Where your money data lives
In your own Google account. Nowhere else.
Tobsy has no database. Your entries are written to a spreadsheet in your own Drive, and the app reads them back from there. We can't see them — not as a policy, but because there is no path for them to reach us.
How that works
A small script inside your own copy does the talking.
You copy a spreadsheet, once.
Tobsy comes as a Google Sheet with a few plain lines of code attached. Making a copy puts both into your own Drive. From then on, the app in your browser talks to your copy and to nothing else.
The app runs in your browser.
It's a web page you can install like an app. It reads and writes your sheet directly. It loads no outside code, sends no analytics, and the fonts are served by us rather than a third party.
Google asks you one thing.
The first time your copy runs, Google asks whether it may work in this spreadsheet. That's the whole permission, and the only time it asks. Not your Drive, not your mail, not your contacts.
Exchange rates come from inside your sheet.
Foreign spending is converted with a Google Finance formula in your own spreadsheet, so even that never goes through us.
Private categories are a curtain, not a vault.
A category you mark private shows its rows as dots until a PIN is entered — privacy between people who trust each other and share a sheet. The rows are not encrypted on the device, and we say so plainly.
You can always leave.
It's a spreadsheet. Open it in Google Sheets any time. Inside the app, Export gives you everything as a file, and the reports print to PDF. Delete your copy from Drive, and your data is gone — it existed nowhere else.
Try it with sample data first, if you like.
The demo is the real app with fourteen months of sample entries. Nothing is installed and nothing is saved.