Privacy Policy

Welcome to BudgetPal ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us.

This Privacy Policy applies to all information collected through our mobile application ("App"), website, and any related services, sales, marketing, or events. By strictly adhering to GDPR and CCPA standards, we ensure your rights are respected regardless of where you live.

A. Information You Provide to Us

• Account Data: Name, email address, and password hash when you create an account.
• Financial Data: Transaction history, budget goals, account balances, and recurring subscription details that you manually enter or sync.
• Customer Support: Data you provide when you contact us for help.

B. Information Automatically Collected

• Device Data: IP address, device model, operating system, and unique device identifiers (which we use for security and fraud prevention).
• Usage Data: Interaction logs, feature usage, and error reports to help us improve the App stability.
• Payment Data: We do not store your credit card details. All store purchases are processed via Apple App Store or Google Play Store.

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

We do not sell your data to third parties. We only share information with the following categories of third parties to facilitate our services:

Note: We may also disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

We act as a "Local First" application where possible, meaning much of your data resides solely on your device until you choose to sync. When data is synced:

• Encryption in Transit: All data transferred between your device and our servers is encrypted using TLS 1.2+ (Transport Layer Security).
• Encryption at Rest: Data stored in our cloud databases is encrypted using industry-standard AES-256 encryption.
• Access Control: Strict role-based access controls limits who can access internal systems.

While we have implemented significant security safeguards, be aware that no security system is impenetrable. We cannot guarantee that information, during transmission through the Internet or while stored on our systems, will be absolutely safe from intrusion by others.

Depending on your location (e.g. EEA, UK, California), you may have specific rights regarding your personal information:

California residents granted rights under the CCPA may also request "Do Not Sell My Personal Information" compliance, although we do not sell data.

You have full control. You can delete your account and all associated data at any time directly within the application settings.

Our Services are strictly for users aged 18 and over. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

If you have questions or comments about this policy, you may email us at: