Privacy Policy

Data we collect

• Account data: your name, email address, a hashed password (we never store your password in plain text), your language and appearance preferences, and an optional profile picture. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Budget data you enter: households, incomes, expenses, categories, banks, savings jars, vaults, planned expenses and related notes and amounts.
• Device data: if you enable notifications, a push notification token for the device or browser.
• Billing status: your plan, free-trial dates and purchase identifiers. We do not receive or store your card number.
• Technical data: a session cookie that keeps you signed in and cookies that remember your language and theme.

How we use your data

We do not sell your data and we do not use it for advertising or profiling.

• To provide the app: sign you in, store and show your budget, and keep it in sync across your devices.
• To send service emails (invitations, payment and trial reminders) and push notifications you have enabled.
• To manage your free trial, subscription or lifetime purchase and to prevent fraud and abuse.
• To keep the app secure and fix problems.

Who we share data with

We only share data with service providers that help us run the app, under their own privacy terms:

• Stripe processes web payments. It receives your email, name and payment details and keeps transaction and invoice records as required by tax and financial law.
• Google Play processes purchases made in the Android app.
• Google provides optional sign-in with Google.
• Resend delivers our emails.
• Firebase Cloud Messaging delivers push notifications.
• Our hosting and database providers store the app and its data.

Sharing with other household members

If you invite other people into a household, they can see the items marked as shared in that household. Personal items are visible only to you.

Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time in Settings > Account > Delete account, or from the account deletion page. Deleting your account permanently removes your profile, your budget data, your notification tokens and your Stripe customer record. If you share a household with other members, only your personal items are removed and the household continues for the others.

Stripe and Google Play may keep payment records for the period required by law. We keep an anonymised log of billing events (without a link to you) for accounting and fraud prevention.

Your rights

Under the GDPR you have the right to access, correct, export and delete your data, to restrict or object to its processing, and to lodge a complaint with your data protection authority (in Cyprus, the Office of the Commissioner for Personal Data Protection). Most of this you can do directly in the app; for anything else, contact us.

Security

Data is transmitted over HTTPS, passwords are stored hashed, and access to every household is checked on the server. No system is perfectly secure, so please choose a strong password.

Children

The app is not directed to children under 16 and we do not knowingly collect their data.

Changes to this policy

We may update this policy. If the changes are significant we will tell you in the app or by email. The date above shows the latest revision.