YNAB

A family budget that lives in your own Google Drive. No company servers, no subscriptions — your numbers stay yours, and nobody (not even the app's maker) can see them.

You sign in once on this device. After that the app opens instantly — no tapping, no re-connecting, even offline.

Already set up on another phone, tablet or computer? Use the same button. Sign in with the same Google account and the app finds your existing budget and offers to connect this device to it.

One thing you'll see the first time

Google may show a grey screen that says "Google hasn't verified this app". That is normal for a small family app. When it appears, tap Advanced, then Go to YNAB. You will only ever see it once on this device.

Sharing with the rest of the family?

New here? See the getting-started guide

How your data stays private

Why one sign-in: so the app can open the moment you tap it — no "allow" pop-up and no "connect your budget" screen every time. This one sign-in lets your device securely remember you, so it never has to ask again.

What the app can touch: the permission you grant is the narrow Google one called "see and edit only the files this app creates". It can never open your photos, documents, or anything else in your Drive — only the budget files it made itself.

Why the maker cannot see your data — the proof:

Your budget is written only to your Google Drive. There is no company database, anywhere, holding a copy.
The one small piece of app plumbing that runs on a server (used only during that first sign-in) never receives your budget — it only helps your device get its "remember me" key. Your numbers never pass through it.
Because of the "only files this app creates" limit above, even the maker's own Google sign-in key cannot read your files. Google itself enforces this.