How BudgetHaven protects your data
The safeguards BudgetHaven uses today, described plainly and without promises no online service can make.
Sign-in protection
You create your account and sign in on mybudgethaven.com. Your password travels over an encrypted (HTTPS) connection through BudgetHaven's sign-in service straight to Amazon Cognito, which never keeps it in readable form. BudgetHaven never stores or logs your password. BudgetHaven uses Amazon Cognito authentication and offers optional time-based one-time password (TOTP) multi-factor authentication. We strongly recommend enabling it because it adds a second sign-in check if someone learns your password. Remembered sessions use an opaque HttpOnly, Secure, SameSite=Strict cookie rather than exposing authentication tokens to browser-readable storage.
Account separation
The server derives ownership from the authenticated session and scopes data access to that user's partition. Other BudgetHaven users, including family members, cannot use the app or API to read or change another user's budget.
Who sees your budget
We don't browse your personal budget. Your financial entries stay private to your account. If you ask for help, we look only at what's needed to fix that problem, nothing more.
Connections and storage
CloudFront redirects public page requests to HTTPS. Application data is encrypted in transit, and DynamoDB and private S3 storage use encryption at rest. The frontend storage bucket blocks public access and is read through CloudFront's signed origin access. CloudFront access logs (page, time, IP address, browser, no cookies) are written to a private, encrypted S3 bucket with public access blocked and expire automatically after 90 days.
Recovery and deletion
DynamoDB point-in-time recovery is enabled for operational recovery. Closing an account blocks access immediately and marks every record in that account's partition to expire after 35 days, when DynamoDB's time-to-live removes it. The sign-in identity is kept during that window so the owner can reactivate after fresh authentication; choosing to delete immediately removes the records and the Cognito identity right away. Deleted records can remain in encrypted recovery backups until the recovery window ages out.
Operational safeguards
The API applies request throttling. The application logs error types rather than passwords, tokens, MFA secrets, or financial details. Expired login and session records use automatic TTL cleanup, and AWS administrative activity is recorded with CloudTrail.
What to keep to yourself
BudgetHaven has no advertising. Google Analytics runs only on the public pages, never inside the signed-in app, as the Privacy Statement explains. Enter only what BudgetHaven needs to plan your money. Keep Social Security numbers, full bank or card numbers, and passwords to yourself: BudgetHaven never asks for them.
Contact and effective date
This page is effective October 1, 2026. Questions about privacy, security, or deleting your account? Email support@mybudgethaven.com.