Your money records
are used only as far as you allow

DonUp processes only the information needed to record and sync your budget. Features that send data to external AI work only if you allow them separately, and even if you don’t, you can still enter things manually and use all the regular budgeting features.

Four principles

AI only after you allow it

Before anything is sent to external generative AI, we explain the recipient, the data, the purpose, the retention period, and how to decline, and ask for your separate permission. You can withdraw it anytime in “AI data use” in Settings, and no new AI requests are sent after you withdraw.

Access is separated by ledger

Personal data is kept separate for each account, and row-level access policies limit authenticated users to reading only their own data. However, in a shared ledger you created or joined, members can view and edit that ledger’s entries, budgets, and assets together.

We don’t collect what we don’t need

We don’t collect card numbers, financial account login details, advertising identifiers, location data, contacts, health data, or Korean resident registration numbers.

View, edit, delete, and take it with you

You can view, edit, delete, and export your budget data in the app (JSON file export requires Pro), and you can delete your DonUp account and its server data in account settings.

Who processes what?

DonUp does not sell or provide personal information to third parties, except where required by law or with your consent. To run the service, the providers below process information on DonUp’s instructions.

Supabase · Singapore

Account and sync

Handles sign-in, storage of budget data and private files, sync across devices, and account deletion.

OpenAI · United States

In AI features you allow

Once you allow it, AI features analyze the text you enter, the images or documents you choose, and the budget information they need. Auto advice cards you turn on can also send requests automatically using the budget information on that screen. By default, data may be retained for up to 30 days.

Cerebras · United States

Only when AI runs

Analyzes the text or image you enter when you run the relevant analysis feature. Cerebras states that it does not retain inference inputs or outputs after responding.

Apple · Google

Sign-in and payments

Used for Sign in with Apple and Google, App Store and Google Play payments, and verifying restored purchases.

Read the full Privacy Policy

Retention and deletion

Deleted entriesRecovery copies are kept for up to 30 days or the 200 most recent items, then removed. They’re removed sooner if you clear the recovery history yourself or delete your account.
Account deletionYour member information, synced data, attachments, and purchase entitlement verification data are deleted from our production systems. Local copies on your devices and exported files must be deleted separately.
Deleting the appOnly the local copy on that device is removed; your account data remains. To delete server data as well, use Delete Account in the app.
SubscriptionsDeleting your account does not cancel or refund App Store or Google Play subscriptions. Manage them separately in the store where you bought them.
DonWorry chatsYou can delete them with the in-app chat history deletion feature or by deleting your account.

DonWorry and privacy help Privacy inquiries

Your money recordsare used only as far as you allow