Bablo ("Bablo," "we," "us," or "our") is a personal finance app for iPhone, made and operated by Pasika Labs LLC, a California limited liability company. It connects to your bank and credit accounts and calculates what is safe to spend once bills, savings, and goals are accounted for.
This Privacy Policy explains how we collect, use, and disclose information, and the choices you have. It applies to the Bablo iOS app and to the babloapp.com website — together, the "Services."
The Services are offered to residents of the United States and are operated from the United States. This policy is incorporated into our Terms of Service, which govern your use of Bablo — including the dispute resolution and arbitration provisions that apply to disputes concerning your data.
We collect information from four sources: from you directly, from your financial institutions when you link an account, automatically from your device, and from third parties. The app also generates records as it runs.
When you link an account through our Financial Data Provider, we receive and store information needed to build and maintain your budget: your linked institutions and each account's details — such as its name, type, balances, and the last four digits of its number — your transactions, information the provider derives from them (such as recurring income and bill patterns), and status notices about each connection. We do not receive or store your bank username, password, security questions, or multi-factor codes. See Section 5.
We and our service providers automatically collect technical and usage information from your device, such as app version, device model and operating system, language, time zone, and network type; device-scoped identifiers; the screens and features used and other in-app activity; and diagnostic reports when the app crashes or errors. Our servers and our service providers' servers also receive the IP address from which your device connects. Section 7 describes how we configure analytics and diagnostics.
The Bablo app does not request, access, or collect:
Running the app produces records of its own — the budgets, patterns, projections, and guidance derived from your information, and a history of what the app has shown and sent you. These records are part of your account data: they are kept while your account exists and are erased when you delete it.
The app offers a demo mode containing fictitious financial data; no real accounts are connected. Demo sessions are temporary accounts on our servers and are deleted automatically after a period of inactivity. We record limited technical information about demo requests, such as IP address, to detect and prevent abuse.
We may aggregate or de-identify information so that it no longer reasonably identifies you or your device, and we may use and disclose such information for lawful purposes, including to understand, improve, and promote the Services. Where we hold information in de-identified form, we maintain it as de-identified and do not attempt to re-identify it, except to test that de-identification is effective. We do not sell aggregated or de-identified data derived from your Financial Information.
We use the information we collect to:
We may combine information collected through different parts of the Services — for example, information from your device with information from your linked accounts — and use it as described in this policy.
We do not use your Financial Information for advertising, and we do not sell it. See Section 7 and Section 8.
Some optional features may use third-party artificial-intelligence services. The following applies to any feature that would share your information with such a service:
Bablo's analysis is advisory. It does not approve or deny you anything, does not affect your credit, and makes no decision producing a legal or similarly significant effect. What it concludes can be corrected in the app, and your corrections take priority.
Bablo uses Plaid Inc. as its Financial Data Provider to connect to your financial institutions.
We do not collect your bank credentials, and our access is read-only. You authenticate with your financial institution through Plaid; Bablo does not receive your bank username or password. Plaid provides Bablo read-only access to account and transaction data. Bablo cannot initiate transfers, make payments, or otherwise effect changes at your financial institution.
By linking an account you also agree to Plaid's handling of your data under the Plaid End User Privacy Policy. Plaid is an independent controller of the data it collects from you, and its policy governs that activity.
Content you created in the app remains part of your account until you delete the account. We may also end inactive connections as described in Section 10.
We use service providers for crash diagnostics and product analytics to understand the stability and use of the Services. We configure these tools to limit what they receive: we do not send them your Financial Information, they identify you by generated identifiers rather than your name or email address, and screen-recording and screen-capture features are disabled. What they receive is the technical and usage information described in Section 2(C).
On the website, we measure page visits and signups with a minimal analytics configuration, and we honor the Global Privacy Control signal and your browser's Do Not Track setting. Technical details recorded with waitlist and demo submissions, such as IP address and browser information, are used to detect and prevent abuse and are retained briefly.
We do not display advertising in the app, and we do not use or disclose your Financial Information for advertising purposes.
We maintain administrative, technical, and physical safeguards designed to protect your information, appropriate to its sensitivity. These include encryption in transit, encrypted storage, an additional layer of application-side encryption for the tokens that connect Bablo to your banks — which are never sent to the app on your phone — access controls that limit production data to those who need it, and automatic redaction of credentials and secrets in our operational logs. You can also lock Bablo behind Face ID or Touch ID; your biometric data is handled entirely by iOS and never reaches us. If a security incident affects your information, we will notify you promptly and as required by law.
You are responsible for maintaining the security of the email account and device you use to access the Services, and for activity that occurs under your account; we are not responsible for loss arising from your failure to do so. If you believe your account has been accessed without authorization, contact privacy@babloapp.com immediately.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain your information for as long as your account exists, and afterward only as needed for the limited purposes described in this section. Operational records — logs, audit records, diagnostic reports, and connection notices — are retained for limited periods appropriate to their purpose and then deleted. A lapsed subscription does not by itself delete your information.
If your account has no active subscription and has not been opened for at least 30 days, we may disconnect your linked institutions — asking our Financial Data Provider to revoke each connection — and delete those institutions' accounts and transactions from Bablo. Opening the app resets this period. Your profile, goals, and settings remain until you delete your account.
