Is Lunch Money safe and legit? What the company publishes about ownership and security

Who is behind Lunch Money

Lunch Money is run by its founder, Jen, who wrote on the company blog in July 2024 that the business is bootstrapped and profitable, has no corporate shareholders or investors, and is 100% customer-funded, with subscriptions funding development instead of ads or partnerships. [1]

The same post sets out the pricing history from August 2019, when it charged $3 a month, so the product has taken paying subscribers for over seven years. The post also says price increases have only ever applied to new subscribers. [1] The support docs describe an official iOS and Android companion app and a public developer API. [6]

What we could not verify: Lunch Money's pricing page and other main-site pages, including its terms and privacy policy, could not be retrieved by our research on 30 October 2026 (the server refused access), so this guide relies on the support documentation, the founder blog post and Plaid's own page. Read the privacy policy and terms linked from the Lunch Money site yourself before signing up.

Bank connections: Plaid and read access

Automatic imports run through Plaid, which Lunch Money supports for most US and Canadian banks and some EU banks. [2] The accounts FAQ says that once you link, Lunch Money receives an access token that gives it read access to all of your accounts at that connection. [3] Some jurisdictions require banks to renew third-party access every 90 or 120 days, so periodic relinking is normal rather than a warning sign. [2]

Plaid says it protects personal information with AES-256 encryption and TLS, requires multi-factor authentication for its own systems, and lets you see which apps you have connected and control ongoing access in Plaid Portal at my.plaid.com. [9]

One subtlety: the accounts FAQ says inactive accounts inside an active connection cannot be fully deleted, are skipped during updates, and the access token stays valid. [3] If you want access to end, remove the connection, not just individual accounts.

API tokens and third-party tools

The developer API is in open beta. You create a token in Settings, Developers by giving it a label and reason; tokens are per budgeting account, so a token only works for the budget where it was created. The Active Access Tokens card lists every token with its last activity and lets you rename or revoke it. [5]

The support page we read does not describe read-only or limited-scope tokens, so treat any token you paste into a third-party tool as a key to that whole budget, and revoke it when you stop using the tool. Third-party sync services that write to Lunch Money do so through this API, which means you are trusting that third party as well as Lunch Money. [2] [5]

Collaborators, AI and deletion

Collaborators each sign in with their own Lunch Money account and manage the same budget, bank accounts and settings; the Edit Account panel shows who linked each account. [8] Anyone you invite sees the same financial data you do, so invite carefully.

The FAQ states there are no built-in AI features, any future ones will be opt-in, and data will not be shared with AI systems without explicit consent. [6]

Cancelling from the Billing page deletes the account: all data is purged and unrecoverable within 48 hours. Trial accounts five days past expiry with no billing information are purged automatically, and support will delete an account within 48 hours on request by email. [6] [7]

What the docs do not say

Absence of a statement is not evidence of a weakness, but you should know where the gaps are before linking a bank.

Checklist: grant, review, revoke, export

Run through this before linking, and again once a year.

• Read the privacy policy and terms on lunchmoney.app before you link any bank.
• Link only the accounts you will actually budget with; each Plaid connection grants read access to all accounts at that login. [3]
• Check Plaid Portal at my.plaid.com to see what you have connected and to revoke access you no longer want. [9]
• Review Settings, Developers and revoke any API token you do not recognise or no longer use. [5]
• Remove synced connections you no longer need from the Accounts page using Troubleshoot or remove account. [4]
• Export transactions to CSV from the Transactions page with an all-time, unfiltered view, because only the visible view is exported. [10]
• Remember that cancelling is deletion: data is gone within 48 hours. [7]