Local-first or cloud: where your money data lives

Every budgeting app makes one architectural choice that determines almost everything else: your financial data either sits on a company's servers or it sits on your device. That single decision drives whether you get automatic transaction feeds, whether syncing is effortless, who is responsible for backups, and what exposure you carry if the company is breached or sold.

Neither answer is correct in general. Both come with a bill, and the bills are paid in different currencies.

What connecting a bank actually does

In Australia there are two mechanisms, and they aren't equivalent.

The Consumer Data Right is the regulated route. A provider has to be accredited, has to obtain your explicit consent to specific data for a specific purpose, and operates under privacy safeguards overseen by the OAIC. You verify the sharing with your bank rather than handing your banking login to a third party, and you can withdraw consent.

The older route is a third-party aggregator, which has historically often meant providing your internet banking credentials so a service can retrieve the data on your behalf. Some apps still work this way. It's not illegal and it's not necessarily insecure, but it's a materially different arrangement from the regulated one, and the difference is rarely visible in an app's marketing.

Whichever route, the outcome is the same in one respect: a copy of your transaction history now exists somewhere that isn't your bank and isn't your device. It is one of the five things worth checking when choosing a budgeting app.

What that copy is worth

Transaction history is unusually revealing. It shows where you shop, where you travel, what you earn and when, what you owe and to whom, whether you gamble, what you pay for healthcare, and roughly where you live and work.

That's not an argument that any particular company is careless with it. It's an argument for knowing the data exists, who holds it, how long they keep it, and what happens to it if they're acquired or wound up. Privacy policies describe the present intention of the current owner.

What local-first means

Local-first means the app stores your budget in your device's own storage and never sends it anywhere. There's no account because there's no server to have an account on. Nothing to breach centrally, nothing to sell, and nothing to keep paying for.

The costs are real and worth stating plainly.

No automatic transaction feed, because there's nothing connected to fetch one. You enter your own bills, which is a one-time job that changes when a bill changes, but it's a job. No effortless sync between devices either, because sync needs a middle. Getting your budget onto a second device means moving a file yourself.

And backups become your responsibility. A cloud app's real convenience isn't syncing, it's that losing your phone is an inconvenience rather than a loss. Local-first hands that back to you, which is only an improvement if you actually take the backups.

The honest trade-off

Cloud buys you automation and recoverability, and charges you in ongoing exposure and usually an ongoing fee. Local-first buys you privacy and permanence, and charges you in manual entry and self-managed backups.

Convenience and control are genuinely in tension here. Anyone selling you both without a caveat is leaving something out.

Which side wins depends on what you're actually doing. Categorising past spending across several accounts is enormously easier with a feed. Deciding what to set aside this payday needs your bills and your pay cycle, and neither of those lives in your transaction history. The payday budgeting method is forward-looking for exactly that reason, which is why it works without a bank connection.

Questions worth asking either way

• Does the app connect through the Consumer Data Right, through an aggregator, or not at all?
• If it holds my data, for how long after I stop using it?
• Can I export everything, in a format something else can read?
• If it's local-first, how do backups work, and how easy is a restore?
• What happens to my data if the company is sold?

EachPayday is local-first, which is a choice with the costs above and not a claim to be better. It's the reason there's no sign-up, no bank access and no subscription, and equally the reason you enter your own bills and keep your own backup files. The privacy documentation sets out exactly what that means in practice.