Privacy Policy

    Last updated: August 27, 2025

    1. Introduction

    At Budgeta, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our recurring expense tracking application.

    2. Data Controller

    The data controller for your personal data is Budgeta. For contact information, please use the contact form available in the application.

    3. Information We Collect

    We collect the following types of information:

    Account Information

    • Email address (for account creation and communication)
    • Name (for personalization and account identification)
    • Password (encrypted and securely stored)
    • Google account information (if using Google Sign-In)

    Expense Data

    • Recurring expense names and descriptions
    • Amount and currency information
    • Billing cycle and payment dates
    • Expense categories

    Technical Information and Cookies

    • Essential session cookies to keep you logged in and secure the Service
    • Device and browser information
    • Basic server logs (IP address, browser type) for security and abuse prevention

    4. How We Use Your Information

    We use your information for the following purposes:

    • Providing and maintaining the expense tracking service
    • Processing your account registration and authentication
    • Sending important service updates and notifications
    • Improving our application and user experience
    • Providing customer support and responding to inquiries

    5. Legal Bases for Processing

    We process personal data based on:

    • Contract (to provide the Service you requested)
    • Legitimate Interests (to maintain and improve the Service, secure our systems)
    • Consent (where you explicitly agree, e.g., optional communications)

    6. What We Do NOT Collect

    We want to be clear about what we do not collect:

    • Bank account numbers or credit card information
    • Social Security numbers or government IDs
    • Personal financial statements or tax documents
    • Location data or GPS coordinates
    • Personal communications or messages
    • Browsing history outside of our application

    7. Security

    We use reasonable technical and organizational measures to protect your personal data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

    We also minimize operational logs and retain them only for short periods (typically 7–30 days) to maintain security and prevent abuse.

    8. Data Sharing and Disclosure

    We do not sell, trade, or otherwise transfer your personal information to third parties. We may share your information only in the following limited circumstances:

    • With your explicit consent
    • To comply with legal obligations
    • To protect our rights and safety
    • With service providers who assist in operating our application (under strict confidentiality agreements)

    9. Your Rights

    Subject to local laws, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, please contact us through the contact form available in the application. We will respond within a reasonable period.

    When you delete your account, your data is removed from production systems immediately, with encrypted backups purged automatically within 30 days.

    10. Data Retention

    We retain your data while your account is active. When you delete your account, we permanently delete your personal data from our production systems immediately.

    Residual copies may remain in encrypted system backups for up to 30 days until those backups are automatically purged. Backups are used solely for disaster recovery and are not restored for individual requests.

    We may retain minimal information if required by law or to resolve active disputes; otherwise, we delete data as described above.

    11. Children's Privacy

    The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, please contact us through the contact form available in the application to delete it.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. We will post the updated version with the "Last updated" date. If changes materially affect your rights, we will provide additional notice.

    13. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us through the contact form available in the application. We do not provide direct email support. We are committed to addressing your concerns and protecting your privacy.