Local by default
Balances, bills, income, and habits stay in your browser. Cloud sync is opt-in, never assumed.
Your data
No lock-in. Ever.
Horizon is built so leaving is as easy as arriving. Your ledger lives on your device by default, and every byte of it belongs to you.
One-tap export
Settings → Export downloads a plain JSON audit trail of your inputs, forecast, and engine version.
One-tap wipe
Settings → "Clear everything" removes local and cloud copies. No support ticket, no waiting period.
What the export contains
- • Every account, balance, income source, bill, habit, and scenario you entered.
- • The exact forecast Horizon drew today, row by row.
- • Engine version and calibration signals — enough for a financial advisor or an auditor to reproduce the math.
- • No hidden analytics IDs, no cross-user data, no server-only fields.
The file is JSON, human-readable, and versioned. If Horizon disappears tomorrow, your forecast still opens in any text editor.
Optional cloud backup
A free Horizon account stores one copy of your money data on our hosting platform — sent over HTTPS, encrypted at rest by the platform, and readable only by your signed-in account. It is used only for syncing across devices and recovering from a cleared browser, and you can delete it from Settings at any time. Without it, there is no server copy to restore.
No third-party watchers
Horizon doesn't ask for bank credentials and has no fields for them. No analytics libraries, session recorders, ad-tech pixels, font CDNs, or third-party SDKs are loaded. If optional bank sync ever arrives, it will be opt-in and announced first.
The detail behind the promise
This page is the plain-language version. For how the app is delivered, what request metadata the host sees, and which processors are involved, read the privacy policy. For what Horizon is and isn't — forecasts aren't guarantees, and we hold no audit certifications — see the terms of service.