Privacy policy

Who we are

Budget Agent is run by Bohdan Razhyk, a sole trader in Poland, who decides how your data is used (the controller). Write to bohdan.razhyk.support@gmail.com, or through the form on the Help page, about anything in this policy.

What we keep

Your account: name, email address, a hash of your password, language, currency and budget; your plan and any plan given to you, with the reason; and, if you turn on two-factor sign-in, its encrypted key and the hashes of your recovery codes.

What you add: receipts and what is read from them — shop, date, items, amounts, categories — the trips, goals, rules and household you set up; and the income you enter and the balance you start from, which no household member sees. Receipt photos and forwarded e-receipts are kept as files.

If you write to us through the contact form on the Help page, your address and message are mailed to us to answer you; the service itself does not keep them.

If you sign in with Google or Apple, we keep which account at that provider signs in to yours and the address it gave us — with Apple, possibly its private relay address. With Apple we also keep, encrypted, the token that lets us tell Apple when you delete your account. We never receive your Google or Apple password.

Why

Only to provide the service you signed up for: reading receipts, keeping your budget and sending letters about your account (confirming your address, resetting your password). Request logs and IP addresses are kept to keep the service secure and working. Nothing is sold, shared for advertising or used for anything else.

When you are signed in, the service also records what you do in it — signing up, confirming your address, signing in, using it on a day, adding a receipt, exporting — with the time and nothing more, to run and support the service and to know whether it is used. It never records what your receipts say. Visits to the public pages are only counted, by page and the site you came from, with nothing that could say who you are.

Reading receipts with AI

Receipt photos and names are read and categorised by an AI model, and a payslip or transfer you send as income is read by it too — that document is not kept, only the amount, date and payer you confirm. It only turns what is printed into figures you can check and correct; it makes no decision about you with legal or similarly significant effects. The assistant answers what you write or say with the same model; your conversations are kept until you delete them or your account, and it never changes anything until you approve its card. When you speak to it, the recording is sent to us and recognised by Google Cloud on our behalf; neither we nor Google keep it, and only the words you then send become part of the conversation. Nothing goes to the model until you allow it in the app; you can withdraw that in Settings › Data, and the AI features then wait.

Where, and who processes it

Everything is stored and processed on Google Cloud in the USA (region us-central1): the server, the database, file storage, incoming mail and the AI model that reads receipt photos (Vertex AI Gemini, which does not train on your data). Google processes it for us under its Cloud Data Processing Addendum; the transfer to the USA rests on the EU-US Data Privacy Framework and standard contractual clauses. Letters we send you (confirming your address, resetting a password, invitations) go out through Resend, in its EU region, which receives your address and the letter only to deliver it, under its data processing agreement.

How long

Receipt photos and forwarded files: 90 days, then storage deletes them — the figures read from them stay. Export files: 7 days. Request logs: 30 days. Everything else: until you delete your account; database backups hold it for at most 7 more days. A message through the contact form stays in our mailbox as long as answering it needs. The record of what you do in the service: 12 months. What an administrator did on your account (for example, granting a plan or sending you a link) is logged; when you delete your account, the log no longer says whose it was.

Cookies and what is kept on your device

Budget Agent sets no cookies and loads nothing from other websites: no trackers, no advertising, no third-party fonts or widgets.

Your browser keeps only what the service needs to work, or what you chose: your sign-in session and account details (so a reload does not sign you out), the theme and language you picked, the period and order you set for the receipts list, how you chose to draw the spending chart, hints you closed, when the store app last asked you for a rating, and the app's own files so it opens quickly and offline. Because each is strictly needed or set by you, no consent is asked for them. Signing out removes the session; clearing the site's data in your browser removes all of it.

If we ever add something that needs your consent, we will ask before it runs.

Signing in with Google or Apple takes you to their own page and back; for that one trip the browser keeps a random check that the answer is for the sign-in you started, and forgets it when the tab closes.

Your rights

In Settings you can download everything held about you in one archive, and delete your account with all of it. You can correct any receipt and any profile field at any time. Under the GDPR you may also object to processing or complain to your data protection authority.