Version 4 · effective November 8, 2026
Surge Account keeps everything you enter on your own device. We never receive it. There is no account, no sign-in, no analytics, no advertising, no tracking, and no third-party code that collects anything.
Surge Account is made by Travis Lyle Robinson, in Idaho, United States (“we”). Questions about this policy: surgeaccount@protonmail.com.
Everything you enter is stored only in the app’s own storage on your device:
Nothing you enter, unless you send it. Nothing you enter is ever sent to us or to anyone else.
The only ways anything you entered leaves are ones you start:
Off unless you turn it on. On the Accounts tab you can connect your bank through SimpleFIN (simplefin.org), a separate service you sign up for and pay directly. You link your banks on SimpleFIN’s own site; the app never sees your bank login.
Read-only. The app receives your accounts’ names, balances and the last 60 days of transactions, so it can show them beside its own figures. It cannot move money. It changes nothing in your records unless you tap to use a bank figure.
Between your phone and SimpleFIN only. The app asks SimpleFIN directly from your phone, at most every few hours while it is open and when you tap Refresh. Nothing passes through us, and we never see any of it. SimpleFIN sees the request and your device’s internet address, under its own privacy policy.
Kept on this phone, out of backups. The access SimpleFIN gives the app (a private address that works like a password) and the last figures it fetched are kept in the app’s private storage on this phone. They are left out of your backup files and out of the phone’s own backup, and never written to the app log. Which SimpleFIN account matches which of your accounts is kept with your figures, so it comes back when you restore a backup — you connect again with a new token.
Disconnecting. Disconnect on the Accounts tab deletes the access and the fetched figures from the phone. You can also remove the app’s connection on SimpleFIN’s site at any time, which stops it working everywhere.
It checks for a newer version of itself. When you open the app, and now and then while it is open, it asks our update address whether a newer version of the app is available, and if so downloads it. That request carries nothing you entered and no identifier of you or your device — it is the same request from every copy of the app.
Like any request on the internet, it shows your device’s internet address to the service that hosts the updates (Cloudflare, under its own privacy policy). We do not keep or use those addresses. If you are offline the check simply does not happen and the app works as normal.
If you connected your bank, it also refreshes from SimpleFIN now and then while it is open (above). Without a connection it never contacts SimpleFIN.
Your figures are protected by your device’s own lock and storage protections. Use a screen lock.
A backup file is not encrypted. Anyone who has the file can read it. Keep backups somewhere you trust.
Your figures are gone, and nobody can bring them back. There is no copy on a server — that is the point — so we cannot restore anything. A backup file you saved can be loaded into the app on any device to carry on where you left off.
The app reminds you to save a backup when you have never saved one, or when the last one is a month old and out of date.
The app is not directed at children under 13, and it collects nothing from anyone.
If this policy changes, the new version will be in the app and on this page with a new date. A change that means anything would leave your device would be said plainly in the app before it happened. This is version 4, effective November 8, 2026.