The upside nobody mentions in the feature comparison: handling every transaction once is the part that changes behaviour. Automatic import gives you a dashboard you glance at monthly; manual entry makes you notice the fourth delivery coffee of the week while you're buying it. Most people who stay with manual tracking stay for that, not for the privacy.
What to look for in a no-login tracker
- No sign-up at all. If it wants an email, ask what the account is for.
- Free export. Your data should be portable from day one.
- Check the permissions on the Play listing. A manual tracker has no business requesting contacts, location or SMS. (SMS is worth a second look — some trackers parse bank alert texts, which is convenient but hands over a broad read of your messages.)
- Working reports on-device, so the analysis isn't happening on someone's server.
Where FINANZA fits
FINANZA is a manual tracker with no account system and no bank connection. There's nothing to sign up for, the ledger is a database on your phone, and the reports are computed there. It asks for internet and network-state permission for ads, notifications, and storage for backups — no contacts, no location, no SMS.
The cost is the one above: you type every transaction, and if that's the habit you've already failed at twice, a linked app will serve you better. It's also ad-supported, which is how it stays free without a subscription and without touching your financial data.