The app stores the following on your device: your sign-in session, in the iOS Keychain; a cached snapshot of your linked accounts, deleted when you sign out; preferences; and the email address you last signed in with. Deleting the app does not delete your account on our servers. iOS preserves Keychain items across app deletion; signing out removes the session from the device.
Bablo is operated from the United States, and the Services are offered to U.S. residents. Your information is stored and processed in the United States. Some of our providers operate global infrastructure — for example, the content delivery network serving this website, Apple's push notification network, and the AI services behind any optional features you enable — and may process information at locations outside the United States.
If you access the Services from outside the United States, you understand that your information will be transferred to, processed, and stored in the United States, whose data protection laws may differ from those of your location.
You may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. We extend these rights to every Bablo user, regardless of where you live. If you live in a U.S. state with its own privacy law, Section 13 sets out the specifics.
Email privacy@babloapp.com from the address associated with your account. Certain rights can also be exercised directly in the app: you can correct categories and figures, and you can delete your account from the Me tab.
We verify your identity by confirming control of the email address on your account. For requests involving Financial Information, we may ask for additional information sufficient to confirm that you are the person the information belongs to, and we will not use it for any other purpose.
You may designate an authorized agent to submit a request on your behalf. We will ask the agent for written permission that we can verify, and we may contact you directly to confirm it.
If we decline to act on your request, you may appeal by replying to our response. We will inform you in writing of our decision and the reasons for it. If we deny the appeal, we will give you a way to contact your state attorney general.
Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and some withdrawals — such as unlinking every account — will prevent the app from working as intended.
If you reside in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, your state's privacy law provides the rights described below. We extend these rights to every Bablo user regardless of state of residence.
In the categories these laws use, we have collected the following over the past 12 months:
We collect these from you directly, from your financial institution through our Financial Data Provider once you link an account, from Apple, from our subscription management provider, and automatically from your device. We process them for the purposes described in Section 3, and we disclose them only to the categories of recipient listed in Section 8.
You have the right to confirm whether we process your personal information and to access it, including the categories collected, the categories of sources, the business purposes for processing, and the categories of third parties to whom we disclose it.
You have the right to request that we delete the personal information we hold about you. You may also do so at any time in the app: open the Me tab and tap Delete account, as described in Section 10.
You have the right to request that we correct inaccurate personal information we maintain about you.
You have the right to obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable machine-readable format.
If you are an Oregon or Minnesota resident, you have the right to request a list of the specific third parties to which we have disclosed personal information. Email privacy@babloapp.com and we will provide it.
You have the right to opt out of the sale or sharing of your personal information and of its processing for targeted advertising or for profiling that produces legal or similarly significant effects. We have not sold or shared personal information, as those laws define those terms, in the preceding 12 months, and we do not process personal information for targeted advertising or for such profiling. If that ever changes, we will update this policy and provide the required opt-out mechanisms before we begin. We honor Global Privacy Control signals. We do not knowingly sell or share the personal information of consumers under 16.
You have the right to limit our use and disclosure of sensitive personal information. The Financial Information we collect is treated as sensitive under California law. We use it to perform the Services you signed up for, and we do not use it to infer characteristics such as your health, ethnicity, religion, sexual orientation, or political views, or to profile you for advertising or for decisions about your eligibility for anything. Deriving spending patterns from transactions is the core function of the Services. Because we do not use sensitive personal information for purposes that would require an opt-out, no further restriction is available to exercise; you may contact us to confirm this.
You have the right not to receive discriminatory treatment for exercising any of these rights. We will not deny you the Services, charge you a different price, or provide a different level or quality of service because you made a request. We offer no financial incentive or loyalty program in exchange for personal information.
Email privacy@babloapp.com from the address associated with your account. Verification, authorized agents, and appeals are described in Section 12. We respond within the period required by applicable law and will notify you if we require an extension permitted by law.
California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We make no such disclosures.
Nevada law gives residents the right to direct a business not to sell certain personal information. We do not sell personal information as defined by Nevada law. You may still submit a request to privacy@babloapp.com.
Bablo and this site link to sites and services we do not control — your bank's own site during linking, Plaid's site and portal, billers' websites, Apple's pages, and others. Information you provide to a third party is governed by that party's privacy policy, not this one. We are not responsible for the practices of third parties, and we encourage you to review their policies.
Bablo is intended for a general adult audience. As set out in our Terms of Service, you must be at least 18 years old to use the Services. Bablo is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact privacy@babloapp.com and we will delete it and close the account.
We may update this policy from time to time to reflect changes in the Services, our practices, or applicable law. When we do, we will revise the "Last updated" date at the top of this page, and if a change is material, we will provide notice as required by law. We encourage you to review this page periodically. Continuing to use Bablo after an update takes effect means you accept the revised policy, and information collected after a revised policy takes effect is handled under the revised policy.
The Services are operated by Pasika Labs LLC, a California limited liability company. For privacy questions, requests, or complaints, email privacy@babloapp.com. For anything else, including support, email hello@babloapp.com or visit Help & Support.