Privacy Policy
My Snowball exists so you can plan your way out of debt without handing your balances, interest rates, and what you owe to someone else's server. Here is exactly what it does and does not do.
The short version
Your debt profile never leaves your device. My Snowball runs entirely in your browser (or, if you're using the app, entirely on your device). There is no server, no account, no sign-up, and no sync. There's no usage analytics or ad tracking, and your debts, balances, interest rates, and payment plan are never sent anywhere. The only time My Snowball touches the network is around Pro, through your payment provider, which may include the provider's own diagnostics; see Payments below.
Verify it yourself
You don't have to take our word for it. Open your browser's developer tools, switch to the Network tab, and use My Snowball however you like. Add debts, run the plan, log a check-in. You'll see zero requests carrying your data, because there is no server to send it to. The only network activity that can ever appear is around Pro, and it never carries your debts or plan. A cloud or bank-linked app physically cannot show you an empty network tab.
You don't have to take our word for it. Turn on Airplane Mode and use My Snowball however you like. Add debts, run the plan, log a check-in. Everything still works, because there is no server to send your data to. The only network activity that can ever appear is around Pro, and it never carries your debts or plan. A cloud or bank-linked app physically cannot work like that.
By design, My Snowball has no bank linking, no Plaid, no ads, and no analytics on your debts or plan, and it never holds your money. The only third parties involved are our payment providers (Stripe and RevenueCat on the web, or Apple and RevenueCat on iPhone and iPad), which handle Pro and may collect standard purchase diagnostics, never your balances, rates, or plan. There's nothing to breach, nothing to sell, and nothing that can be shut down out from under you.
What it stores, and where
Everything is stored locally, on your own device:
- On the web, your data lives in your browser's
localStorage, namespaced undersnowball.v1, storage your browser keeps on your machine and never uploads anywhere on its own. A few small companion keys are used too, likesnowball.theme(whether you prefer light, dark, or system appearance) andsnowball.code_ack(whether you've confirmed you saved your Pro restore code), along with your goal photo and small bookkeeping such as backup reminders, each under its ownsnowball.key. - In the app, the same data lives in the app's private on-device storage, sandboxed to My Snowball the same way any other app's data is.
What's stored: each debt you enter (its name, balance, interest rate, and minimum payment, plus any intro-rate terms you add), your chosen payoff strategy (snowball, avalanche, or your own custom order), any extra monthly payment, your monthly check-ins, and (if you add one) your goal photo. Nothing is encrypted beyond whatever protection your device already provides (e.g. your phone's passcode/Face ID, or your Mac's disk encryption), because nothing ever needs to travel anywhere in the first place.
If you uninstall the app or clear your browser's site data for My Snowball, this data is gone. There's no copy anywhere else to restore it from, because we never had one. You can make your own copy at any time with Back up your data in the footer, which saves a plain JSON file to your device that only you hold.
What we send anywhere
Your debt data: nothing. Adding debts, choosing a strategy, previewing your plan, running the "reach a debt-free date" goal-seek, the "what if I paid extra?" slider, exporting your payoff plan as a PDF, and sharing a milestone card all happen entirely on your device. The PDF is generated locally too, using an open-source library (pdf-lib) that runs in the browser/app itself. None of your debt balances, rates, or plan is ever transmitted.
The one exception is Pro. When you open the upgrade screen, or buy, restore, or confirm an unlock, the payment providers (Stripe and RevenueCat) handle the checkout and an anonymous device identifier / restore code is used to check whether Pro is active. That request carries no debts, no balances, and no plan details. See Payments for exactly what it can see.
The one exception is Pro. Each time the app starts, and when you try a Pro feature, it uses a random identifier to check whether Pro is active. If you don't have Pro, it also looks up the price. Apple handles buying and restoring through the App Store. None of this carries your debts, balances, or plan details. See Payments for exactly what it can see.
When you export a PDF or share a milestone card, the file is handed to your operating system's own share sheet (on iOS) or your browser's own download prompt (on the web). My Snowball doesn't choose where it goes next; you do.
Payments
My Snowball is free to use. You can plan up to four debts, compare snowball vs. avalanche, run the goal-seek, and use the "what if I paid extra?" slider without paying anything. If you want the extras (unlimited debts, PDF export of your full payoff plan, and the refinance & balance-transfer modeler, plus intro-rate tracking, a goal photo, and your payoff story), Pro is currently a one-time $9.99 purchase.
If you upgrade to Pro, payments are securely processed by Stripe and RevenueCat. You enter your payment details directly with our payment providers. We never see or store your full card number.
To process your purchase, our payment providers share limited information with us, including:
- your email address
- your name (if your payment method provides it)
- the amount paid
- your card's brand and last four digits
We use this information only to send receipts, process refunds, and provide customer support. Your payment information is never linked to your data inside the app, never used for marketing, and we don't sell it or use it for third-party advertising.
Stripe and RevenueCat process your payment and retain their own transaction records under their respective privacy policies. See Stripe's Privacy Policy and RevenueCat's Privacy Policy.
When you unlock Pro you're given a one-time restore code (and a license card you can download or screenshot). Because there are no accounts, that code is how you re-unlock Pro in another browser. Keep it somewhere safe along with your Stripe receipt email as proof of purchase. The iPhone and iPad app sells Pro separately through the App Store.
30-day money-back guarantee. If Pro isn't for you, email support@mysnowballapp.com within 30 days of purchase for a full refund.
On iPhone and iPad, Pro is sold through the App Store using Apple's In-App Purchase. Apple handles the entire checkout and shows the price in your local currency. You pay with your Apple Account. We never see or handle your card, and we never receive your name or email.
From Apple we receive anonymized sales totals (how many, not who). The app checks with RevenueCat whether Pro is active on your device. What goes to RevenueCat: a random identifier RevenueCat makes for this installation; Apple's identifier for this app on this device (the "identifier for vendor": iOS gives the same one to apps from the same developer on one device, and it is not your Apple Account); your device model, iOS version and the app's version; your preferred languages and your App Store country; and, once you buy or restore, the App Store's record of the purchase. As with any connection, RevenueCat also sees your IP address. None of this includes anything you create in the app. It is never used for marketing, and we don't sell it or use it for third-party advertising.
There's no restore code on iPhone and iPad. Restore Purchases re-unlocks Pro on any device signed in with your Apple Account, and your Apple receipt is your proof of purchase.
Your receipt comes from Apple, and any refund is handled by Apple, not by us. To request a refund, use Apple's own process at reportaproblem.apple.com. RevenueCat verifies your purchase on our behalf under its Privacy Policy.
Permissions, explained
The app requests no special device permissions: no contacts, no photos, no location, no camera, no microphone, no notifications. The only system interaction is the standard share sheet (iOS) or file download (web) used to hand your exported PDF, backup file, or milestone card to another app of your choosing, such as Mail or Files. It's the same mechanism any app uses to let you save or share a file, and one you control each time it happens.
Changes
If this policy ever changes, the updated version will be posted here with a new "Last updated" date.
Contact
Questions can be sent to: support@mysnowballapp.com