If a budget app is free, who actually pays?

If an app is free, someone still has to pay for the servers, the developers and support. For a budgeting app the question of who pays is especially sensitive: the app sees what you earn, what you spend it on, and how much you have left at the end of the month.

That makes it a good idea to understand how the service you hand those numbers to actually makes its money.

Why it is worth asking

Forbrukerrådet (the Norwegian Consumer Council) and Datatilsynet (the Norwegian Data Protection Authority) have pointed out repeatedly that "free" rarely means free in digital services. When you do not pay in kroner, you can pay in data: where you are, what you buy, which accounts you hold. For a finance app the ingredient list is potentially even more detailed than it is for a social network.

That does not mean every free service sells you out. It does mean it is a good habit to know which model the service actually runs on, before you import six months of transactions.

Five ways a budgeting app can make money

Model	What it means in practice	Privacy risk
In-app advertising	Third parties learn that you are seeing the ad, usually alongside your IP, device ID and behaviour	High. Typically involves many tracking tools
Sale of aggregated financial data	"Anonymous" spending patterns are sold to banks, fund managers or analytics firms	Medium to high. Aggregation is often less anonymous than it sounds
Referrals and partner offers	The app earns a commission when you sign up for a consumer loan, credit card or insurance through its links	Low to medium, as long as the recommendations are clearly commercial
Premium or subscription	You pay a monthly fee for extra features. The free version is deliberately narrow	Lowest, provided the app does not also use any of the models above
White-label for a bank or fintech	The app is built for, or acquired by, a financial company that wants the customers	Medium. Depends on what the parent company gets access to

Most apps combine two or three of these. An ad-free interface does not rule out data being shared behind the scenes.

Questions that reveal the model

You do not have to read the full privacy policy to get a clue. These questions take you a long way:

1. Does it say in concrete terms that the app does not sell or share data with advertisers? Look for a clear sentence, not just "we take privacy seriously".
2. How long is the list of third parties or "sub-processors"? A short, named list is better than a long, generic one.
3. Is there a paid version? If the answer is no, something else has to fund the service.
4. Can you export all your data and delete your account without going through support? A yes here often goes hand in hand with a healthy business model.
5. Where is the company registered, and where is the data stored? Norway or the EU is easier to hold accountable than a company registered outside the EEA.

If you struggle to answer several of these, it is reasonable to switch, or to limit which accounts and periods you import.

A little on what the law actually requires

Datatilsynet has on several occasions cracked down on apps that shared sensitive data with third parties without valid consent. Forbrukerrådet has pointed out that an entire industry has grown up around the sale of personal data, and is calling, among other things, for sharing to be opt-in and for the third-party list to be clear.

Under GDPR you have the right to know which categories of data a service collects, who it shares them with, and to withdraw your consent. It is a right you can use without giving any reason.

How we think about it at Luma

Luma is built on one of the least glamorous models: a paid version. We do not show ads in the app, we do not sell aggregated financial data, and we do not take a commission for nudging you towards a loan or a card. If you decide to leave, you can export your data as CSV and delete your account, without going via support.

That does not mean we are the right choice for everyone. But you should be able to answer the five questions above when you read about Luma. If you have to guess on any of them, it is just as fair to ask us as to ask anyone else.

A small, concrete next step: open the privacy policy of the budgeting or banking app you already use, and check how many of the five questions you can answer. It takes five minutes, and gives you a clearer picture of what "free" actually costs.