Privacy Policy

1. Information We Collect

When you create an account and use the app, the following data may be collected or provided by you:

• Account credentials: your email address and password used to sign in. Passwords are hashed before storage and are never kept in plain text. If you sign in with a third-party provider (Google, Apple, Microsoft, or Facebook), we receive the name and email the provider shares with us — we do not receive or store your provider password.
• Financial data you enter: account names, types, and balances; transactions; income sources; recurring monthly expenses; subscriptions; and budget settings (such as your starting balance, daily spending target, and low-balance alert threshold).
• Login Vault entries: the site names, URLs, usernames, and passwords you choose to store in the app’s Login Vault. These are encrypted at rest using AES-256-GCM encryption (see Section 4) so they are not stored in plain text.
• Optional contact information: your name and email if you submit the in-app feedback or contact form.
• Usage and diagnostics data: basic, anonymous analytics events (such as which features are used) and standard device/browser information needed to operate, secure, and improve the service. This data is not linked to your financial records.
• Payment metadata: if you make an in-app purchase or subscription, the payment is processed by Stripe. We receive only a transaction identifier and subscription status — we never see or store your full card number.

2. How We Use Your Information

We use your data only to provide and improve the app’s features, including:

• Calculating your daily balance, spending projections, and net worth trend.
• Displaying and organizing your accounts, transactions, and subscriptions.
• Securely encrypting, storing, and retrieving your Login Vault entries.
• Sending optional payment-reminder and low-balance email notifications that you explicitly enable.
• Processing in-app subscriptions and purchases through Stripe.
• Authenticating your identity and maintaining the security and stability of your account.
• Aggregating anonymous usage analytics to improve the app.

We do not sell your personal or financial data to third parties, and we do not use your financial data for advertising or cross-app tracking.

3. Device Features & Permissions

The app is designed to collect only the data it needs to function. Specifically:

• Local storage: the app stores your theme preference (light/dark), selected language, and session on your device so the app remembers your settings. This stays on your device and is not shared.
• File upload (user-initiated): when you choose to bulk-import accounts or transactions, the app reads the file you select (CSV, Excel, or supported formats) only to process the import. Files are not retained beyond the import operation.
• Notifications: if you enable optional reminders, the app may use notifications to alert you about upcoming payments or low balances.
• Internet access: used to securely sync your data with your account and load app content.

The app does NOT access or request access to: Bluetooth, the microphone, the camera, the device’s speech-recognition framework, contacts, photos, location/GPS, health data, or local network. Any iOS permission strings that may appear in the build are not used by the app’s functionality. If you are prompted for any such permission, it is not required to use the app’s core features, and you can deny it without impact.

4. How Your Data Is Stored & Protected

Your data is stored on the app’s secure hosted backend. Every record is tied to your user account and isolated from other users — no other user can see, access, or query your data. We use row-level security to enforce this isolation and transport encryption (HTTPS/TLS) to protect data in transit.

Login Vault passwords are encrypted at rest using AES-256-GCM authenticated encryption before they are written to the database. The encryption key is derived from a server-side secret that is never exposed to the app’s client code or stored alongside the data. This means that even in the unlikely event of a database breach, vault passwords remain unreadable without the key. Decryption occurs only on the server, only when you explicitly reveal or use a stored credential, and only after your identity has been verified.

While we take reasonable technical measures to protect your data, no system is perfectly secure. We recommend you keep your account password strong and unique, and you store vault credentials at your own discretion.

5. Data Sharing & Third Parties

We share data only with service providers that help run the app, and only as needed to operate those features:

• Hosting & backend: the platform that hosts the app, database, and server-side functions.
• Authentication providers: Google, Apple, Microsoft, and/or Facebook, only if you choose to sign in with one of them. Each provider receives only the data it requires to authenticate you and shares back your name and email.
• Payments: Stripe, which processes any in-app purchases or subscriptions. Stripe handles your card data directly — we receive only a transaction reference and subscription status.
• Email delivery: a provider used to send optional payment-reminder and low-balance notifications and to respond to your support requests.
• AI processing (optional): if you use the AI-assisted file import feature, the contents of the file you upload are sent to a language-model service to extract structured data. This processing occurs only during an import you initiate.

All providers are obligated to keep your data confidential. We may disclose data if required by law or to protect our rights, users, or the public.

6. Your Rights & Choices

You have control over your data at all times:

• Access & edit: you can view and update your accounts, transactions, income, expenses, and settings at any time within the app.
• Delete records: you can remove individual transactions, accounts, vault entries, or other records at any time.
• Account & data deletion: you can permanently delete your account and all associated data — including accounts, transactions, income, monthly expenses, login vault entries, and budget settings — from the Budget Settings page using the “Delete Account” option. This action is immediate and cannot be undone.
• Disable notifications: you can turn off payment reminders and low-balance alerts at any time from your settings.
• Disconnect third-party sign-in: you can revoke the app’s access from your Google, Apple, Microsoft, or Facebook account settings at any time.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. When you delete individual records or close your account, we remove the associated data from our active systems within a reasonable period. Anonymous, aggregated analytics data may be retained for product improvement but is not linked to your identity or financial records.

8. Children’s Privacy

The app is not intended for users under 13 (or the minimum age in your region), and we do not knowingly collect financial data from children. If you believe a child has provided data to us, please contact us so we can delete it.

9. Security of Login Vault Credentials

Because the Login Vault stores usernames and passwords for other websites, we apply additional protection: vault passwords are encrypted at rest with AES-256-GCM, and an audit log records create, update, delete, reveal, and copy actions on vault entries for your security. You store vault credentials at your own risk, and you are responsible for protecting your account with a strong, unique password.

10. Changes to This Policy

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above and notify significant changes within the app. Continued use of the app after changes take effect means you accept the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please visit our Contact page.