Privacy policy

Budgy is a budgeting app, so almost everything it holds is financial. This explains what we collect, why, who else sees it, and how to get it back or get rid of it.

Last updated: 7 August 2026

1. Who we are

Budgy is operated by App Shop, Miami, FL 33130, United States. For anything in this policy, write to [email protected].

2. What we collect

Information you give us

• Account details — your email address and a password, which we store only as a hash and never in a form we can read.
• Profile details — first, middle and last name, date of birth and mobile number, where you provide them.
• What you record — budgets, categories, planned amounts, labels, wallets, savings goals, notes, and any transaction you enter by hand.

Information that arrives from your bank, if you link an inbox

Linking an inbox is optional and off by default. When it is on, transaction alerts forwarded to your private Budgy address are processed, and we keep what they contain:

• the amount, currency, date and time of a transaction;
• the merchant name and the raw descriptor the bank used;
• the last four digits of the card or account, and the institution's name;
• a running or available balance, where the alert states one;
• delivery details of the message itself — its identifier, the address it came through, and routing headers — kept so a mis-filed transaction can be traced back to the mail that caused it.

We do not have access to your bank. We hold no banking credential, cannot sign into your account, and cannot see anything your bank has not emailed you. We do not sign into your mailbox either — you set a forwarding rule, and you can remove it yourself at any time.

Information we derive

• Wallets we create for you. An alert naming a card or account we do not recognise causes a wallet to be created automatically, carrying the institution and the last four digits from that alert, tied to your account.
• Categories and merchant rules. We infer which category a transaction belongs to, and remember corrections you make so the same merchant files itself next time.

Information collected automatically

• Device and push tokens, so notifications reach your phone. Removed when you sign out or disable notifications.
• Operational logs — errors, request timings and diagnostics. Email addresses are obfuscated in logs by default.

3. AI review of transactions

When a bank alert leaves a transaction's merchant or category unclear, a short extract is sent to a third-party AI provider (OpenAI) for a suggestion.

• What is sent: the merchant descriptor as the bank wrote it, the amount and currency, and the list of categories to choose from.
• What is not sent: your name, your email address, your account or card numbers, your balances, and your other transactions.
• What comes back is a suggestion. You can change it, and changing it teaches Budgy rather than the AI provider.

We do not permit this provider to use what we send to train its models. If you would rather no transaction of yours was reviewed this way, do not link an inbox — enter transactions by hand instead.

4. Why we use it

• To run the service — keep your budget, record your spending, show you where you stand.
• To import and categorise transactions, where you have asked us to.
• To alert you — the thresholds you set, by email or push.
• To keep the service working and secure — diagnose failures, prevent abuse, and trace a transaction that landed in the wrong place.
• To answer you when you contact support.

We do not sell your data. We do not share it with advertisers. We do not use your financial data to market anything to you.

5. Who else processes it

We use these providers, each only for the purpose named:

• DigitalOcean — application hosting (United States).
• Supabase — the database your data is stored in (United States).
• OpenAI — the transaction review described above (United States).
• Google Firebase — push notification delivery.
• Google (Gmail/SMTP) — sending our email, and receiving forwarded bank alerts.
• Better Stack — operational logging and alerting.

We may also disclose data where the law requires it, or to establish or defend a legal claim. If the business is ever sold or merged, your data may transfer with it, and we will tell you before that changes anything in this policy.

6. Where it is stored

On servers in the United States. If you use Budgy from elsewhere — including Jamaica — your data is transferred there and handled under this policy.

7. How long we keep it

• Account and financial records — for as long as your account exists.
• Mail delivery records — a short retention, long enough to diagnose an import that went wrong.
• Operational logs — a rolling window, then discarded.
• After you delete your account — deleted or anonymised, other than anything we must keep by law.

8. Your choices and rights

• See and correct — everything Budgy holds about your money is visible in the app, and editable there.
• Stop the import — pause or unlink an inbox at any time. Unlinking revokes the address, and mail sent to it afterwards is discarded.
• Turn off notifications — in the app, or in your phone's settings.
• Delete your account — from the app, or by writing to [email protected].
• Ask us for a copy, or ask us to delete something specific, at [email protected].

Depending on where you live you may have further rights — to object to processing, to restrict it, or to complain to a data protection authority. Write to us and we will help.

9. Shared budgets

Sharing a budget shows the other person that budget's plan and the transactions filed against it. We cannot un-share what someone has already seen. Revoking access stops them seeing anything further.

10. Security

Connections are encrypted in transit. Passwords are stored only as hashes. Access to production data is limited to those who need it. No system is perfectly secure, and Budgy is under active development — please do not treat it as your only copy of anything that matters.

If you believe you have found a security problem, write to [email protected] rather than posting it publicly.

11. Children

Budgy is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will remove it.

12. Changes to this policy

We may update this policy. If a change materially affects how we handle your data we will tell you in the app or by email before it takes effect.

13. Contact

App Shop, Miami, FL 33130, United States · [email protected] · Terms of Service