How you're protected

You each get a private 1-on-1 thread with Bantr, plus a shared group thread with both of you. What you say in your private thread is yours — your partner never sees it.

This isn't just a policy we ask the assistant to follow. The boundary is built into the system: when Bantr answers in one thread, it is only ever given the information that thread is allowed to see. Your partner's private words are never placed where the assistant could repeat them — even if someone tries to talk it into it.

Nothing moves from your private thread into the shared one unless you explicitly say so. When you're not sure if something is shareable, Bantr asks rather than guessing.

If you both opt in, Bantr can keep a surprise one of you is planning secret from the other. It keeps the secret by declining to discuss it — never by lying — and a surprise is never quietly added to a shared calendar where it would tip the other person off.

You set a spending threshold together. Any shared spend over it requires both partners to approve— Bantr can't commit your shared money on one person's say-so.

Bank and card accounts you connect (through Plaid) are private to you until you choose to share them into the budget. The access tokens that link those accounts are kept in an isolated vault that no one — not your partner, not the web app — can read.

You can connect a Google account so Bantr can help with your schedule. With your permission, it reads your calendar events to build one shared schedule for the two of you, and it can add events you ask it to create(for example, "put dinner with Sam on Friday at 7"). It doesn't change or delete anything on its own.

A calendar only becomes visible to your partner when you choose to add itto your shared schedule, and you can disconnect Google at any time. Bantr's use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements — your calendar data is used only to provide these features, never sold, and never used for advertising.

Every couple's information lives in its own scope. One couple's data is never reachable from another's, and access is gated at the database level, not just in the app.

Connections to Bantr and to the services it uses (your bank via Plaid, your calendar via Google) are encrypted in transit with TLS.

Bantr will not track or monitor one partner for the other ("tell me when they get home"), and it won't take sides or act as a weapon in a disagreement. It's here to help you both, not to referee.

So you know exactly what you're trusting: Bantr is notend-to-end encrypted. To actually help — read your receipt, answer "when did we last…", draft a reply — the assistant has to be able to read your messages. What we guarantee is the part that matters most for a couple: one partner's private thread is never shown to the other, your shared money is gated, and we don't sell your data.